last executing test programs:

2.02328938s ago: executing program 1 (id=3732):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x27, 0x0, 0x0, &(0x7f0000000700)=""/176, 0xb0}}], 0x40000000000012f, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @private=0xa010101}, {0x1}, 0xe, {0x2, 0x4e21, @broadcast}, 'bridge_slave_0\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000001c0005800cdfb9785861796c6f6164000c0002800800074000c296000900010073797a30000000000900020073797a32"], 0xa8}}, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
openat$cgroup_pressure(r4, &(0x7f0000000300)='cpu.pressure\x00', 0x2, 0x0)
unshare(0x22020600)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4)
accept4$ax25(r5, &(0x7f0000000500)={{0x3, @null}, [@remote, @null, @bcast, @null, @rose, @remote, @default, @netrom]}, &(0x7f0000000480)=0x48, 0x180000)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESHEX], 0x58}}, 0x60c4)

1.859052023s ago: executing program 1 (id=3735):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x14, "4372070000000000476fb2940acfbe4c3f9725f0"}})
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @mcast1}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x5c}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000140)=0x1f, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r8=>0x0})
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$unix(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000001c0)={0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}})
setsockopt$sock_int(r11, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r11, &(0x7f0000001140), 0x74e, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})

1.675981637s ago: executing program 1 (id=3739):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f0000000340))
recvmmsg$unix(r5, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x989680})
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r11=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r11, 0x62}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={0x0, 0xffff0001, 0x42, 0x1, 0x8, 0x8001, 0x100, 0x6, {r11, @in={{0x2, 0x4e21, @empty}}, 0x7fff, 0x80000000, 0x3, 0x80000000, 0x1ff}}, &(0x7f0000000440)=0xb0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'veth1\x00', <r15=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.481493672s ago: executing program 0 (id=3742):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x50, r0, 0x7fe96000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0xffffffff}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x8040000)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
syz_80211_join_ibss(&(0x7f0000000180)='wlan0\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={@multicast2, 0x1, 0x0, 0x50, 0x0, [{@broadcast}, {@private}, {}, {@local}, {@empty}]}})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044045)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd8, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x10000000}, @CTA_ID={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x3]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_NAT_SRC={0x94, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x4004884)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r6=>0x0})
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000640)={0x9, [0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000680)=0x28)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000006c0)={r8, 0x5}, 0x8)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r5)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r9, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x41)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan1\x00'})
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r2)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x64}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc4}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
r12 = accept4(r11, 0x0, &(0x7f0000000a40), 0x80000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000a80)=@assoc_value, &(0x7f0000000ac0)=0x8)
getsockopt$bt_BT_VOICE(r12, 0x112, 0xb, &(0x7f0000000b00)=0x3, &(0x7f0000000b40)=0x2)
syz_init_net_socket$ax25(0x3, 0x2, 0xf5)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000c80)={&(0x7f0000000b80)=""/197, 0xc5})

1.370844489s ago: executing program 1 (id=3745):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockname$l2tp6(r1, 0x0, &(0x7f0000000400))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = epoll_create1(0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000100)={0x2})
socket$nl_generic(0x10, 0x3, 0x10)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)={0xa0000000})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200007bfdffff00000000000076000085000000a00000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe1)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0xfff}, 0x1c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000000300)="b901037f007bc433f39e0ff088a81fffffe1000040fa4b7f3c7ab77e423bcd9db7258f", 0x0, 0x106, 0x6000000000000000, 0xbf, 0x0, &(0x7f0000000500)="9209558f0c6c77150e7f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d48c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688", 0x0, 0x1}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000206010100000000000000000000000004000780050001000600000005000400020000000900020073797a31000000000c0003006861736856697000"], 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x8000000)
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0)
recvmmsg$unix(r8, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x10}}, 0x14}}, 0x0)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a)

1.291115341s ago: executing program 0 (id=3747):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x200}, 0x8)
close(0x3)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)

1.28908832s ago: executing program 0 (id=3749):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x8050)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_type(r5, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r6)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', <r8=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r7, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=<r9=>r8, @ANYBLOB="9800028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f616463617374000000540001002400"], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10)
syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x4d, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x5, 0x9, "9fb1cba8c0b994ad02f7e6dcc1a0ab99075401bda695d35604593efad6f18184b2b4089582ac8058aba59e5eee34f698e7626c0f48"}}}}}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000070000000000000000000000000095f70a31cb100aec45e9735f402c698ce1d883ece9d6a1cff494914de9cbbc5068ac43690558647b74e9c2a2a3c507da944d13e5c9a3a7aad4bd9e25e76605f5ecf295fff1850f7c6462221184d2bc5fd1517a813ac6a8e6fb5fdf485e6a9ea8f53e020c679f4a00000000ef5c4e2cd9d0d57cb554dddf595d026f0fb58a2a912463b17239b5e1ed1a6ac4b18cc11818faf832f6c2efa60252a9ad8390b496b77cde8c725f89564207", @ANYRES32=0x0, @ANYRESHEX=r9, @ANYRES32=r12], 0x3c}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x12160)

1.07129386s ago: executing program 0 (id=3752):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b1f00000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800812000000a000100aa"], 0x48}}, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket(0x28, 0x5, 0x0) (rerun: 32)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0) (async, rerun: 32)
r2 = socket(0x28, 0x5, 0x0) (rerun: 32)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000001880)=0x5, 0x4)
sendmmsg$alg(r2, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="0876a9", 0x3}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/73, 0x49}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000440)=""/185, 0xb9}, {&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f0000001740)=""/137, 0x89}], 0x8, &(0x7f0000001800)=""/4, 0x4}, 0x10000) (async)
recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async, rerun: 64)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000018c0)={0x0, @l2tp={0x2, 0x0, @local}, @hci={0x1f, 0x4, 0x6}, @hci={0x1f, 0xffffffffffffffff, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)='syz_tun\x00', 0x186, 0x9, 0xffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0)

536.357993ms ago: executing program 1 (id=3758):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000810003c3bfa300000000000007030000f0ffffff720af1fff8ffffff71a4f0ff0000000065040200000000ff2d400400000000003400000001ede4ff7b1300ff000000001d440100000000007a0a00fe00ffffffdb03000040000000b500f7ff350900009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4fc2495f74baaa876156de9078d687348ef1e50becb19bc461e94f4061cff1db39271a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cd90eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a950812d7aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031bc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d86047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a97429ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10ef454c7702c98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x8, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0xc101)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'batadv0\x00', 'lo\x00'}, 0x0, 0xf0, 0x138, 0x0, {0x0, 0x4c00}, [@common=@dst={{0x48}, {0x0, 0x0, 0xbce0257315b3f3d6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000e40)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "eb8f2777c39a00", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x4, &(0x7f0000000100)=@gcm_128={{0x303}, "87edde4a09f553de", "0000000061bd30762c8d9b181776dee6", "c5647869", "07908fa15101785b"}, 0x28)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90)

387.278664ms ago: executing program 2 (id=3760):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
r0 = socket$kcm(0x2, 0xa, 0x2) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001811000014d08a901c8cbb2cca0010000000000000ca4d4a631167ba0421c4f9a367c1bbaa7db9e2111fdbabe5beeed7a7096cbf594c03d3a262a5988399f4257702e64e8573145b510730249f9a114276ceba51884bcd14c647ff7a7dcf868e2f9cae62ab32cd20e892770ac1e1", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb02f8180000000000005e34000000000000fc"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28)
r4 = socket$kcm(0x10, 0x3, 0x10) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x99, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='ext4_ext_remove_space\x00', r5}, 0x18)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r6) (async)
socket(0x23, 0x5, 0x0) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) (async)
r8 = socket(0x2c, 0x3, 0x0) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r8}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp=r8}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r0, &(0x7f0000000400)="3704004879c00f"}, 0xf) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"})
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @local}, 0x3ff, 0x0, 0x2}}, 0x2e) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x254}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

386.862588ms ago: executing program 2 (id=3761):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x40000008, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 32)
getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000040)) (async, rerun: 32)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000100)={@empty, @broadcast, 0x0, "dcb1b8e37c2c53a25baaefb40190916d075589cdaa8480950b044e9ba1ccbe46", 0x4b6, 0x9, 0xfffffe00, 0x3}, 0x3c) (async)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031500000010000008000a00", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3, @ANYBLOB="140012800b0001006d61637365630000040002800a000100aa"], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

372.64674ms ago: executing program 1 (id=3762):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b6861"], 0xfdef)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042a", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c00028005"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0xbd)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="c073af595cc619ee44fb4d18c8461bf91e0e2266525d449d5bb89640f00fb1fb32276730786de8cf4d88650bc5be18b9f9fc8f4964d58d48c9787e12dad6fcab72e929d8c268003f581beaffc473b75787296cc26d4c68c711545d2191be24f752940dd16a63639b21ee70a3", @ANYRES64=r5, @ANYBLOB], 0x44}}, 0x4082)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a50000000060a0904000000000000e300020000000900020073797a32000000000900010073797a30000000001c000480180001800e000100696d6d6564696174650000000400028005000740d1000000140000001100010000000000000000020000000a"], 0x78}}, 0x0)

261.297568ms ago: executing program 2 (id=3763):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x2) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) (async, rerun: 64)
getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=<r10=>r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 64)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r11, @ANYRES32=r11, @ANYBLOB='/\x00\x00\x00\b'], 0x20) (async, rerun: 32)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (rerun: 32)
getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=r10, @ANYRES32=r1, @ANYBLOB, @ANYRESOCT=0x0], 0x3c}}, 0x0)
r12 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r12, 0x65, 0x4, &(0x7f0000000080), &(0x7f0000000180)=0x4)

260.612466ms ago: executing program 2 (id=3764):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvfrom$rose(r1, 0x0, 0x0, 0x9637f83aea13cb50, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5a}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000080)=ANY=[], 0x190)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000094a4a45fa44a61", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$can_raw(r7, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={0x0}, 0x1, 0x0, 0x0, 0x40000511}, 0x80)
recvmmsg(r8, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}, 0x6000}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x140, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0xfff, 0x7}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_getaddr={0x34, 0x16, 0x200, 0x70bd28, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x36, r3}, [@IFA_LABEL={0x14, 0x3, 'sit0\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x24000000)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$inet(r9, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000000000000000000000700000001440e05"], 0x20}}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

151.208726ms ago: executing program 0 (id=3765):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000001500)={r9, 0x8000}, 0x8) (async)
getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r9, &(0x7f0000000080)=0x4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004340)={'netdevsim0\x00', &(0x7f0000004300)=@ethtool_pauseparam={0x13, 0x0, 0x9, 0x2}})

71.806141ms ago: executing program 2 (id=3766):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)=@newsa={0x180, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x16}, {@in=@private=0xa010102, 0x0, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x6}, 0x70bd2a, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x24000058)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)='%-010d \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r5, &(0x7f00000003c0)="9b3d524535782c32bc635df11643b5ed82feba1e966af97a8f2f7c2f4ef29e4cc4403d3c7c1bb48b4c8e2c01f6feb12db525e135e4d45b788db31919ba7e1bee2338db16c31f8b5e4ad63bf0d264961cef7c51b6a08240a6f73e88", &(0x7f0000000440)=@udp=r3}, 0x20)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x800000000000000}, 0x0)

469.459µs ago: executing program 2 (id=3767):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff00008200"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x31}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005580)=@newtaction={0x1bac, 0x30, 0x25, 0x0, 0x0, {}, [{0x1b98, 0x1, [@m_skbedit={0x130, 0x2, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xad, 0x4, 0xffffffffffffffff, 0x2, 0x6}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000001, 0x3ff, 0x6, 0x3ff}}]}, {0xd4, 0x6, "22c75d81cbfbeab103e72add549174b564d5892bfff46e198509a2fbaf3cb3c5c111bd90d8c5d4aee626e90c78b2fa81ab0d85873a09dfa2f61f29bf036554d3f10b5fdd3671632debef44224d9b2b66c5e7e29e0ec8a1243d34e9ea83ca567f3e0d8bf2fa46ce198d65069e630a6f628bb07aaf017f0eeaa863f735cecf8072f44ed2ec7796c1c2dfbbd2213fc67a0f234dac57fcce6df659e08b85886c3598f9fdfaf0fbe3234d3fee9f0e276d374d03f0062d34e2591b227fceadc751fefcd3358bc0f896c391eb202f6f0697a19b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x11b8, 0x8, 0x0, 0x0, {{0xb}, {0x1130, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x6, 0x8, 0x80, {0x4, 0x1, 0x5, 0x6, 0x1, 0x4}, {0x4, 0x0, 0x7f, 0x8, 0x8, 0x3}, 0x8000, 0x0, 0x7ae}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xdaae2a3fe3f0efb6, 0x8, 0x0, 0x80000000, {0x4, 0x1, 0x4, 0x6, 0xfff1, 0x10001}, {0x4, 0x2, 0xe, 0x8, 0x5, 0x8}, 0x0, 0x5, 0x9}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2bca, 0x6f4, 0x29b, 0x3, 0x5, 0x101, 0xffffffff, 0x4, 0x7, 0x0, 0x8, 0x2, 0x2, 0xa30d, 0x1, 0x200, 0x8, 0x1, 0x7, 0x8, 0x3, 0x4c4, 0xf, 0x6, 0x9, 0x5, 0x7, 0x5b11, 0x27f, 0x22, 0x1, 0x8, 0x3, 0x5, 0x8000, 0x1, 0x6, 0x4, 0x7f, 0x7, 0x1ff, 0x9, 0x800, 0x7, 0xfae6, 0xa, 0x5, 0x2, 0x6, 0x59d, 0x3, 0xff, 0x2, 0x80000000, 0x1, 0x6, 0x1, 0xa, 0x9, 0x4, 0x3, 0x10001, 0x9, 0x7, 0x71e7, 0x7fffffff, 0x6, 0xd9, 0x6, 0xbd, 0x40, 0xc7, 0x9, 0xffffffff, 0x0, 0x3, 0x68c62730, 0x8, 0x1ff, 0x3, 0x5, 0x6, 0x0, 0xa5, 0xfad, 0x2, 0x3, 0x4, 0x3, 0x6, 0x5, 0x8, 0xb605, 0x459, 0x4, 0x1c63, 0xc21a, 0x6, 0x3, 0x10000, 0x9, 0x2, 0x7063, 0x2, 0x7ff, 0x7, 0x4, 0x3, 0x9, 0x81, 0x3, 0x6, 0x7, 0xc1d, 0x0, 0x1, 0x80, 0x0, 0x4, 0x9, 0xde7, 0x8, 0x9, 0xe7ca000, 0xc, 0xffff6b9e, 0x1ff, 0x7, 0xa9, 0x200, 0x1, 0xffffffff, 0x8, 0x600, 0x8, 0x0, 0x4, 0x6, 0x8001, 0x10000, 0x3926, 0x8, 0xe, 0x7, 0x2, 0x7, 0x6, 0x8, 0x1, 0x8, 0x0, 0x9, 0x6, 0x10, 0x64, 0xfffffff8, 0x6, 0x8, 0x8, 0x3, 0x8, 0x7ff, 0xdfe, 0x7, 0x3, 0xeee6, 0x3, 0x0, 0xffffffff, 0x73f, 0x5bdc, 0x1ff, 0x7, 0x1, 0x8, 0xcbc, 0xd5, 0xbb5d, 0x7, 0xa7, 0x6, 0x8, 0x4, 0x9, 0x9, 0x0, 0xfffff6d9, 0x4, 0xf, 0x10, 0x1, 0x2ec4e4d, 0x5, 0x5, 0x9, 0x6e9, 0x16, 0x6, 0x7d, 0xd6d, 0xaf7, 0x2, 0xea, 0x21c82141, 0x3, 0x0, 0x80, 0x6, 0x3c8e, 0x2, 0xd, 0x5, 0x1, 0x5, 0x2, 0xfffffffd, 0x1e78, 0x8, 0x4, 0x4, 0x0, 0x7dad, 0x7, 0x5, 0x7, 0x21, 0x5, 0x0, 0x2, 0x4, 0x5, 0x500, 0x4, 0x7, 0x7, 0xd, 0x10001, 0x8, 0x7, 0x4, 0x3, 0x80, 0x8, 0x10001, 0x68e266d4, 0x0, 0x10, 0x13160b64, 0xc, 0xd, 0x4, 0x10000, 0x2, 0xa6, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x189}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x100, 0x700, 0xa, 0x9a86, 0x6, 0x0, 0xf67b, 0x0, 0x6, 0x9, 0x9, 0x400, 0xa, 0x9, 0x2, 0x7, 0x9, 0x8e, 0x6, 0x8001, 0xadb, 0x3, 0x10000, 0x6, 0x4000, 0x8, 0xb93, 0xf5f0, 0x8001, 0x9, 0x401, 0x3, 0x9, 0x0, 0x8, 0xbc, 0x4, 0x0, 0x1ff, 0x3c68, 0xb, 0x2399, 0x5, 0x5f, 0x6, 0x3, 0x3, 0xc, 0x1, 0x7, 0x0, 0x1, 0x446a, 0x4, 0x9, 0x8, 0x8, 0x8, 0x3, 0x8001, 0x400, 0x8, 0x8001, 0x6c15cd4b, 0x5, 0x9, 0xf7, 0xf85, 0x7, 0x0, 0x1, 0x9, 0x5, 0x7ff, 0x101, 0x6, 0x5, 0x5, 0x2, 0x3, 0x200, 0x6, 0x31, 0x7, 0x1, 0x1, 0x8001, 0x5, 0x1, 0x8000, 0x7, 0x8, 0x9, 0x80, 0x1, 0x200, 0x3, 0x7, 0x383, 0x0, 0xfffffff7, 0x5, 0x5, 0x2b93, 0x3, 0x2, 0x1, 0x8, 0x7, 0xc9, 0x5, 0x4, 0x0, 0x6, 0x8, 0x21, 0x8, 0x0, 0x1ff, 0x1, 0xa249, 0xc, 0xfffffffe, 0x9, 0x8000, 0x0, 0xffffffff, 0x8, 0x7fffffff, 0x400, 0xfff, 0x401, 0x5, 0x9, 0x400, 0x7f0000, 0x10000, 0x7, 0x6, 0x60, 0x8, 0x7, 0x101, 0x3, 0x10000, 0x8001, 0x85, 0x8, 0x39b7, 0xeff5, 0x2, 0x8, 0xf613, 0x2, 0x0, 0xb9cf, 0x81, 0xf23c, 0x9, 0x5, 0x462, 0x0, 0xcac, 0x2, 0x8, 0x8000, 0xc9, 0x7, 0x5, 0xc57, 0x7f, 0x3, 0x2a2a, 0xd, 0xfffffffa, 0xb4b, 0x4, 0x8ff, 0x8, 0xffffffff, 0xce, 0x5, 0xff, 0x8, 0x7cd, 0x9, 0x1, 0x8, 0x9, 0x72, 0x0, 0x1, 0xfffffffa, 0x10000, 0xfffffff8, 0x5, 0x0, 0x9, 0x7, 0xee, 0x60a, 0x3, 0x40, 0x6, 0xfa, 0x80000000, 0x12, 0x1ff, 0x7, 0xfffffffd, 0xd9, 0x2, 0x3ff, 0x3, 0xf, 0x7, 0x2, 0xf733, 0xea6b, 0x3, 0x7, 0x9, 0x0, 0x7fffffff, 0xa48, 0x9, 0x6, 0x4, 0x8000, 0x2, 0x0, 0x6, 0x0, 0xfffffff9, 0x3, 0x7, 0x401, 0x7fff, 0x400, 0x0, 0x52, 0x7, 0xffffff3f, 0x7, 0x3, 0x1, 0x3, 0x703, 0xffffff7c, 0x3, 0x2, 0x2, 0x92a, 0x3, 0x5]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x0, 0x1, 0x7, 0xbfd6, 0x1ff, 0x3, 0x5, 0x5, 0x9, 0x91, 0x1, 0x81, 0x4, 0x200, 0x8, 0x9, 0x6, 0x1ff, 0x8, 0xef9f, 0xff, 0x0, 0x1, 0xa0, 0x4, 0x3, 0x4, 0x2e, 0xe3ec, 0x558d, 0x7, 0x44, 0x3, 0xd, 0x1, 0x8, 0x400, 0x8, 0x3, 0xa, 0x40, 0xd60, 0x2606, 0xa, 0x6a0, 0x2, 0x4, 0x2, 0x2, 0x3, 0x1011, 0x10000, 0xfffffffe, 0xe7800000, 0x6, 0xeb, 0x100, 0x9b, 0x3, 0x1, 0x4, 0xfffff05a, 0x6, 0x7a2d, 0x5, 0x4, 0x9, 0x3, 0x9, 0x7, 0xffffffff, 0x7, 0x3, 0x2, 0x6, 0x0, 0x7, 0xfff, 0x3, 0x8, 0x1, 0x2, 0x7, 0xd, 0x80, 0x5, 0xfe, 0x3, 0xcd97, 0x3, 0xffff0000, 0x5, 0x800, 0x4, 0x7f, 0x9, 0xd9b, 0x1, 0x8, 0x7, 0x9, 0x6, 0x4, 0x1, 0x7, 0x5, 0x1, 0x480, 0x1f6, 0x1, 0x2, 0x6, 0x76, 0x100, 0x1162, 0xffffff65, 0x2, 0x2, 0x2, 0x6, 0x6224, 0x9, 0x8, 0x2, 0x4, 0x0, 0xe7c1, 0x1, 0x9, 0x8, 0xc, 0x8, 0x7ff, 0x3, 0x8, 0x0, 0x0, 0xfffff000, 0x9, 0x0, 0x6, 0xe494, 0x7, 0x2609c406, 0x4, 0x9, 0x6, 0x9436, 0x3f3a, 0xff, 0x4, 0x6, 0x346b, 0x0, 0x2, 0x6, 0x8, 0x2, 0x8, 0x81, 0x60e, 0x1, 0x10001, 0x8, 0x8, 0x6, 0x35, 0xee, 0x4, 0x9, 0x0, 0xc, 0x26c, 0x848, 0x0, 0xffffffff, 0x840d, 0x81, 0x345, 0xe, 0xe000000, 0x3, 0x0, 0x0, 0xfff, 0x8, 0x9, 0x1, 0x3, 0x6, 0xed, 0x168b, 0x2, 0x3, 0xfffffe00, 0x32cb, 0x2, 0x5, 0x1, 0x3, 0x8, 0xe, 0x40000, 0xf, 0x81, 0x4, 0x34f, 0x4, 0x577a44b7, 0x2, 0x5, 0x800, 0x10001, 0x5, 0x9, 0x5, 0x3, 0x6, 0x5, 0x2, 0xab2, 0x6, 0xb21, 0x4, 0x1, 0x3, 0x0, 0x7, 0x7, 0x5, 0x8, 0x4, 0x8, 0x80, 0x7, 0x7f, 0xfea, 0x10000, 0x7, 0x58e, 0x3, 0x8, 0x601, 0x291b, 0x5, 0x7, 0x40, 0xfff, 0x2, 0x80000001, 0x5, 0x8, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x7, 0xfffffffc, 0x5, 0x5, {0xf8, 0x1, 0x3, 0x1, 0xcfa5, 0x8001}, {0x0, 0x0, 0x9, 0x100, 0x5, 0x7}, 0x0, 0x9, 0x1ff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0xfffffffa, 0xff, 0x3, 0x4f76, 0x65, 0x2c7, 0x8, 0xd, 0x8, 0x62fb, 0x5, 0x1, 0x240, 0x30, 0xc00000, 0x2, 0x586, 0x8, 0x8000, 0x1f9, 0x1a1, 0x2, 0x720000, 0x8000, 0x329f9cea, 0xd6, 0x0, 0x3, 0x2, 0x7, 0x1, 0x8001, 0xffff, 0xe0a, 0x8, 0x8, 0x8, 0x3, 0x101, 0xfffffeff, 0x10000, 0x3ec, 0x2, 0x4, 0x6, 0x4, 0xbf3, 0xd5, 0x4, 0xfffffff0, 0x9, 0x1, 0x7, 0xc33, 0x7fffffff, 0x81, 0xd08, 0x9, 0x1, 0x400, 0x2, 0x1, 0x400, 0x6, 0xe, 0x6, 0x5, 0x9b, 0x4, 0x7, 0x0, 0x6, 0x0, 0x2ca, 0x4, 0x1, 0xd0, 0x1, 0x6, 0x9, 0x8, 0x80000001, 0x8, 0x3, 0x2cd, 0x80000000, 0x0, 0x2, 0xc, 0x0, 0x2a, 0xf4e, 0x80000000, 0x5a9, 0x7, 0x9, 0x47, 0x4, 0x3, 0xfffffff7, 0x1, 0xb420, 0xc7c, 0x8, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x2, 0x400, 0x200, 0xffffff7b, 0xcf, 0x9, 0x9, 0x0, 0x9, 0x1, 0x8, 0x7, 0x0, 0x81, 0xb, 0x10001, 0x0, 0x2, 0x4, 0x100, 0xa6, 0x40, 0x39, 0xe, 0x14e, 0x9, 0x6, 0x6e0d, 0x0, 0xfff, 0xa20e, 0x337a, 0x6, 0x6, 0xfffffff7, 0x98, 0x61b9, 0x0, 0x0, 0x1ff, 0x2, 0x4ab, 0xab0, 0xc, 0x8c6, 0x80000000, 0x8001, 0x1, 0xa0, 0xaf, 0x9, 0x1c8000, 0x8001, 0x80000001, 0x400, 0x7, 0x8000, 0x7fff, 0x5, 0x9, 0xfffffef8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x9, 0x9, 0xff, 0x0, 0x5, 0x9, 0x0, 0x4, 0xff, 0x26, 0x5, 0x6493346e, 0x8, 0xfffffff2, 0x0, 0x7, 0x7, 0x0, 0x54, 0x7, 0x3, 0xe19, 0x7f, 0x3c0, 0x55e0, 0x0, 0xc8, 0xfffffffa, 0x3ff, 0x1, 0x6, 0x0, 0x8, 0xd, 0x4, 0x26a, 0x6, 0x2, 0x3, 0xc, 0x7, 0x8, 0x7, 0x4, 0x4, 0x9, 0x6c7, 0x7ff, 0x7, 0x101, 0x80000000, 0xffffff00, 0x1, 0x0, 0x7, 0x5, 0x582, 0x8, 0x9, 0x1000000, 0x157b, 0x5, 0x7fffffff, 0x9, 0x10000, 0xfffffffa, 0x5, 0x3, 0x101, 0x2, 0x2, 0x400, 0x4, 0x9, 0x664, 0x7ff, 0x6, 0x6, 0x10001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xbd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x5d, 0x6, "2d2b163cd91840693b217260fb4cc46d2ca82b5bff9bc85698b02455214aee5076b789f27dad23a3ad0edc569f7ec84f278c13a106e1a252a6a12b171024f1ba2f1eadb36789abc427252cb48740fa2f3a92d9fe37b67f128e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xc4, 0x18, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9a, 0x7, 0x6, 0xfffffffb, 0x8}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x6, 0xd, 0x5}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xffff}, @TCA_IFE_SMAC={0xa, 0x4, @random="ed9f96a2845d"}, @TCA_IFE_DMAC={0xa}]}, {0x44, 0x6, "4d382d35c44438dad6cfd2f8d175a67d29be458d85d41013b52f64fae5723d2d9c38e5eb1b1f36b9092748d2aa174cdf291d7b4ec7193d444f108a558531a109"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xa8, 0x1d, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x80000000, 0xffffffffeffffff8, 0x6, 0xffff0000}}, @TCA_DEF_DATA={0x6, 0x3, '+\x00'}]}, {0x5b, 0x6, "ace8ce0b70ce2360b82d7a473ddc4bfb43561f0775290e9fb2870c3b82f3e3f0d1f222a838acdd23ea92383632a953a526de0bb8db1d7c757be393e47890b7a69bd6526e334b5cf46fed11e081b947a26cd7d817582b90"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x190, 0x1b, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x10, 0x10000000, 0xe112, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x7, 0x80000001, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x475}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0xfc, 0x6, "04ec4381ea96e5a1571f187e0d1ac73aa06e98aa6430bd8b8e8d415c264cb0c4a5ac91151d3713dc0ea620a8b09a21543311a7f5b31eb5c485a67729836cc95c79423030669005c6f3a358340e7337634845b5e9ea839b71220044b7ea0e29886bd3558dfb8f9d9b5c6e97e4cc1d90bf5f4f26c51a928608863a79374b7047d1f739ae92ac5fa8246c25e4229f207939a95cf1de19bf4b0d366101113882b18b52b0ff3de9d7a8dce04a78b6bb51231350c3f5e06839d949189ba11474cefc945567b66d23101bd454c9314fff6a32852de96861fc28a0e2c410de14c7fe866c8e6c71addf34dc6aa595782171c74a58833ea1ee8b8ee629"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x174, 0x1b, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xb, 0x6, 0x0, 0x6}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x3ff, 0x80, 0x5, 0xfffffff7}, {0x7ff, 0x6, 0xbe, 0x6}, {0x3, 0x73, 0x4, 0xffffff7c}, {0x5, 0x96, 0x93, 0x132}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0xe, 0x8, 0x1}, {0x7, 0x97, 0x4, 0x5f3a}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3726, 0xb, 0xe, 0x89}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9e, 0x2, 0x20000000, 0x1, 0x97}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0xa5, 0x6, "1b3eb80730f851d62d96a5507214d6956d640bb2fffffba4ef1a4e8c99db98bef6915485b45c5b6ab872aecda1d87bd6626c194a56ce758182f8d6dfdfbfe2f6f0b2657c34e4c0e0126dcba4d2b8125cd2954a46d5369d8750d95dd3a87839de1c3354cdc61ca22b2e68f915af3cede7e04ea639e34bcdf91697afe2bafc4ca16f3e28821965b39c8d42047644bfcf27f2e34d523fd6031d39c05d153c43af1015"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xb4, 0xb, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xfff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x76, 0x6, "3f94de5ad10aef075c3f14a1effb857e6bb667e949fc6fdc9c523b97a44ecc325e49255ae0a792bfde7b730f16116973bd79d8b1dc76170805314f996d577a16480b431ae4a9e32cf8af7367fc34f3be92f9c4f3091a43940342c8b1eab0025222b161768b1ea71c9eb80932238bafb16672"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xcc, 0x10, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6004}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4856e}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0xf}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7f, 0x7fffffff, 0x20000004, 0x4}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88e5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x41, 0x6, "c06e3739309b02ee8b8eaa44d2fd5ee19b3b3e0bd84fc4392f756489c7b974eb0dc4653f7d8ac15a247c193d970ed11383b1da2b29056ef50c54c4f3f3"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x14c, 0x20, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcf4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x4d4c, 0x1, 0x9, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x44d}]}, {0xf3, 0x6, "1a5dd7a4605f61ffa6edd7fc2c8331083a3b5ab7861ac04c805b2c0b119ff3747801b3b0327d853fa641797ba19b94ff46179d72823e61248d7320a25c36f9adab6d72a6656fd134ef5c42af4e0e3aaa95be2259ae6973a354f061b608358f36a029baf22a7d7cd53fb486a3fb58a9aa22d3fd638872c5e8a31da51445f5fdcbc17f912bb156a9fb85f3fff71a0ff28e767e649c1243d886223d1898d0c2107bf47466db65c1ec0a5eff1f85b37a7c10c728d5497519163c2a3c707d54ee89de6f4f6c9d64a43e5d223ee753619e0e2c16a823731a167b8104a845b090f9faa756a807af0c9edde741eba2e4f1d984"}, {0xc}, {0xc, 0x8, {0x2, 0x6}}}}, @m_skbedit={0x170, 0xf, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x100}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xfff1}}]}, {0x124, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1bac}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="002ea9849a23fb98442dad2971a4455e4c80a47aa20a84dd", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000000080000000001fcffff00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=<r6=>0x0, @ANYRES64=<r7=>0x2710], 0x48}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="050000080300e2070000000000000031802807b726694cabc695f500421e051fd131fab2d3cb1cae09", @ANYRES64=0x0, @ANYRES16=r7, @ANYRES64=r3, @ANYRESDEC=r3, @ANYRESHEX=r6], 0x48}}, 0x20008010)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2)
r10 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280080001"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000200), 0xffffffc1)
r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r12, 0x10c, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4)

0s ago: executing program 0 (id=3768):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4)
sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1, 0x0, 0x0, 0x1000000}, 0x4044801)

kernel console output (not intermixed with test programs):

tribute type 9 has an invalid length.
[  262.090720][T14584] macvlan20: entered promiscuous mode
[  262.093056][T14584] macvlan20: entered allmulticast mode
[  262.096014][T14584] 8021q: adding VLAN 0 to HW filter on device macvlan20
[  262.332501][T14598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  262.360942][T14600] netlink: 'syz.1.2315': attribute type 1 has an invalid length.
[  262.394896][T14600] 8021q: adding VLAN 0 to HW filter on device bond80
[  262.426543][T14600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.433407][T14600] bond80: (slave batadv0): making interface the new active one
[  262.438506][T14600] bond80: (slave batadv0): Enslaving as an active interface with an up link
[  262.473396][T14602] 8021q: adding VLAN 0 to HW filter on device bond86
[  262.488958][T14602] bond85: (slave bond86): making interface the new active one
[  262.492277][T14602] bond85: (slave bond86): Enslaving as an active interface with an up link
[  262.515449][T14602] 8021q: adding VLAN 0 to HW filter on device bond85
[  262.647707][T14620] bond81: (slave bridge30): making interface the new active one
[  262.651626][T14620] bond81: (slave bridge30): Enslaving as an active interface with an up link
[  262.883142][T14637] 8021q: adding VLAN 0 to HW filter on device bond82
[  262.960815][T14637] bond82: (slave ip6gretap2): making interface the new active one
[  262.966491][T14637] bond82: (slave ip6gretap2): Enslaving as an active interface with an up link
[  263.055045][T14649] veth1: entered promiscuous mode
[  263.068163][T14649] bond82: (slave veth1): Enslaving as an active interface with a down link
[  263.076549][T14637] erspan0: entered allmulticast mode
[  263.118274][T14651] 8021q: adding VLAN 0 to HW filter on device bond67
[  263.149319][T14655] bond67: (slave ip6erspan2): making interface the new active one
[  263.156369][T14655] bond67: (slave ip6erspan2): Enslaving as an active interface with an up link
[  263.229441][T14654] 8021q: adding VLAN 0 to HW filter on device bond87
[  263.272471][T14654] veth27: entered promiscuous mode
[  263.344833][T14666] bridge0: port 1(batadv7) entered blocking state
[  263.350460][T14666] bridge0: port 1(batadv7) entered disabled state
[  263.353773][T14666] batadv7: entered allmulticast mode
[  263.360289][T14666] batadv7: entered promiscuous mode
[  263.495994][T14677] macvlan34: entered promiscuous mode
[  263.503546][T14677] macvlan34: entered allmulticast mode
[  263.572250][T14684] 8021q: adding VLAN 0 to HW filter on device bond89
[  263.577297][T14684] bond88: (slave bond89): making interface the new active one
[  263.581211][T14684] bond88: (slave bond89): Enslaving as an active interface with an up link
[  263.607691][T14687] bond43: (slave macvlan35): Error -98 calling set_mac_address
[  263.722198][T14693] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.779589][T14703] macvlan21: entered promiscuous mode
[  263.781816][T14703] macvlan21: entered allmulticast mode
[  263.784366][T14703] 8021q: adding VLAN 0 to HW filter on device macvlan21
[  263.851359][ T5893] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled
[  263.854655][ T5893] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled
[  263.894127][T14709] 8021q: adding VLAN 0 to HW filter on device bond84
[  263.932936][T14715] bond67: (slave ip6erspan2): Releasing active interface
[  263.941888][T14715] batadv7: left allmulticast mode
[  263.943901][T14715] batadv7: left promiscuous mode
[  263.945995][T14715] bridge0: port 1(batadv7) entered disabled state
[  263.971035][T14709] veth29: entered promiscuous mode
[  264.023501][T14720] bond0: (slave macvlan22): Opening slave failed
[  264.130693][T14729] batadv_slave_0: entered promiscuous mode
[  264.154604][T14727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.182013][T14729] batadv_slave_0 (unregistering): left promiscuous mode
[  264.219734][T14731] macvlan22: entered promiscuous mode
[  264.221753][T14731] macvlan22: entered allmulticast mode
[  264.224892][T14731] 8021q: adding VLAN 0 to HW filter on device macvlan22
[  264.236073][T14727] veth0_to_team: entered promiscuous mode
[  264.238535][T14727] veth0_to_team: entered allmulticast mode
[  264.423818][T14752] bond0: (slave macvlan23): Opening slave failed
[  264.476422][T14746] bond81: (slave bridge10): Releasing backup interface
[  264.482199][T14746] bridge10: left promiscuous mode
[  264.505380][T14746] bond83: (slave veth25): Releasing active interface
[  264.521329][T14746] bond85: (slave bond86): Releasing backup interface
[  264.534829][T14746] bond88: (slave bond89): Releasing backup interface
[  264.619909][T14758] bond43: (slave macvlan35): Error -98 calling set_mac_address
[  264.660653][T14770] __nla_validate_parse: 30 callbacks suppressed
[  264.660665][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'.
[  264.685509][T14770] vlan4: entered allmulticast mode
[  264.697355][T14770] bridge15: port 1(vlan4) entered blocking state
[  264.699476][T14770] bridge15: port 1(vlan4) entered disabled state
[  264.703928][T14770] vlan4: entered promiscuous mode
[  264.710295][T14770] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  264.854566][T14778] veth31: entered promiscuous mode
[  264.863978][T14778] bond85: (slave veth31): Enslaving as a backup interface with a down link
[  264.886394][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2363'.
[  264.902344][T14773] 8021q: adding VLAN 0 to HW filter on device bond85
[  264.969926][T14789] vlan4: left promiscuous mode
[  264.971760][T14789] bridge15: port 1(vlan4) entered disabled state
[  264.975187][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'.
[  264.983577][T14782] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2365'.
[  265.045214][T14789] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  265.054920][T14789] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  265.085059][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'.
[  265.331794][T14802] bond72: (slave bridge0): Releasing active interface
[  265.340312][T14802] bond43: (slave macvlan32): Releasing backup interface
[  265.346567][T14802] bond0: (slave bond73): Releasing active interface
[  265.350521][T14802] bond0: (slave bond73): the permanent HWaddr of slave - 6a:7f:70:4a:e3:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  265.363027][T14802] bond0: (slave bond75): Releasing active interface
[  265.373643][T14802] bond76: (slave bond77): Releasing backup interface
[  265.379970][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'.
[  265.383031][T14802] bond80: (slave batadv0): Releasing active interface
[  265.391131][T14802] bond81: (slave bridge30): Releasing active interface
[  265.405747][T14802] bond82: (slave ip6gretap2): Releasing active interface
[  265.410071][T14802] bond82: (slave ip6gretap2): the permanent HWaddr of slave - 4e:8f:36:12:47:5a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  265.424348][T14802] bond82: (slave veth1): Releasing active interface
[  265.436414][T14802] bond85: (slave veth31): Releasing backup interface
[  265.615779][T14808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.620753][T14808] syzkaller0: entered promiscuous mode
[  265.623194][T14808] syzkaller0: entered allmulticast mode
[  265.659233][T14808] tipc: Resetting bearer <eth:syzkaller0>
[  265.671532][T14807] tipc: Resetting bearer <eth:syzkaller0>
[  265.694990][T14807] tipc: Disabling bearer <eth:syzkaller0>
[  265.813971][T14812] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2371'.
[  265.819101][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'.
[  265.871348][T14817] validate_nla: 20 callbacks suppressed
[  265.871360][T14817] netlink: 'syz.0.2372': attribute type 9 has an invalid length.
[  265.875906][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'.
[  265.885402][T14817] macvlan30: entered promiscuous mode
[  265.887781][T14817] macvlan30: entered allmulticast mode
[  266.048240][T14825] netlink: 'syz.0.2373': attribute type 10 has an invalid length.
[  266.059821][T14825] netlink: 'syz.0.2373': attribute type 10 has an invalid length.
[  266.084707][T14827] netlink: 'syz.1.2375': attribute type 1 has an invalid length.
[  266.255713][T14830] bridge0: port 1(erspan0) entered blocking state
[  266.258692][T14830] bridge0: port 1(erspan0) entered disabled state
[  266.482183][T14834] netlink: 'syz.1.2377': attribute type 10 has an invalid length.
[  266.531414][T14834] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  266.534500][T14834] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  266.804622][T14844] netlink: 'syz.0.2378': attribute type 1 has an invalid length.
[  266.810738][T14844] netlink: 'syz.0.2378': attribute type 1 has an invalid length.
[  266.849627][T14848] netlink: 'syz.2.2380': attribute type 1 has an invalid length.
[  266.865479][T14848] bond91: entered promiscuous mode
[  266.867798][T14848] 8021q: adding VLAN 0 to HW filter on device bond91
[  266.901529][T14848] bond91: (slave bridge0): making interface the new active one
[  266.904858][T14848] bridge0: entered promiscuous mode
[  266.913794][T14848] bond91: (slave bridge0): Enslaving as an active interface with an up link
[  266.955092][T14853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2381'.
[  266.962607][T14844] netlink: 'syz.0.2378': attribute type 1 has an invalid length.
[  266.962796][T14853] pim6reg: entered allmulticast mode
[  266.969210][T14852] pim6reg: left allmulticast mode
[  267.027969][T14844] 8021q: adding VLAN 0 to HW filter on device bond68
[  267.031843][T14850] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[  267.035063][T14850] bond68: (slave wlan0): Opening slave failed
[  267.120218][T14856] 8021q: adding VLAN 0 to HW filter on device bond92
[  267.125070][T14856] bond0: (slave bond92): Enslaving as a backup interface with a down link
[  267.330313][T14876] netlink: 'syz.1.2386': attribute type 10 has an invalid length.
[  267.948460][T14895] hsr0: left allmulticast mode
[  267.950039][T14895] hsr_slave_0: left allmulticast mode
[  267.951929][T14895] hsr_slave_1: left allmulticast mode
[  267.993322][  T794] lo speed is unknown, defaulting to 1000
[  267.995502][  T794] syz0: Port: 1 Link DOWN
[  268.003124][T14896] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  268.006456][  T794] lo speed is unknown, defaulting to 1000
[  268.236367][T14907] 8021q: adding VLAN 0 to HW filter on device bond93
[  268.292304][T14913] bond69 (unregistering): Released all slaves
[  268.601674][T14933] bond14: (slave macvlan31): Enslaving as an active interface with a down link
[  268.761200][T14939] veth29: entered promiscuous mode
[  268.944784][T14950] x9: renamed from bridge_slave_0
[  269.384337][T14981] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.441223][T14988] 8021q: adding VLAN 0 to HW filter on device bond94
[  269.661360][T15000] 8021q: adding VLAN 0 to HW filter on device bond69
[  270.038459][T15023] bond14: (slave macvlan32): Error -98 calling set_mac_address
[  270.171751][T15029] 8021q: adding VLAN 0 to HW filter on device bond70
[  270.199883][T15029] 8021q: adding VLAN 0 to HW filter on device bond70
[  270.203437][T15029] bond70: (slave vxcan1): The slave device specified does not support setting the MAC address
[  270.208474][T15029] bond70: (slave vxcan1): Error -95 calling set_mac_address
[  270.265096][T15034] veth27: entered promiscuous mode
[  270.271690][T15034] bond70: (slave veth27): Enslaving as an active interface with a down link
[  270.302659][T15032] lo speed is unknown, defaulting to 1000
[  270.529770][T15045] __nla_validate_parse: 6 callbacks suppressed
[  270.529781][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'.
[  270.587660][T15045] macvlan23: entered promiscuous mode
[  270.589894][T15045] macvlan23: entered allmulticast mode
[  270.591738][T15045] hsr0: entered allmulticast mode
[  270.593542][T15045] hsr_slave_0: entered allmulticast mode
[  270.595456][T15045] hsr_slave_1: entered allmulticast mode
[  270.598393][T15045] 8021q: adding VLAN 0 to HW filter on device macvlan23
[  270.631544][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2433'.
[  270.634374][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2433'.
[  270.713317][T15062] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.744750][T15062] syzkaller0: entered promiscuous mode
[  270.755664][T15062] syzkaller0: entered allmulticast mode
[  270.845734][T15064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  270.863681][T15061] lo speed is unknown, defaulting to 1000
[  270.883643][T15071] validate_nla: 14 callbacks suppressed
[  270.883660][T15071] netlink: 'syz.1.2438': attribute type 1 has an invalid length.
[  270.889616][T15073] netlink: 'syz.2.2439': attribute type 1 has an invalid length.
[  270.925283][T15073] 8021q: adding VLAN 0 to HW filter on device bond96
[  270.964523][T15073] veth31: entered promiscuous mode
[  270.969059][T15073] bond96: (slave veth31): Enslaving as a backup interface with a down link
[  270.976327][T15073] bond91: (slave bridge0): Releasing backup interface
[  270.983928][T15073] bridge0: left promiscuous mode
[  270.989595][T15073] bond0: (slave bond92): Releasing backup interface
[  270.994572][T15073] bond96: (slave veth31): Releasing backup interface
[  271.054546][T15077] netlink: 'syz.2.2441': attribute type 9 has an invalid length.
[  271.058805][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'.
[  271.068994][T15077] macvlan24: entered promiscuous mode
[  271.071054][T15077] macvlan24: entered allmulticast mode
[  271.073575][T15077] 8021q: adding VLAN 0 to HW filter on device macvlan24
[  271.185321][T15089] bond0: (slave macvlan25): Opening slave failed
[  271.195501][T15078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2440'.
[  271.435727][T15102] bond14: (slave macvlan31): Releasing backup interface
[  271.454268][T15105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2447'.
[  271.471017][T15104] netlink: 'syz.2.2448': attribute type 1 has an invalid length.
[  271.476589][T15102] bond70: (slave veth27): Releasing active interface
[  271.526898][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2448'.
[  271.528047][T15104] 8021q: adding VLAN 0 to HW filter on device bond97
[  271.540851][T15102] netlink: 'syz.0.2447': attribute type 3 has an invalid length.
[  271.544028][T15102] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2447'.
[  271.627371][T15104] veth33: entered promiscuous mode
[  271.890011][T15131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2453'.
[  271.895429][T15132] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  271.900179][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'.
[  272.034057][T15150] netlink: 'syz.2.2458': attribute type 10 has an invalid length.
[  272.234944][T15169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.242341][T15170] syzkaller0: entered promiscuous mode
[  272.244308][T15170] syzkaller0: entered allmulticast mode
[  272.267755][T15169] tipc: Resetting bearer <eth:syzkaller0>
[  272.288422][T15168] tipc: Resetting bearer <eth:syzkaller0>
[  272.305811][T15168] tipc: Disabling bearer <eth:syzkaller0>
[  272.321607][T15172] netlink: 'syz.1.2464': attribute type 1 has an invalid length.
[  272.369989][T15172] 8021q: adding VLAN 0 to HW filter on device bond87
[  272.398167][T15175] netlink: 'syz.2.2465': attribute type 1 has an invalid length.
[  272.586367][T15189] netlink: 'syz.0.2469': attribute type 9 has an invalid length.
[  272.599117][T15189] macvlan32: entered promiscuous mode
[  272.601006][T15189] macvlan32: entered allmulticast mode
[  272.698134][T15195] netlink: 'syz.0.2472': attribute type 10 has an invalid length.
[  272.766331][T15214] bond43: (slave macvlan35): Enslaving as a backup interface with a down link
[  272.862991][T15215] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  273.175345][T15252] macvlan36: entered promiscuous mode
[  273.178109][T15252] macvlan36: entered allmulticast mode
[  273.589666][T15262] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  297.468877][T15271] __nla_validate_parse: 11 callbacks suppressed
[  297.468893][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'.
[  297.487465][T15274] 8021q: adding VLAN 0 to HW filter on device bond88
[  297.491546][T15274] bond0: (slave bond88): Enslaving as an active interface with a down link
[  297.606113][T15282] validate_nla: 5 callbacks suppressed
[  297.606129][T15282] netlink: 'syz.1.2494': attribute type 9 has an invalid length.
[  297.612340][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2494'.
[  297.636227][T15282] macvlan37: entered promiscuous mode
[  297.643735][T15282] macvlan37: entered allmulticast mode
[  297.739772][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'.
[  297.783655][T15289] netlink: 'syz.2.2496': attribute type 2 has an invalid length.
[  297.795687][T15289] : entered promiscuous mode
[  297.836459][T15293] v: renamed from ip6_vti0 (while UP)
[  297.906565][T15298] pim6reg: entered allmulticast mode
[  297.916523][T15298] pim6reg: left allmulticast mode
[  297.964927][T15301] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.077285][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'.
[  298.096524][T15304] netlink: 'syz.2.2499': attribute type 1 has an invalid length.
[  298.104151][T15306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2499'.
[  298.107327][T15306] netlink: 'syz.2.2499': attribute type 7 has an invalid length.
[  298.109856][T15306] netlink: 'syz.2.2499': attribute type 8 has an invalid length.
[  298.112372][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'.
[  298.115882][T15304] netlink: 'syz.2.2499': attribute type 2 has an invalid length.
[  298.124314][T15306] bond1: entered promiscuous mode
[  298.136410][T15306] bond1: left promiscuous mode
[  298.136648][T15304] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2499'.
[  298.389216][T15309] 8021q: adding VLAN 0 to HW filter on device bond99
[  298.405380][T15309] bond0: (slave bond99): Enslaving as a backup interface with a down link
[  298.503604][T15314] netlink: 'syz.0.2502': attribute type 1 has an invalid length.
[  298.507026][T15314] netlink: 'syz.0.2502': attribute type 1 has an invalid length.
[  298.591586][T15317] bond14: (slave macvlan33): Enslaving as an active interface with a down link
[  298.767409][T15325] bond43: option mode: unable to set because the bond device has slaves
[  298.787684][T15328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2507'.
[  298.857829][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'.
[  298.968948][T15344] macvlan39: entered promiscuous mode
[  298.971507][T15344] macvlan39: entered allmulticast mode
[  299.426660][T15382] 8021q: adding VLAN 0 to HW filter on device macvlan25
[  299.619560][T15393] netlink: 'syz.0.2521': attribute type 2 has an invalid length.
[  299.714997][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'.
[  299.724397][T15394] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  299.845076][T15408] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  299.855676][T15416] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20003
[  299.870539][T15416] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20003
[  299.980068][T15427] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.137997][T15435] sctp: [Deprecated]: syz.0.2529 (pid 15435) Use of int in max_burst socket option.
[  300.137997][T15435] Use struct sctp_assoc_value instead
[  300.158832][T15442] netlink: 'syz.1.2532': attribute type 9 has an invalid length.
[  300.165765][T15442] macvlan39: entered promiscuous mode
[  300.173656][T15442] macvlan39: entered allmulticast mode
[  300.382841][T15458] 8021q: adding VLAN 0 to HW filter on device bond89
[  300.474345][T15467] macvlan40: entered promiscuous mode
[  300.480990][T15467] macvlan40: entered allmulticast mode
[  300.492750][T15469] : entered promiscuous mode
[  300.605429][T15478] veth0: entered promiscuous mode
[  300.618360][T15478] veth0 (unregistering): left promiscuous mode
[  300.856371][T15488] bridge0: port 1(macsec2) entered blocking state
[  300.861151][T15488] bridge0: port 1(macsec2) entered disabled state
[  300.863869][T15488] macsec2: entered allmulticast mode
[  300.869018][T15488] macsec2: left allmulticast mode
[  300.964349][T15491] macvlan41: entered promiscuous mode
[  300.966324][T15491] macvlan41: entered allmulticast mode
[  301.884356][T15570] 8021q: adding VLAN 0 to HW filter on device bond90
[  301.912435][T15570] veth33: entered promiscuous mode
[  301.919316][T15570] bond90: (slave veth33): Enslaving as a backup interface with a down link
[  301.962831][T15570] bond43: (slave macvlan35): Releasing backup interface
[  301.972183][T15570] bond0: (slave bond88): Releasing active interface
[  301.983287][T15570] bond90: (slave veth33): Releasing backup interface
[  302.103901][T15575] v: renamed from ip6_vti0
[  302.764654][T15584] veth0_to_team: left promiscuous mode
[  302.767441][T15584] veth0_to_team: left allmulticast mode
[  302.776276][T15584] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  302.883136][T15589] validate_nla: 10 callbacks suppressed
[  302.883149][T15589] netlink: 'syz.2.2572': attribute type 10 has an invalid length.
[  302.888215][T15589] netlink: 'syz.2.2572': attribute type 10 has an invalid length.
[  303.493081][T15605] __nla_validate_parse: 19 callbacks suppressed
[  303.493094][T15605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2575'.
[  303.723581][T15613] netlink: 'syz.2.2577': attribute type 1 has an invalid length.
[  303.727537][T15613] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  303.779912][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2579'.
[  303.877513][T15621] netlink: 'syz.1.2581': attribute type 7 has an invalid length.
[  303.889805][T15621] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2581'.
[  303.969208][T15630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2582'.
[  304.042117][T15630] bond0: (slave bond99): Releasing backup interface
[  304.174770][T15636] syzkaller1: entered promiscuous mode
[  304.178132][T15636] syzkaller1: entered allmulticast mode
[  304.377489][T15645] netlink: 'syz.0.2587': attribute type 4 has an invalid length.
[  304.391057][T15645] netlink: 'syz.0.2587': attribute type 4 has an invalid length.
[  304.483076][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'.
[  304.495129][T15649] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2591'.
[  304.498454][T15649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2591'.
[  304.563766][T15653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2593'.
[  304.921688][T15660] netlink: 'syz.1.2594': attribute type 2 has an invalid length.
[  304.925570][T15660] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2594'.
[  304.931372][T15659] netlink: 'syz.1.2594': attribute type 1 has an invalid length.
[  304.951602][T15659] bond91: (slave vti0): The slave device specified does not support setting the MAC address
[  304.954858][T15659] bond91: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  304.960261][T15659] bond91: (slave vti0): making interface the new active one
[  304.963097][T15659] bond91: (slave vti0): Enslaving as an active interface with an up link
[  305.169936][T15675] netlink: 'syz.0.2601': attribute type 1 has an invalid length.
[  305.483509][T15700] syzkaller0: left promiscuous mode
[  305.485687][T15700] syzkaller0: left allmulticast mode
[  305.497580][T15702] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  305.498737][T15699] netlink: 'syz.1.2607': attribute type 10 has an invalid length.
[  305.508304][T15702] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2608'.
[  305.679988][T15714] veth0_to_team: left promiscuous mode
[  305.682141][T15714] veth0_to_team: left allmulticast mode
[  305.683975][T15714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  305.782776][T15717] bond43: (slave macvlan42): Enslaving as a backup interface with a down link
[  305.799409][T15719] batadv0: entered promiscuous mode
[  305.811628][T15719] 8021q: adding VLAN 0 to HW filter on device macvlan26
[  305.815522][T15719] batadv0: left promiscuous mode
[  306.082133][T15724] bond51: left promiscuous mode
[  306.083955][T15724] bond52: left promiscuous mode
[  306.085586][T15724] vxcan1: left allmulticast mode
[  306.088850][T15724] vlan0: left promiscuous mode
[  306.094944][T15724] bond58: left promiscuous mode
[  306.097234][T15724] veth15: left promiscuous mode
[  306.098860][T15724] macvlan1: left promiscuous mode
[  306.100428][T15724] macvlan1: left allmulticast mode
[  306.102427][T15724] veth17: left promiscuous mode
[  306.104063][T15724] macvlan14: left promiscuous mode
[  306.111033][T15724] macvlan14: left allmulticast mode
[  306.115585][T15724] bond67: left promiscuous mode
[  306.118213][T15724] veth19: left promiscuous mode
[  306.120118][T15724] geneve5: left promiscuous mode
[  306.121898][T15724] bond69: left promiscuous mode
[  306.124229][T15724] macvlan15: left promiscuous mode
[  306.125881][T15724] macvlan15: left allmulticast mode
[  306.129161][T15724] veth21: left promiscuous mode
[  306.131114][T15724] veth23: left promiscuous mode
[  306.132959][T15724] bond73: left promiscuous mode
[  306.134819][T15724] macvlan16: left promiscuous mode
[  306.136577][T15724] macvlan16: left allmulticast mode
[  306.141907][T15724] macvlan17: left promiscuous mode
[  306.144846][T15724] macvlan17: left allmulticast mode
[  306.147982][T15724] bond81: left promiscuous mode
[  306.150118][T15724] gre1: left promiscuous mode
[  306.151968][T15724] macvlan0: left promiscuous mode
[  306.153815][T15724] macvlan0: left allmulticast mode
[  306.155890][T15724] macvlan18: left promiscuous mode
[  306.158261][T15724] macvlan18: left allmulticast mode
[  306.160334][T15724] macvlan19: left promiscuous mode
[  306.162308][T15724] macvlan19: left allmulticast mode
[  306.164378][T15724] veth25: left promiscuous mode
[  306.167611][T15724] macvlan20: left promiscuous mode
[  306.169895][T15724] macvlan20: left allmulticast mode
[  306.172499][T15724] veth27: left promiscuous mode
[  306.175605][T15724] macvlan21: left promiscuous mode
[  306.178453][T15724] macvlan21: left allmulticast mode
[  306.181667][T15724] macvlan22: left promiscuous mode
[  306.183416][T15724] macvlan22: left allmulticast mode
[  306.185334][T15724] bond91: left promiscuous mode
[  306.190130][T15724] veth29: left promiscuous mode
[  306.198079][T15724] macvlan23: left promiscuous mode
[  306.205576][T15724] macvlan23: left allmulticast mode
[  306.226478][T15724] veth31: left promiscuous mode
[  306.229088][T15724] hsr0: left allmulticast mode
[  306.230675][T15724] hsr_slave_0: left allmulticast mode
[  306.232391][T15724] hsr_slave_1: left allmulticast mode
[  306.234957][T15724] macvlan24: left promiscuous mode
[  306.237308][T15724] macvlan24: left allmulticast mode
[  306.243931][T15724] veth33: left promiscuous mode
[  306.380202][T15752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  306.391275][T15751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.396121][T15751] syzkaller0: entered promiscuous mode
[  306.399327][T15751] syzkaller0: entered allmulticast mode
[  306.405288][T15751] tipc: Resetting bearer <eth:syzkaller0>
[  306.410522][T15750] tipc: Resetting bearer <eth:syzkaller0>
[  306.425251][T15750] tipc: Disabling bearer <eth:syzkaller0>
[  306.452038][T15747] lo speed is unknown, defaulting to 1000
[  306.709284][T15761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  306.839009][T15766] bond43: (slave macvlan43): Error -98 calling set_mac_address
[  307.363220][T15780] tipc: Resetting bearer <eth:syzkaller0>
[  307.474513][T15780] hsr0: left allmulticast mode
[  307.476552][T15780] hsr_slave_0: left allmulticast mode
[  307.478997][T15780] hsr_slave_1: left allmulticast mode
[  307.489392][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  307.492447][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  307.543578][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  307.551668][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  307.617520][T15791] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  307.632475][T15793] macvlan43: entered promiscuous mode
[  307.638427][T15793] macvlan43: entered allmulticast mode
[  307.641481][T15793] hsr0: entered allmulticast mode
[  307.643108][T15793] hsr_slave_0: entered allmulticast mode
[  307.644851][T15793] hsr_slave_1: entered allmulticast mode
[  307.707971][T15795] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  307.969071][T15825] dvmrp8: entered allmulticast mode
[  307.999522][T15825] lo speed is unknown, defaulting to 1000
[  308.191154][T15824] dvmrp8: left allmulticast mode
[  308.279193][T15838] validate_nla: 6 callbacks suppressed
[  308.279204][T15838] netlink: 'syz.0.2645': attribute type 1 has an invalid length.
[  308.413564][T15848] netlink: 'syz.1.2647': attribute type 10 has an invalid length.
[  308.419183][T15849] netlink: 'syz.0.2649': attribute type 1 has an invalid length.
[  308.485159][T15856] netlink: 'syz.1.2647': attribute type 10 has an invalid length.
[  308.541197][T15855] bond71: (slave bridge0): making interface the new active one
[  308.544531][T15855] bond71: (slave bridge0): Enslaving as an active interface with an up link
[  308.665164][T15865] netlink: 'syz.0.2652': attribute type 1 has an invalid length.
[  308.712615][T15868] __nla_validate_parse: 12 callbacks suppressed
[  308.712633][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'.
[  308.724599][T15865] bond72: (slave bridge17): making interface the new active one
[  308.728104][T15865] bond72: (slave bridge17): Enslaving as an active interface with an up link
[  309.000340][T15879] macvlan34: entered promiscuous mode
[  309.003149][T15879] bond14: (slave macvlan34): Error -98 calling set_mac_address
[  309.140227][T15883] macvlan34: entered promiscuous mode
[  309.142604][T15883] macvlan34: entered allmulticast mode
[  332.718647][T15887] ip6tnl5: entered promiscuous mode
[  332.720342][T15887] ip6tnl5: entered allmulticast mode
[  332.725208][T15888] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2661'.
[  332.736167][T15888] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2661'.
[  332.752146][T15888] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2661'.
[  332.825190][T15896] netlink: 'syz.0.2666': attribute type 1 has an invalid length.
[  332.869161][T15893] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2665'.
[  332.925134][T15904] ksmbd: Unknown IPC event: 3, ignore.
[  332.999835][T15911] bond14: (slave macvlan34): Error -98 calling set_mac_address
[  333.134490][T15921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'.
[  333.153103][T15921] bond14: (slave macvlan33): Releasing backup interface
[  333.164737][T15921] bond71: (slave bridge0): Releasing active interface
[  333.173365][T15921] bond72: (slave bridge17): Releasing active interface
[  333.234070][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'.
[  333.259413][T15928] netlink: 'syz.0.2672': attribute type 1 has an invalid length.
[  333.264795][T15928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2672'.
[  333.291748][T15932] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2673'.
[  333.295677][T15932] gretap0: entered promiscuous mode
[  333.341494][T15934] netlink: 'syz.0.2674': attribute type 1 has an invalid length.
[  333.369552][T15938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2675'.
[  333.373551][T15938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2675'.
[  333.393835][T15938] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.409591][T15939] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.412885][T15938] syzkaller0: entered promiscuous mode
[  333.414913][T15938] syzkaller0: entered allmulticast mode
[  333.420677][T15941] netlink: 'syz.0.2676': attribute type 9 has an invalid length.
[  333.433143][T15941] macvlan34: entered promiscuous mode
[  333.435643][T15941] macvlan34: entered allmulticast mode
[  333.552620][T15954] netlink: 'syz.0.2679': attribute type 1 has an invalid length.
[  333.619731][T15954] veth29: entered promiscuous mode
[  333.639454][T15953] veth31: entered promiscuous mode
[  333.653268][T15958] bond43: (slave macvlan44): Enslaving as a backup interface with a down link
[  333.669241][T15954] 8021q: adding VLAN 0 to HW filter on device bond75
[  333.688032][T15962] bond43: (slave macvlan45): Error -98 calling set_mac_address
[  333.962560][T15982] 8021q: adding VLAN 0 to HW filter on device bond102
[  333.966609][T15982] bond0: (slave bond102): Enslaving as a backup interface with a down link
[  334.102730][T15993] macvlan35: entered promiscuous mode
[  334.104494][T15993] macvlan35: entered allmulticast mode
[  334.109392][T15993] bond14: (slave macvlan35): Enslaving as an active interface with a down link
[  334.129228][T15988] netlink: 'syz.2.2686': attribute type 10 has an invalid length.
[  334.133653][T15988] netlink: 'syz.2.2686': attribute type 10 has an invalid length.
[  334.215666][T16001] netlink: 'syz.2.2689': attribute type 1 has an invalid length.
[  334.240373][T16001] 8021q: adding VLAN 0 to HW filter on device bond103
[  334.261869][T16001] vlan3: entered promiscuous mode
[  334.263990][T16001] bond103: entered promiscuous mode
[  334.265990][T16001] vlan3: entered allmulticast mode
[  334.268378][T16001] bond103: entered allmulticast mode
[  334.474170][T16022] netlink: 'syz.1.2694': attribute type 1 has an invalid length.
[  334.496055][T16022] bond92 (unregistering): Released all slaves
[  334.541870][T16025] macvlan26: entered promiscuous mode
[  334.544313][T16025] bond0: entered promiscuous mode
[  334.545979][T16025] bond102: entered promiscuous mode
[  334.557202][T16025] macvlan26: entered allmulticast mode
[  334.559535][T16025] bond0: entered allmulticast mode
[  334.561733][T16025] bond102: entered allmulticast mode
[  334.565998][T16025] 8021q: adding VLAN 0 to HW filter on device macvlan26
[  334.573962][T16025] bond0: left allmulticast mode
[  334.579672][T16025] bond102: left allmulticast mode
[  334.581698][T16025] bond0: left promiscuous mode
[  334.584053][T16025] bond102: left promiscuous mode
[  334.984509][T16051] netlink: 'syz.0.2703': attribute type 1 has an invalid length.
[  335.031423][T16050] vlan0: entered promiscuous mode
[  335.035775][T16050] bond58: entered promiscuous mode
[  335.141121][T16051] veth33: entered promiscuous mode
[  335.145451][T16051] bond76: (slave veth33): Enslaving as a backup interface with a down link
[  335.173574][T16051] 8021q: adding VLAN 0 to HW filter on device bond76
[  335.318548][T16069] 8021q: adding VLAN 0 to HW filter on device bond104
[  335.323715][T16069] bond0: (slave bond104): Enslaving as a backup interface with a down link
[  335.825753][T16108] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  335.935312][T16117] lo speed is unknown, defaulting to 1000
[  336.461329][T16125] workqueue: Failed to create a rescuer kthread for wq "bond77": -EINTR
[  336.876510][T16149] 8021q: adding VLAN 0 to HW filter on device bond93
[  336.902918][T16153] vxcan7: entered promiscuous mode
[  336.921113][T16153] 8021q: adding VLAN 0 to HW filter on device bond93
[  336.924387][T16153] bond93: (slave vxcan7): The slave device specified does not support setting the MAC address
[  336.932826][T16153] bond93: (slave vxcan7): Error -95 calling set_mac_address
[  336.973997][T16156] macvlan36: entered promiscuous mode
[  336.976061][T16156] macvlan36: entered allmulticast mode
[  336.981192][  T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.983686][  T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.027100][T16157] tap0: tun_chr_ioctl cmd 1074025677
[  337.029468][T16157] tap0: linktype set to 780
[  337.083908][T16162] 8021q: adding VLAN 0 to HW filter on device bond94
[  337.203885][T16181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.243257][T16184] macvlan37: entered promiscuous mode
[  337.245998][T16184] macvlan37: entered allmulticast mode
[  337.494776][T16200] bond77: entered promiscuous mode
[  337.743250][T16216] 8021q: adding VLAN 0 to HW filter on device bond95
[  337.787843][T16218] 8021q: adding VLAN 0 to HW filter on device bond95
[  337.791015][T16218] bond95: (slave vxcan7): The slave device specified does not support setting the MAC address
[  337.803027][T16218] bond95: (slave vxcan7): Error -95 calling set_mac_address
[  337.842315][T16216] bond95: (slave vxcan7): The slave device specified does not support setting the MAC address
[  337.847954][T16216] bond95: (slave vxcan7): Error -95 calling set_mac_address
[  338.005404][T16223] validate_nla: 20 callbacks suppressed
[  338.005444][T16223] netlink: 'syz.2.2744': attribute type 1 has an invalid length.
[  338.103438][T16223] bond105: (slave bridge13): making interface the new active one
[  338.120699][T16223] bond105: (slave bridge13): Enslaving as an active interface with an up link
[  338.172780][T16230] __nla_validate_parse: 26 callbacks suppressed
[  338.172794][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2745'.
[  338.215352][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'.
[  338.351453][T16234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2747'.
[  338.475313][T16241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2749'.
[  338.478740][T16241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2749'.
[  338.536220][T16245] netlink: 'syz.2.2750': attribute type 8 has an invalid length.
[  338.542192][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2750'.
[  338.586179][T16252] bond0: (slave macvlan26): Error -98 calling set_mac_address
[  338.997965][T16277] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2756'.
[  339.002563][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'.
[  339.183794][T16286] lo speed is unknown, defaulting to 1000
[  339.227967][T16294] bond0: (slave bond102): Releasing backup interface
[  339.230646][T16294] bond0: (slave bond102): the permanent HWaddr of slave - 86:8b:25:fc:68:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  339.248748][T16294] bond0: (slave bond104): Releasing backup interface
[  339.260026][T16294] bond105: (slave bridge13): Releasing active interface
[  339.296326][T16294] netlink: 'syz.2.2761': attribute type 1 has an invalid length.
[  339.299787][T16294] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2761'.
[  339.317130][T16294] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  339.426032][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'.
[  339.630657][T16320] netlink: 'syz.2.2766': attribute type 1 has an invalid length.
[  339.671275][T16320] 8021q: adding VLAN 0 to HW filter on device bond106
[  340.157259][T16345] netlink: 'syz.2.2773': attribute type 10 has an invalid length.
[  340.160545][T16346] netlink: 'syz.2.2773': attribute type 10 has an invalid length.
[  340.163874][T16345] netlink: 'syz.2.2773': attribute type 10 has an invalid length.
[  340.166593][T16346] netlink: 'syz.2.2773': attribute type 10 has an invalid length.
[  340.218656][T16351] netlink: 'syz.2.2775': attribute type 9 has an invalid length.
[  340.231408][T16351] macvlan26: entered promiscuous mode
[  340.233907][T16351] macvlan26: entered allmulticast mode
[  340.236234][T16351] hsr0: entered allmulticast mode
[  340.257630][T16351] hsr_slave_0: entered allmulticast mode
[  340.260139][T16351] hsr_slave_1: entered allmulticast mode
[  340.262946][T16351] 8021q: adding VLAN 0 to HW filter on device macvlan26
[  340.361192][T16353] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (128)
[  340.539964][T16363] 8021q: adding VLAN 0 to HW filter on device bond107
[  340.555210][T16363] bond0: (slave bond107): Enslaving as a backup interface with a down link
[  340.680027][T16375] gretap0: entered promiscuous mode
[  340.693675][T16375] gretap0: left promiscuous mode
[  340.728782][T16380] netlink: 'syz.1.2781': attribute type 1 has an invalid length.
[  340.860165][T16383] lo speed is unknown, defaulting to 1000
[  341.181960][T16397] 8021q: adding VLAN 0 to HW filter on device bond97
[  341.208375][T16393] vlan0: entered promiscuous mode
[  341.210418][T16393] bond97: entered promiscuous mode
[  341.212887][T16393] vlan0: entered allmulticast mode
[  341.215041][T16393] bond97: entered allmulticast mode
[  341.330081][T16402] pim6reg1: entered promiscuous mode
[  341.332026][T16402] pim6reg1: entered allmulticast mode
[  341.466367][T16410] bond98: entered promiscuous mode
[  341.472458][T16410] 8021q: adding VLAN 0 to HW filter on device bond98
[  342.054782][T16439] macvlan45: entered promiscuous mode
[  342.082604][T16438] bond78: (slave vxcan1): The slave device specified does not support setting the MAC address
[  342.091425][T16438] bond78: (slave vxcan1): Error -95 calling set_mac_address
[  342.169363][T16444] 8021q: adding VLAN 0 to HW filter on device bond99
[  342.208424][T16447] bond14: (slave macvlan38): Error -98 calling set_mac_address
[  342.577845][T16467] macvlan27: entered promiscuous mode
[  342.579748][T16467] macvlan27: entered allmulticast mode
[  342.581819][T16467] 8021q: adding VLAN 0 to HW filter on device macvlan27
[  342.619951][T16463] gretap0: left promiscuous mode
[  342.622751][T16463] erspan0: left allmulticast mode
[  342.642992][T16463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  342.667219][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  342.877042][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  343.077945][T16493] tipc: Enabled bearer <udp:syz2>, priority 10
[  343.115421][T16493] lo speed is unknown, defaulting to 1000
[  343.187189][T16499] __nla_validate_parse: 14 callbacks suppressed
[  343.187201][T16499] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2810'.
[  343.346991][ T5674] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  343.453501][T16514] validate_nla: 9 callbacks suppressed
[  343.453515][T16514] netlink: 'syz.2.2812': attribute type 1 has an invalid length.
[  343.532504][T16517] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  343.653209][T16524] netlink: 'syz.0.2814': attribute type 9 has an invalid length.
[  343.655761][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'.
[  343.667064][T16524] macvlan38: entered promiscuous mode
[  343.669355][T16524] macvlan38: entered allmulticast mode
[  343.804679][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2815'.
[  343.826304][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2815'.
[  343.843109][T16528] vlan4: entered allmulticast mode
[  343.844967][T16528] bridge0: entered allmulticast mode
[  343.891650][T16540] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2817'.
[  343.903374][T16540] netlink: 'syz.2.2817': attribute type 1 has an invalid length.
[  343.967787][T16543] netlink: 'syz.1.2818': attribute type 2 has an invalid length.
[  344.023226][T16543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  344.051169][T16543] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  344.261105][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'.
[  344.276583][T16560] netlink: 'syz.0.2823': attribute type 1 has an invalid length.
[  344.337229][T16560] veth35: entered promiscuous mode
[  344.341743][T16558] lo speed is unknown, defaulting to 1000
[  344.427414][ T5674] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  344.430761][ T5674] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  344.455451][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'.
[  344.517161][T16565] syzkaller1: entered promiscuous mode
[  344.529169][T16565] syzkaller1: entered allmulticast mode
[  344.564346][T16562] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2822'.
[  344.807552][ T6209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.197408][T16593] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2830'.
[  345.265504][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  345.276849][T16593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  345.342996][T16597] IPVS: Unknown mcast interface: bridge_slave_0
[  345.349373][T16597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2832'.
[  345.441486][T16601] netlink: 'syz.2.2834': attribute type 1 has an invalid length.
[  345.519062][T16604] bond14: (slave macvlan39): Error -98 calling set_mac_address
[  345.653024][T16609] syzkaller1: entered promiscuous mode
[  345.655066][T16609] syzkaller1: entered allmulticast mode
[  345.692485][T16607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.724680][T16607] syzkaller0: entered promiscuous mode
[  345.732374][T16607] syzkaller0: entered allmulticast mode
[  345.784876][T16607] tipc: Resetting bearer <eth:syzkaller0>
[  345.792656][T16606] tipc: Resetting bearer <eth:syzkaller0>
[  345.855361][T16619] netlink: 'syz.1.2840': attribute type 9 has an invalid length.
[  346.067506][T16624] netlink: 'syz.0.2841': attribute type 1 has an invalid length.
[  346.357568][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  347.657523][T16606] tipc: Disabling bearer <eth:syzkaller0>
[  347.671681][T16619] macvlan46: entered promiscuous mode
[  347.674396][T16619] macvlan46: entered allmulticast mode
[  347.694212][T16623] xfrm2: entered allmulticast mode
[  347.730192][T16625] bond80: (slave bridge20): making interface the new active one
[  347.733589][T16625] bond80: (slave bridge20): Enslaving as an active interface with an up link
[  347.747383][T16628] netlink: 'syz.1.2842': attribute type 10 has an invalid length.
[  348.587036][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  348.784301][T16664] __nla_validate_parse: 8 callbacks suppressed
[  348.784318][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2849'.
[  348.792470][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2849'.
[  348.799195][T16663] netlink: 'syz.1.2852': attribute type 9 has an invalid length.
[  348.802633][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2852'.
[  348.816523][T16663] macvlan47: entered promiscuous mode
[  348.819939][T16663] macvlan47: entered allmulticast mode
[  349.256386][T16684] netlink: 'syz.1.2857': attribute type 12 has an invalid length.
[  349.309929][T16684] netlink: 'syz.1.2857': attribute type 10 has an invalid length.
[  349.312367][T16685] netlink: 'syz.1.2857': attribute type 10 has an invalid length.
[  349.363267][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2858'.
[  349.368903][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2858'.
[  349.410746][T16692] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2859'.
[  349.423959][T16692] netlink: 'syz.1.2859': attribute type 1 has an invalid length.
[  349.451803][T16692] 8021q: adding VLAN 0 to HW filter on device bond100
[  349.617267][T16705] macsec0: entered promiscuous mode
[  349.619253][T16705] bridge0: entered promiscuous mode
[  349.626182][T16705] bridge0: port 1(macsec0) entered blocking state
[  349.634645][T16705] bridge0: port 1(macsec0) entered disabled state
[  349.637478][T16705] macsec0: entered allmulticast mode
[  349.639483][T16705] bridge0: entered allmulticast mode
[  349.642917][T16705] macsec0: left allmulticast mode
[  349.644888][T16705] bridge0: left allmulticast mode
[  349.659778][T16705] bridge0: left promiscuous mode
[  349.693464][T16701] netlink: 'syz.0.2861': attribute type 10 has an invalid length.
[  349.766052][T16712] netlink: 'syz.2.2865': attribute type 2 has an invalid length.
[  349.774192][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'.
[  349.784005][T16712] veth0_to_team: entered promiscuous mode
[  349.786298][T16712] veth0_to_team: entered allmulticast mode
[  349.876284][T16718] bond14: (slave macvlan39): Error -98 calling set_mac_address
[  349.947878][T16723] lo speed is unknown, defaulting to 1000
[  350.403408][T16747] netlink: 'syz.2.2871': attribute type 10 has an invalid length.
[  350.487056][T16757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'.
[  350.553958][T16759] netlink: 'syz.1.2875': attribute type 1 has an invalid length.
[  350.689797][T16759] 8021q: adding VLAN 0 to HW filter on device bond101
[  350.711524][T16766] bond101: (slave bridge65): making interface the new active one
[  350.721449][T16766] bond101: (slave bridge65): Enslaving as an active interface with an up link
[  350.778716][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'.
[  350.824497][T16765] vlan4: entered allmulticast mode
[  350.827104][T16765] bridge21: port 1(vlan4) entered blocking state
[  350.830114][T16765] bridge21: port 1(vlan4) entered disabled state
[  350.834891][T16765] vlan4: entered promiscuous mode
[  350.840332][T16765] bridge0: entered promiscuous mode
[  350.858642][T16769] IPVS: Unknown mcast interface: bridge_slave_0
[  350.876172][T16759] bond101: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  351.188544][T16785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2883'.
[  351.191716][T16785] netlink: 'syz.1.2883': attribute type 7 has an invalid length.
[  351.203858][T16785] gretap0: entered promiscuous mode
[  351.206960][T16785] gretap0: left promiscuous mode
[  351.247674][T16785] gretap0: entered promiscuous mode
[  351.258480][T16785] gretap0: left promiscuous mode
[  351.334607][T16785] gretap0: entered promiscuous mode
[  351.344329][T16785] gretap0: left promiscuous mode
[  351.410800][T16785] gretap0: entered promiscuous mode
[  351.416655][T16785] gretap0: left promiscuous mode
[  351.506651][T16785] gretap0: entered promiscuous mode
[  351.532605][T16785] gretap0: left promiscuous mode
[  351.600883][T16785] gretap0: entered promiscuous mode
[  351.617155][T16785] gretap0: left promiscuous mode
[  351.741461][T16785] gretap0: entered promiscuous mode
[  351.744823][T16785] gretap0: left promiscuous mode
[  351.789769][T16810] 8021q: adding VLAN 0 to HW filter on device bond111
[  351.809421][T16785] gretap0: entered promiscuous mode
[  351.812901][T16785] gretap0: left promiscuous mode
[  351.831884][T16810] veth1: entered promiscuous mode
[  351.837698][T16810] bond111: (slave veth1): Enslaving as a backup interface with a down link
[  351.882712][T16785] gretap0: entered promiscuous mode
[  351.890817][T16785] gretap0: left promiscuous mode
[  351.976350][T16785] gretap0: entered promiscuous mode
[  351.979251][T16785] gretap0: left promiscuous mode
[  352.090508][T16830] 8021q: adding VLAN 0 to HW filter on device bond112
[  352.139738][T16834] veth35: entered promiscuous mode
[  352.147113][T16840] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  352.149840][T16840] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  352.153615][T16834] bond112: (slave veth35): Enslaving as an active interface with a down link
[  352.170397][T16841] bond91: (slave vti0): Releasing backup interface
[  352.187403][ T6209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  352.189070][T16841] bond43: (slave macvlan42): Releasing backup interface
[  352.204535][T16841] bond43: (slave macvlan42): the permanent HWaddr of slave - c2:3c:62:16:ca:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  352.212900][T16841] bond43: (slave macvlan44): Releasing backup interface
[  352.223614][T16841] bond101: (slave bridge65): Releasing active interface
[  352.342652][T16841] vlan0: left allmulticast mode
[  352.344678][T16841] bond97: left allmulticast mode
[  352.446536][T16862] macvlan48: entered promiscuous mode
[  352.453229][T16862] macvlan48: entered allmulticast mode
[  352.457530][T16852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.467093][ T6209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  352.525120][T16863] 8021q: adding VLAN 0 to HW filter on device bond81
[  352.689945][T16871] bond113: entered promiscuous mode
[  352.691983][T16871] bond113: entered allmulticast mode
[  352.694309][T16871] 8021q: adding VLAN 0 to HW filter on device bond113
[  352.734642][T16882] bridge14: entered promiscuous mode
[  352.742626][T16882] bridge14: entered allmulticast mode
[  352.745443][T16882] bond113: (slave bridge14): Enslaving as a backup interface with an up link
[  352.818707][   T13] bond113: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  352.895946][T16893] chnl_net:caif_netlink_parms(): no params data found
[  352.936921][ T5674] bond113: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  353.091795][T16904] macvlan39: entered promiscuous mode
[  353.100493][T16904] macvlan39: entered allmulticast mode
[  353.187001][T16911] lo speed is unknown, defaulting to 1000
[  353.406821][T16925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.418064][ T1271] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  353.495456][T16930] sctp: [Deprecated]: syz.1.2908 (pid 16930) Use of int in max_burst socket option deprecated.
[  353.495456][T16930] Use struct sctp_assoc_value instead
[  353.792763][T16946] __nla_validate_parse: 40 callbacks suppressed
[  353.792776][T16946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2910'.
[  353.801069][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'.
[  353.907249][ T1271] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  354.118219][ T1271] af_packet: tpacket_rcv: packet too big, clamped from 136 to 4294967272. macoff=96
[  354.212808][T16952] 8021q: adding VLAN 0 to HW filter on device bond84
[  354.218893][T16952] bond0: (slave bond84): Enslaving as an active interface with a down link
[  354.253279][T16975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2915'.
[  354.334215][T16979] validate_nla: 32 callbacks suppressed
[  354.334231][T16979] netlink: 'syz.1.2915': attribute type 21 has an invalid length.
[  354.366146][T16984] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  354.369479][T16984] bond0: option all_slaves_active: invalid value (7)
[  354.372234][T16979] IPv6: NLM_F_CREATE should be specified when creating new route
[  354.378312][T16985] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  354.381346][T16985] bond0: option all_slaves_active: invalid value (7)
[  354.385593][T16979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  354.387969][T16979] IPv6: NLM_F_CREATE should be set when creating new route
[  354.390442][T16979] IPv6: NLM_F_CREATE should be set when creating new route
[  354.393353][T16979] IPv6: NLM_F_CREATE should be set when creating new route
[  354.534843][T16998] netlink: 320 bytes leftover after parsing attributes in process `syz.2.2917'.
[  354.546662][T17000] netlink: 'syz.1.2919': attribute type 2 has an invalid length.
[  354.552483][T17000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  354.671140][T17006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2921'.
[  354.729306][T17008] bridge0: entered allmulticast mode
[  354.739651][T17008] pim6reg: entered allmulticast mode
[  354.855046][T17010] netlink: 'syz.1.2923': attribute type 1 has an invalid length.
[  354.884300][T17010] 8021q: adding VLAN 0 to HW filter on device bond102
[  354.905246][T17010] vlan2: entered promiscuous mode
[  354.907673][T17010] bond102: entered promiscuous mode
[  354.909993][T17010] vlan2: entered allmulticast mode
[  354.912093][T17010] bond102: entered allmulticast mode
[  355.451349][T17021] netlink: 'syz.2.2926': attribute type 9 has an invalid length.
[  355.457269][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'.
[  355.470267][T17021] macvlan28: entered promiscuous mode
[  355.476016][T17021] macvlan28: entered allmulticast mode
[  355.479879][T17021] 8021q: adding VLAN 0 to HW filter on device macvlan28
[  355.485594][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2925'.
[  355.665342][T17034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.679364][T17034] netlink: 'syz.1.2929': attribute type 1 has an invalid length.
[  355.712459][T17034] 8021q: adding VLAN 0 to HW filter on device bond103
[  355.828299][T17039] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2932'.
[  355.832708][T17039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2932'.
[  355.853466][T17041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2933'.
[  355.891592][T17043] netlink: 'syz.2.2934': attribute type 1 has an invalid length.
[  355.960898][T17043] 8021q: adding VLAN 0 to HW filter on device bond115
[  355.965843][T17043] bond114: (slave bond115): making interface the new active one
[  355.970554][T17043] bond114: (slave bond115): Enslaving as an active interface with an up link
[  355.980247][T17043] 8021q: adding VLAN 0 to HW filter on device bond114
[  356.033014][T17051] lo speed is unknown, defaulting to 1000
[  356.064045][T17056] netlink: 'syz.2.2938': attribute type 10 has an invalid length.
[  356.220419][T17068] netlink: 'syz.2.2940': attribute type 1 has an invalid length.
[  356.439752][T17081] netlink: 'syz.2.2941': attribute type 101 has an invalid length.
[  356.451132][T17081] netlink: 'syz.2.2941': attribute type 10 has an invalid length.
[  357.035478][T17106] 8021q: adding VLAN 0 to HW filter on device bond85
[  357.049153][T17106] bond0: (slave bond85): Enslaving as an active interface with a down link
[  357.146886][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  357.169838][T17111] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  357.255452][T17118] macvlan40: entered promiscuous mode
[  357.259204][T17118] macvlan40: entered allmulticast mode
[  357.425998][T17133] bond117: entered promiscuous mode
[  357.428744][T17133] bond117: entered allmulticast mode
[  357.431492][T17133] 8021q: adding VLAN 0 to HW filter on device bond117
[  357.434559][T17136] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  357.631885][T17149] bond118: entered promiscuous mode
[  357.634691][T17149] bond118: entered allmulticast mode
[  357.638497][T17149] 8021q: adding VLAN 0 to HW filter on device bond118
[  357.669318][T17147] bond119: entered promiscuous mode
[  357.671556][T17147] bond119: entered allmulticast mode
[  357.684988][T17147] 8021q: adding VLAN 0 to HW filter on device bond119
[  357.745331][T17147] lo speed is unknown, defaulting to 1000
[  357.875041][T17159] sctp: [Deprecated]: syz.0.2965 (pid 17159) Use of struct sctp_assoc_value in delayed_ack socket option.
[  357.875041][T17159] Use struct sctp_sack_info instead
[  358.172472][T17173] bond0: (slave bond107): Releasing backup interface
[  358.203695][T17173] bond111: (slave veth1): Releasing backup interface
[  358.223948][T17173] bond112: (slave veth35): Releasing active interface
[  358.243965][T17173] bond113: (slave bridge14): Removing an active aggregator
[  358.250939][T17173] bond113: (slave bridge14): Releasing backup interface
[  358.259590][T17173] bridge14: left promiscuous mode
[  358.263158][T17173] bridge14: left allmulticast mode
[  358.289617][T17178] IPVS: persistence engine module ip_vs_pe_ not found
[  358.304217][T17173] bond114: (slave bond115): Releasing backup interface
[  358.358630][T17179] bond14: (slave macvlan41): Error -98 calling set_mac_address
[  358.670506][T17188] macvlan49: entered promiscuous mode
[  358.672641][T17188] macvlan49: entered allmulticast mode
[  358.837158][T17210] __nla_validate_parse: 17 callbacks suppressed
[  358.837173][T17210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2970'.
[  358.858638][T17193] bond86: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  358.863407][T17193] bond86: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  358.867646][T17193] bond86: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  358.996374][T17213] 8021q: adding VLAN 0 to HW filter on device bond121
[  359.469910][ T6209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  359.493114][T17221] validate_nla: 6 callbacks suppressed
[  359.493131][T17221] netlink: 'syz.0.2978': attribute type 2 has an invalid length.
[  359.525176][T17221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  359.538120][T17222] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2977'.
[  359.543388][T17221] veth0_to_team: entered promiscuous mode
[  359.545644][T17221] veth0_to_team: entered allmulticast mode
[  359.602297][T17229] netlink: 'syz.0.2980': attribute type 9 has an invalid length.
[  359.605142][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'.
[  359.623454][T17229] macvlan41: entered promiscuous mode
[  359.625687][T17229] macvlan41: entered allmulticast mode
[  359.709404][ T5311] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  359.735043][T17234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2981'.
[  359.740470][T17234] netlink: 'syz.0.2981': attribute type 7 has an invalid length.
[  359.752561][T17234] netlink: 'syz.0.2981': attribute type 8 has an invalid length.
[  359.756053][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'.
[  359.779790][T17234] gretap0: entered promiscuous mode
[  359.782996][T17234] gretap0: left promiscuous mode
[  359.806300][T17240] netlink: 'syz.2.2983': attribute type 9 has an invalid length.
[  359.806497][T17239] netlink: 'syz.2.2983': attribute type 9 has an invalid length.
[  359.812873][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'.
[  359.814464][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'.
[  359.826284][T17239] macvlan29: entered promiscuous mode
[  359.828878][T17239] macvlan29: entered allmulticast mode
[  359.832227][T17239] 8021q: adding VLAN 0 to HW filter on device macvlan29
[  359.840700][T17240] macvlan30: entered promiscuous mode
[  359.842896][T17240] macvlan30: entered allmulticast mode
[  359.845177][T17240] 8021q: adding VLAN 0 to HW filter on device macvlan30
[  359.891707][T17239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'.
[  361.158046][T17280] netlink: 'syz.0.2997': attribute type 1 has an invalid length.
[  361.306115][T17294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3000'.
[  361.312177][T17294] netlink: 'syz.0.3000': attribute type 7 has an invalid length.
[  361.315283][T17294] netlink: 'syz.0.3000': attribute type 8 has an invalid length.
[  361.318932][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3000'.
[  361.539503][T17309] netlink: 'syz.1.3003': attribute type 9 has an invalid length.
[  361.549915][T17309] macvlan50: entered promiscuous mode
[  361.552291][T17309] macvlan50: entered allmulticast mode
[  361.573897][T17306] veth0: entered promiscuous mode
[  361.587490][T17306] veth0: left promiscuous mode
[  361.807584][T17318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  361.831064][T17316] bond104: (slave bridge66): making interface the new active one
[  361.841404][T17316] bond104: (slave bridge66): Enslaving as an active interface with an up link
[  361.881014][T17318] lo speed is unknown, defaulting to 1000
[  362.014753][T17323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  362.513150][T17343] macvlan31: entered promiscuous mode
[  362.515778][T17343] macvlan31: entered allmulticast mode
[  362.526781][T17343] 8021q: adding VLAN 0 to HW filter on device macvlan31
[  363.202399][T17377] 8021q: adding VLAN 0 to HW filter on device bond105
[  363.236174][T17377] 8021q: adding VLAN 0 to HW filter on device bond105
[  363.238802][T17377] bond105: (slave vxcan7): The slave device specified does not support setting the MAC address
[  363.243706][T17377] bond105: (slave vxcan7): Error -95 calling set_mac_address
[  363.326619][T17385] bond105: (slave bridge67): Enslaving as an active interface with a down link
[  363.342678][T17377] bond105: (slave bridge68): Enslaving as an active interface with a down link
[  363.671738][T17412] veth0_to_team: left promiscuous mode
[  363.673686][T17412] veth0_to_team: left allmulticast mode
[  363.679656][T17412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  364.084879][T17440] __nla_validate_parse: 6 callbacks suppressed
[  364.084891][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3042'.
[  364.100988][T17440] macvlan32: entered promiscuous mode
[  364.102738][T17440] macvlan32: entered allmulticast mode
[  364.105012][T17440] 8021q: adding VLAN 0 to HW filter on device macvlan32
[  364.220083][T17453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3047'.
[  364.223238][T17453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3047'.
[  364.295931][T17456] bond122: (slave vti0): The slave device specified does not support setting the MAC address
[  364.299942][T17456] bond122: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  364.306054][T17456] bond122: (slave vti0): making interface the new active one
[  364.310154][T17456] bond122: (slave vti0): Enslaving as an active interface with an up link
[  364.332140][T17459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3049'.
[  364.335116][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'.
[  364.343628][T17461] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3050'.
[  364.348337][T17462] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3050'.
[  364.350392][T17459] bond42: entered promiscuous mode
[  364.354323][T17459] ip6gretap0: entered promiscuous mode
[  364.359258][T17459] bond42: left promiscuous mode
[  364.361701][T17459] ip6gretap0: left promiscuous mode
[  364.406074][T17462] 8021q: adding VLAN 0 to HW filter on device bond123
[  364.610997][T17482] validate_nla: 14 callbacks suppressed
[  364.611010][T17482] netlink: 'syz.1.3054': attribute type 10 has an invalid length.
[  364.647773][T17485] netlink: 'syz.1.3056': attribute type 10 has an invalid length.
[  364.716525][T17491] bond104: (slave bridge66): Releasing active interface
[  364.730886][T17491] bond105: (slave bridge67): Releasing active interface
[  364.735739][T17491] bond105: (slave bridge68): Releasing active interface
[  364.740066][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  364.774483][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'.
[  364.791133][T17495] netlink: 'syz.2.3060': attribute type 9 has an invalid length.
[  364.793817][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'.
[  364.811156][T17495] macvlan33: entered promiscuous mode
[  364.812975][T17495] macvlan33: entered allmulticast mode
[  364.815635][T17495] 8021q: adding VLAN 0 to HW filter on device macvlan33
[  364.841024][T17491] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3058'.
[  364.904891][T17503] bond14: (slave macvlan42): Error -98 calling set_mac_address
[  365.085041][T17516] bond14: (slave macvlan35): Releasing backup interface
[  365.204530][T17516] bond76: (slave veth33): Releasing backup interface
[  365.224108][T17516] bond80: (slave bridge20): Releasing active interface
[  365.242104][T17516] vlan4: left promiscuous mode
[  365.255720][T17516] bridge0: left promiscuous mode
[  365.263162][T17516] bridge21: port 1(vlan4) entered disabled state
[  365.272097][T17516] bond0: (slave bond84): Releasing active interface
[  365.274827][T17516] bond0: (slave bond84): the permanent HWaddr of slave - 5e:79:0e:62:30:2f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  365.293875][T17516] bond0: (slave bond85): Releasing active interface
[  365.335919][T17521] netlink: 'syz.2.3069': attribute type 10 has an invalid length.
[  365.340525][T17520] netlink: 'syz.2.3069': attribute type 10 has an invalid length.
[  365.467431][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  365.550046][T17527] netlink: 'syz.2.3071': attribute type 1 has an invalid length.
[  365.573271][T17527] 8021q: adding VLAN 0 to HW filter on device bond124
[  365.593001][T17527] bond122: (slave vti0): Releasing backup interface
[  365.641614][T17530] bond0: (slave macvlan34): Opening slave failed
[  365.887125][T17543] netlink: 'syz.0.3075': attribute type 4 has an invalid length.
[  366.041297][T17553] netlink: 'syz.0.3077': attribute type 9 has an invalid length.
[  366.048584][T17553] macvlan42: entered promiscuous mode
[  366.050842][T17553] macvlan42: entered allmulticast mode
[  366.264721][T17566] lo speed is unknown, defaulting to 1000
[  366.842500][T17578] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  366.961134][T17585] netlink: 'syz.0.3084': attribute type 1 has an invalid length.
[  366.995528][T17585] 8021q: adding VLAN 0 to HW filter on device bond87
[  367.115883][T17603] xt_socket: unknown flags 0xd0
[  367.133795][T17604] bond0: (slave macvlan34): Opening slave failed
[  367.258006][T17608] tipc: Invalid UDP bearer configuration
[  367.258045][T17608] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  367.483755][T17627] netlink: 'syz.0.3097': attribute type 3 has an invalid length.
[  367.490009][T17627] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  367.712022][T17629] veth37: entered promiscuous mode
[  368.076477][T17647] dvmrp8: entered allmulticast mode
[  368.105305][T17647] lo speed is unknown, defaulting to 1000
[  368.315941][T17646] dvmrp8: left allmulticast mode
[  368.479522][ T5874] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  368.485724][T17668] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  368.531150][T17671] macvlan43: entered promiscuous mode
[  368.533222][T17671] macvlan43: entered allmulticast mode
[  368.732499][T17678] syzkaller1: entered allmulticast mode
[  368.741535][T17678] syzkaller1: left allmulticast mode
[  368.993782][T17685] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  369.000873][T17685] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  369.158624][T17689] tipc: Resetting bearer <eth:syzkaller0>
[  369.198399][T17689] hsr0: left allmulticast mode
[  369.200502][T17689] hsr_slave_0: left allmulticast mode
[  369.202801][T17689] hsr_slave_1: left allmulticast mode
[  369.321797][T17692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  369.379909][T17696] pim6reg: entered allmulticast mode
[  369.395726][T17702] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  369.440578][T17704] workqueue: Failed to create a rescuer kthread for wq "bond125": -EINTR
[  369.571206][T17715] __nla_validate_parse: 13 callbacks suppressed
[  369.571223][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3119'.
[  369.617775][T17718] validate_nla: 9 callbacks suppressed
[  369.617793][T17718] netlink: 'syz.1.3120': attribute type 1 has an invalid length.
[  369.659990][T17718] 8021q: adding VLAN 0 to HW filter on device bond106
[  369.688659][T17724] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3123'.
[  369.692944][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'.
[  369.700059][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'.
[  369.703401][T17722] 8021q: adding VLAN 0 to HW filter on device bond106
[  369.705859][T17722] bond106: (slave vxcan7): The slave device specified does not support setting the MAC address
[  369.710611][T17722] bond106: (slave vxcan7): Error -95 calling set_mac_address
[  369.726156][T17728] bond0: (slave macvlan34): Opening slave failed
[  369.765519][T17725] netlink: 'syz.0.3123': attribute type 1 has an invalid length.
[  369.958273][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3126'.
[  370.043190][T17741] netlink: 'syz.0.3127': attribute type 1 has an invalid length.
[  370.081686][T17741] 8021q: adding VLAN 0 to HW filter on device bond89
[  370.121600][T17744] netlink: 'syz.2.3128': attribute type 1 has an invalid length.
[  370.124881][T17744] netlink: 'syz.2.3128': attribute type 1 has an invalid length.
[  370.135133][T17741] 8021q: adding VLAN 0 to HW filter on device bond89
[  370.143763][T17741] bond89: (slave vxcan1): The slave device specified does not support setting the MAC address
[  370.153039][T17741] bond89: (slave vxcan1): Error -95 calling set_mac_address
[  370.231653][T17745] bond89: (slave bridge24): Enslaving as an active interface with a down link
[  370.249392][T17744] netlink: 'syz.2.3128': attribute type 1 has an invalid length.
[  370.301709][T17744] 8021q: adding VLAN 0 to HW filter on device bond126
[  370.324604][T17746] bond126: (slave wlan0): Opening slave failed
[  370.351011][T17744] vlan4: entered allmulticast mode
[  370.352726][T17744] veth1: entered allmulticast mode
[  370.355272][T17744] bond126: (slave vlan4): Opening slave failed
[  370.483631][T17766] bond0: (slave macvlan34): Opening slave failed
[  370.585792][T17774] netlink: 'syz.2.3135': attribute type 1 has an invalid length.
[  370.629048][T17774] bond127: (slave vxcan7): The slave device specified does not support setting the MAC address
[  370.634914][T17774] bond127: (slave vxcan7): Error -95 calling set_mac_address
[  370.789952][T17776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3136'.
[  370.828964][T17786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  370.861092][T17773] netlink: 'syz.0.3136': attribute type 10 has an invalid length.
[  370.951590][T17798] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  370.954793][T17798] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  370.965527][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'.
[  370.997578][T17808] bond0: entered promiscuous mode
[  371.000650][T17808] bond0: left promiscuous mode
[  371.260353][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3147'.
[  371.266622][T17824] netlink: 'syz.2.3148': attribute type 9 has an invalid length.
[  371.277084][T17824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'.
[  371.283793][T17824] macvlan34: entered promiscuous mode
[  371.285629][T17824] macvlan34: entered allmulticast mode
[  371.292830][T17824] 8021q: adding VLAN 0 to HW filter on device macvlan34
[  371.336184][T17828] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.339913][T17828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3150'.
[  371.368224][T17833] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.453736][T17842] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  371.575844][T17845] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  371.707493][T17864] netlink: 'syz.1.3157': attribute type 9 has an invalid length.
[  371.724408][T17864] macvlan51: entered promiscuous mode
[  371.726312][T17864] macvlan51: entered allmulticast mode
[  371.741435][T17864] hsr0: entered allmulticast mode
[  371.743043][T17864] hsr_slave_0: entered allmulticast mode
[  371.744962][T17864] hsr_slave_1: entered allmulticast mode
[  371.785619][T17868] bridge0: port 1(erspan0) entered blocking state
[  371.795317][T17868] bridge0: port 1(erspan0) entered disabled state
[  372.012074][T17878] bond90: (slave bridge25): making interface the new active one
[  372.015227][T17878] bond90: (slave bridge25): Enslaving as an active interface with an up link
[  372.123426][T17891] macvlan35: entered promiscuous mode
[  372.125654][T17891] macvlan35: entered allmulticast mode
[  372.128776][T17891] 8021q: adding VLAN 0 to HW filter on device macvlan35
[  372.171032][T17893] mac80211_hwsim hwsim28 ": renamed from wlan0
[  372.427031][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  372.602135][T17908] 8021q: adding VLAN 0 to HW filter on device bond128
[  372.607823][T17908] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  372.653427][T17911] macvlan36: entered promiscuous mode
[  372.655913][T17911] macvlan36: entered allmulticast mode
[  372.660152][T17911] 8021q: adding VLAN 0 to HW filter on device macvlan36
[  372.867829][T17917] 8021q: adding VLAN 0 to HW filter on device bond129
[  373.568439][T17961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  373.571460][T17961] IPv6: NLM_F_CREATE should be set when creating new route
[  373.574491][T17961] IPv6: NLM_F_CREATE should be set when creating new route
[  373.593898][T17961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  373.944843][T17970] 8021q: adding VLAN 0 to HW filter on device bond131
[  373.988514][T17973] !: entered promiscuous mode
[  373.992672][T17973] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  375.156997][ T5233] Bluetooth: hci2: command 0x0405 tx timeout
[  376.651431][T18014] validate_nla: 17 callbacks suppressed
[  376.651449][T18014] netlink: 'syz.0.3205': attribute type 10 has an invalid length.
[  376.814549][T18023] __nla_validate_parse: 23 callbacks suppressed
[  376.814567][T18023] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3208'.
[  376.900105][T18032] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3210'.
[  376.960865][T18034] bond43: (slave macvlan52): Enslaving as a backup interface with a down link
[  377.080739][T18037] netlink: 'syz.1.3212': attribute type 10 has an invalid length.
[  377.107506][T18037] !: left promiscuous mode
[  377.121308][T18037] netlink: 'syz.1.3212': attribute type 10 has an invalid length.
[  377.225452][T18040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3213'.
[  377.231577][T18042] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3213'.
[  377.289079][T18039] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  377.350419][T18050] netlink: 'syz.2.3214': attribute type 9 has an invalid length.
[  377.357734][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3214'.
[  377.374079][T18050] macvlan37: entered promiscuous mode
[  377.379429][T18050] macvlan37: entered allmulticast mode
[  377.384938][T18050] 8021q: adding VLAN 0 to HW filter on device macvlan37
[  377.442893][T18053] netlink: 'syz.0.3216': attribute type 1 has an invalid length.
[  377.445452][T18053] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3216'.
[  377.452273][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3216'.
[  377.455021][T18053] macvlan0: left promiscuous mode
[  377.459621][T18053] macvlan0: left allmulticast mode
[  377.461469][T18053] netlink: 'syz.0.3216': attribute type 1 has an invalid length.
[  377.464080][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3216'.
[  377.475533][T18053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'.
[  377.491175][T18053] sit3: entered promiscuous mode
[  377.518453][T18055] netlink: 'syz.2.3215': attribute type 10 has an invalid length.
[  377.521231][T18055] netlink: 'syz.2.3215': attribute type 10 has an invalid length.
[  377.665629][T18057] lo speed is unknown, defaulting to 1000
[  378.377729][T18071] bond89: (slave bridge24): Releasing active interface
[  378.380972][T18073] netlink: 'syz.2.3220': attribute type 3 has an invalid length.
[  378.383321][T18073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3220'.
[  378.386429][T18073] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  378.409777][T18071] bond90: (slave bridge25): Releasing active interface
[  378.690355][T18090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.736137][T18092] netlink: 'syz.0.3223': attribute type 29 has an invalid length.
[  378.753845][T18093] tipc: Disabling bearer <eth:syzkaller0>
[  378.889970][T18106] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  378.895006][T18107] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  379.069901][T18117] 8021q: adding VLAN 0 to HW filter on device bond107
[  379.108968][T18121] macvlan38: entered promiscuous mode
[  379.110926][T18121] macvlan38: entered allmulticast mode
[  379.113107][T18121] 8021q: adding VLAN 0 to HW filter on device macvlan38
[  379.344698][T18134] bond108: entered promiscuous mode
[  379.352056][T18134] 8021q: adding VLAN 0 to HW filter on device bond108
[  379.388874][T18134] bond108: (slave bridge69): making interface the new active one
[  379.392300][T18134] bridge69: entered promiscuous mode
[  379.398056][T18134] bond108: (slave bridge69): Enslaving as an active interface with an up link
[  379.568486][T18141] 8021q: adding VLAN 0 to HW filter on device bond91
[  379.584641][T18141] vlan5: entered promiscuous mode
[  379.586419][T18141] bond91: entered promiscuous mode
[  379.590308][T18141] vlan5: entered allmulticast mode
[  379.592050][T18141] bond91: entered allmulticast mode
[  379.680436][T18153] macvlan44: entered promiscuous mode
[  379.683399][T18153] macvlan44: entered allmulticast mode
[  380.090997][T18185] : entered promiscuous mode
[  380.186839][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  380.225203][T18202] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.231267][T18202] syzkaller0: entered promiscuous mode
[  380.233545][T18202] syzkaller0: entered allmulticast mode
[  380.294492][T18202] tipc: Resetting bearer <eth:syzkaller0>
[  380.309533][T18201] tipc: Resetting bearer <eth:syzkaller0>
[  380.343367][T18201] tipc: Disabling bearer <eth:syzkaller0>
[  380.405742][T18215] bond43: (slave macvlan53): Error -98 calling set_mac_address
[  380.466254][T18216] bond43: (slave macvlan52): Releasing backup interface
[  380.485020][T18216] bond108: (slave bridge69): Releasing backup interface
[  380.488421][T18216] bridge69: left promiscuous mode
[  381.411420][T18238] lo speed is unknown, defaulting to 1000
[  381.584274][T18251] sctp: [Deprecated]: syz.2.3264 (pid 18251) Use of int in maxseg socket option.
[  381.584274][T18251] Use struct sctp_assoc_value instead
[  381.703863][T18269] validate_nla: 14 callbacks suppressed
[  381.703876][T18269] netlink: 'syz.1.3266': attribute type 5 has an invalid length.
[  381.718404][T18271] syzkaller1: entered promiscuous mode
[  381.721042][T18271] syzkaller1: entered allmulticast mode
[  382.043087][T18281] __nla_validate_parse: 17 callbacks suppressed
[  382.043099][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3271'.
[  382.048445][T18281] 8021q: VLANs not supported on nlmon0
[  382.085530][T18283] netlink: 'syz.2.3272': attribute type 3 has an invalid length.
[  382.098511][T18283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3272'.
[  382.108273][T18283] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  382.121068][T18285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3273'.
[  382.166521][T18291] netlink: 'syz.2.3274': attribute type 11 has an invalid length.
[  382.224697][T18298] netlink: 'syz.2.3275': attribute type 1 has an invalid length.
[  382.252355][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3275'.
[  382.346211][T18305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3277'.
[  382.351509][T18305] netlink: 'syz.0.3277': attribute type 1 has an invalid length.
[  382.430534][T18303] lo speed is unknown, defaulting to 1000
[  382.431426][T18309] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3279'.
[  382.436587][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3279'.
[  382.476130][T18307] 8021q: adding VLAN 0 to HW filter on device bond92
[  383.083742][T18331] netlink: 'syz.1.3283': attribute type 1 has an invalid length.
[  383.115942][T18331] openvswitch: netlink: Multiple metadata blocks provided
[  383.384468][T18346] veth0: entered promiscuous mode
[  383.386539][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3288'.
[  383.394861][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3289'.
[  383.399900][T18346] veth0 (unregistering): left promiscuous mode
[  383.517177][T18353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3285'.
[  383.712275][T18361] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  384.095524][T18371] 8021q: adding VLAN 0 to HW filter on device bond132
[  384.100268][T18371] bond0: (slave bond132): Enslaving as a backup interface with a down link
[  384.190718][T18380] netlink: 'syz.2.3294': attribute type 3 has an invalid length.
[  384.559405][T18403] bond14: (slave macvlan45): Enslaving as an active interface with a down link
[  384.660888][T18407] netlink: 'syz.1.3300': attribute type 1 has an invalid length.
[  384.876059][T18418] bond0: (slave bond132): Releasing backup interface
[  385.359071][T18451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  385.405650][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  385.543298][T18461] netlink: 'syz.0.3312': attribute type 1 has an invalid length.
[  385.605060][T18461] 8021q: adding VLAN 0 to HW filter on device bond93
[  385.734047][T18472] netlink: 'syz.0.3315': attribute type 83 has an invalid length.
[  385.737687][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  385.937461][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.092106][T18491] syzkaller1: entered promiscuous mode
[  386.094442][T18491] syzkaller1: entered allmulticast mode
[  386.125881][T18495] smc: net device bond0 applied user defined pnetid SYZ
[  386.143390][T18495] bond14: (slave macvlan45): Releasing backup interface
[  386.260773][T18495] vlan0: entered promiscuous mode
[  386.262860][T18495] veth1: entered promiscuous mode
[  386.268789][T18495] vlan0: left allmulticast mode
[  386.270777][T18495] veth1: left allmulticast mode
[  386.272978][T18495] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  386.283618][T18506] bridge0: port 1(erspan0) entered blocking state
[  386.286187][T18506] bridge0: port 1(erspan0) entered disabled state
[  386.291131][T18506] erspan0: entered allmulticast mode
[  386.297209][T18506] erspan0: left allmulticast mode
[  386.536217][T18536] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  386.748482][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.761139][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  386.875332][T18570] validate_nla: 4 callbacks suppressed
[  386.875347][T18570] netlink: 'syz.2.3337': attribute type 1 has an invalid length.
[  386.895559][T18570] 8021q: adding VLAN 0 to HW filter on device bond133
[  386.910572][T18574] netlink: 'syz.0.3340': attribute type 1 has an invalid length.
[  386.921038][T18564] vlan4: entered promiscuous mode
[  386.922900][T18564] bond133: entered promiscuous mode
[  386.925110][T18564] vlan4: entered allmulticast mode
[  386.927793][T18564] bond133: entered allmulticast mode
[  386.977746][ T6209] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  387.011216][T18578] openvswitch: netlink: IPv4 tun info is not correct
[  387.232743][T18596] netlink: 'syz.2.3344': attribute type 10 has an invalid length.
[  387.251411][T18596] __nla_validate_parse: 31 callbacks suppressed
[  387.251429][T18596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3344'.
[  387.323027][T18598] netlink: 'syz.1.3345': attribute type 3 has an invalid length.
[  387.325706][T18598] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3345'.
[  387.331991][T18598] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  387.339064][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3346'.
[  387.388867][T18602] bond43: (slave macvlan53): Enslaving as a backup interface with a down link
[  387.449512][T18605] netlink: 'syz.1.3348': attribute type 1 has an invalid length.
[  387.451907][T18605] netlink: 'syz.1.3348': attribute type 1 has an invalid length.
[  387.561709][T18605] netlink: 'syz.1.3348': attribute type 1 has an invalid length.
[  387.587335][T18605] 8021q: adding VLAN 0 to HW filter on device bond110
[  387.609384][T18605] bond110: (slave wlan0): Opening slave failed
[  387.934837][T18618] netlink: 'syz.0.3350': attribute type 1 has an invalid length.
[  387.955083][T18618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3350'.
[  387.960627][T18618] 8021q: adding VLAN 0 to HW filter on device bond94
[  388.009956][T18621] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  388.014167][T18621] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  388.283454][T18629] netlink: 'syz.2.3353': attribute type 3 has an invalid length.
[  388.286334][T18629] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3353'.
[  388.293283][T18629] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  388.325698][T18631] netlink: 'syz.2.3354': attribute type 9 has an invalid length.
[  388.329221][T18631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'.
[  388.336612][T18631] macvlan39: entered promiscuous mode
[  388.339993][T18631] macvlan39: entered allmulticast mode
[  388.342471][T18631] 8021q: adding VLAN 0 to HW filter on device macvlan39
[  388.755993][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'.
[  388.759059][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3359'.
[  388.776108][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'.
[  388.780988][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3359'.
[  388.844753][T18654] macvlan54: entered promiscuous mode
[  388.855950][T18654] macvlan54: entered allmulticast mode
[  388.905990][T18656] bond14: (slave macvlan46): Enslaving as an active interface with a down link
[  389.010349][T18662] syzkaller0: Caught tx_queue_len zero misconfig
[  389.320186][T18694] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  389.509421][T18706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.514195][T18706] syzkaller0: entered promiscuous mode
[  389.516202][T18706] syzkaller0: entered allmulticast mode
[  389.526528][T18706] syzkaller0: mtu less than device minimum
[  389.681905][T18716] 8021q: adding VLAN 0 to HW filter on device bond95
[  389.710189][T18716] vlan6: entered promiscuous mode
[  389.712756][T18716] bond95: entered promiscuous mode
[  389.714858][T18716] vlan6: entered allmulticast mode
[  389.722175][T18716] bond95: entered allmulticast mode
[  389.791161][T18727] 8021q: adding VLAN 0 to HW filter on device bond134
[  389.805173][ T5674] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.811664][ T5674] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.818019][ T5674] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.830762][ T5674] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  389.840193][T18731] delete_channel: no stack
[  389.858119][T18731] veth39: entered promiscuous mode
[  390.907054][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  391.101437][T18779] lo speed is unknown, defaulting to 1000
[  391.485143][T18801] macvlan47: entered promiscuous mode
[  391.487606][T18801] macvlan47: entered allmulticast mode
[  391.555549][T18803] veth39: entered promiscuous mode
[  391.560249][T18803] bond96: (slave veth39): Enslaving as a backup interface with a down link
[  391.566654][T18803] 8021q: adding VLAN 0 to HW filter on device bond96
[  391.779438][T18806] tipc: Resetting bearer <eth:syzkaller0>
[  391.990192][T18806] hsr0: left allmulticast mode
[  391.991823][T18806] erspan0: left allmulticast mode
[  391.993564][T18806] batadv_slave_1: left allmulticast mode
[  392.024792][ T5674] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.033136][ T5674] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.068058][T18825] validate_nla: 84 callbacks suppressed
[  392.068072][T18825] netlink: 'syz.1.3403': attribute type 1 has an invalid length.
[  392.080127][T18827] netlink: 'syz.0.3404': attribute type 3 has an invalid length.
[  392.083262][T18827] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  392.112772][ T5674] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.115705][ T5674] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.166554][T18825] 8021q: adding VLAN 0 to HW filter on device bond111
[  392.194035][T18828] 8021q: adding VLAN 0 to HW filter on device bond111
[  392.197307][T18828] bond111: (slave vcan0): The slave device specified does not support setting the MAC address
[  392.202922][T18828] bond111: (slave vcan0): Error -95 calling set_mac_address
[  392.492587][T18848] netlink: 'syz.2.3410': attribute type 10 has an invalid length.
[  392.495884][T18848] netlink: 'syz.2.3410': attribute type 10 has an invalid length.
[  392.524516][T18850] netlink: 'syz.1.3411': attribute type 3 has an invalid length.
[  392.532269][T18850] __nla_validate_parse: 23 callbacks suppressed
[  392.532279][T18850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3411'.
[  392.544256][T18850] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  392.575288][T18853] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  392.631063][T18857] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3413'.
[  392.634840][T18857] netlink: 'syz.1.3413': attribute type 1 has an invalid length.
[  392.643178][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'.
[  392.664912][T18857] 8021q: adding VLAN 0 to HW filter on device bond112
[  393.243647][T18908] bond14: (slave macvlan48): Enslaving as an active interface with a down link
[  393.361012][T18917] netlink: 'syz.0.3426': attribute type 1 has an invalid length.
[  393.401034][T18917] bond97: entered promiscuous mode
[  393.403125][T18917] 8021q: adding VLAN 0 to HW filter on device bond97
[  393.441691][T18917] 8021q: adding VLAN 0 to HW filter on device bond97
[  393.444254][T18917] bond97: (slave wireguard3): The slave device specified does not support setting the MAC address
[  393.448952][T18917] bond97: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[  393.456507][T18917] bond97: (slave wireguard3): making interface the new active one
[  393.459985][T18917] wireguard3: entered promiscuous mode
[  393.463593][T18917] bond97: (slave wireguard3): Enslaving as an active interface with an up link
[  393.495911][T18917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  393.498955][T18917] IPv6: NLM_F_CREATE should be set when creating new route
[  393.501738][T18917] IPv6: NLM_F_CREATE should be set when creating new route
[  393.506477][T18917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  393.540518][T18924] bond136: entered promiscuous mode
[  393.580058][T18917] bond97: (slave wireguard4): The slave device specified does not support setting the MAC address
[  393.588280][T18917] bond97: (slave wireguard4): Enslaving as a backup interface with an up link
[  393.625889][T18927] bond137: entered promiscuous mode
[  393.630263][T18931] bridge0: port 1(erspan0) entered blocking state
[  393.632943][T18931] bridge0: port 1(erspan0) entered disabled state
[  393.635716][T18931] erspan0: entered allmulticast mode
[  393.644086][T18931] erspan0: left allmulticast mode
[  393.684739][T18934] bond14: (slave macvlan46): Releasing backup interface
[  393.687281][T18934] bond14: (slave macvlan46): the permanent HWaddr of slave - b6:b1:9e:68:f5:f3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  393.709838][T18934] bond96: (slave veth39): Releasing backup interface
[  393.729305][T18934] bond14: (slave macvlan48): Releasing backup interface
[  393.740878][T18934] bond97: (slave wireguard3): Releasing backup interface
[  393.743259][T18934] wireguard3: left promiscuous mode
[  393.745204][T18934] bond97: (slave wireguard4): making interface the new active one
[  393.749786][T18934] wireguard4: entered promiscuous mode
[  393.764716][T18934] bond97: (slave wireguard4): Releasing backup interface
[  393.775337][T18934] wireguard4: left promiscuous mode
[  394.049935][T18957] netlink: 'syz.2.3434': attribute type 1 has an invalid length.
[  394.052598][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3434'.
[  394.073987][T18957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3434'.
[  394.126458][T18960] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  394.131031][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'.
[  394.138637][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  394.204892][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3436'.
[  394.257454][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  394.581279][T18985] dvmrp1: entered allmulticast mode
[  394.621679][T18985] pimreg: left allmulticast mode
[  394.623718][T18985] dvmrp1: left allmulticast mode
[  394.786098][T18988] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3441'.
[  394.852333][T18989] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  395.067705][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3444'.
[  395.195580][T19021] netlink: 'syz.0.3448': attribute type 9 has an invalid length.
[  395.199087][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3448'.
[  395.208403][T19021] macvlan49: entered promiscuous mode
[  395.211279][T19021] macvlan49: entered allmulticast mode
[  395.213075][T19021] hsr0: entered allmulticast mode
[  395.214537][T19021] erspan0: entered allmulticast mode
[  395.216448][T19021] batadv_slave_1: entered allmulticast mode
[  395.321228][T19029] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  395.326062][T19030] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  395.547089][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  395.554448][T19038] netlink: 'syz.0.3453': attribute type 2 has an invalid length.
[  395.593968][T19038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  396.099081][T19061] erspan0: entered allmulticast mode
[  397.382753][T19108] bond43: (slave macvlan53): Releasing backup interface
[  397.409441][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  397.526470][T19117] validate_nla: 6 callbacks suppressed
[  397.526486][T19117] netlink: 'syz.1.3476': attribute type 8 has an invalid length.
[  397.735606][T19129] __nla_validate_parse: 5 callbacks suppressed
[  397.735622][T19129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3479'.
[  397.743060][T19129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3479'.
[  397.892592][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3480'.
[  397.899122][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'.
[  397.943660][T19136] netlink: 'syz.1.3481': attribute type 1 has an invalid length.
[  397.970714][T19136] bond114: entered promiscuous mode
[  397.972402][T19136] bond114: entered allmulticast mode
[  397.974711][T19136] 8021q: adding VLAN 0 to HW filter on device bond114
[  397.988223][T19136] bridge70: entered promiscuous mode
[  397.990088][T19136] bridge70: entered allmulticast mode
[  397.992445][T19136] bond114: (slave bridge70): Enslaving as a backup interface with an up link
[  398.020087][T19136] tipc: Resetting bearer <eth:syzkaller0>
[  398.034425][T19136] hsr0: left allmulticast mode
[  398.036349][T19136] hsr_slave_0: left allmulticast mode
[  398.039224][T19136] hsr_slave_1: left allmulticast mode
[  398.063794][T19136] netlink: 'syz.1.3481': attribute type 1 has an invalid length.
[  398.412726][T19168] netlink: 'syz.1.3489': attribute type 39 has an invalid length.
[  398.418386][T19162] 8021q: adding VLAN 0 to HW filter on device bond138
[  398.422118][T19162] bond0: (slave bond138): Enslaving as a backup interface with a down link
[  398.552595][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3494'.
[  398.581820][T19179] netlink: 'syz.0.3494': attribute type 1 has an invalid length.
[  398.590777][T19179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3494'.
[  398.744352][T19174] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.748849][T19174] syzkaller0: left allmulticast mode
[  398.803200][T19191] netlink: 'syz.2.3496': attribute type 9 has an invalid length.
[  398.806196][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3496'.
[  398.824015][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'.
[  398.833673][T19195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3498'.
[  398.838965][T19191] macvlan40: entered promiscuous mode
[  398.841396][T19191] macvlan40: entered allmulticast mode
[  398.843931][T19191] 8021q: adding VLAN 0 to HW filter on device macvlan40
[  398.923160][T19202] syzkaller0: left promiscuous mode
[  398.925994][T19202] netlink: 'syz.1.3500': attribute type 10 has an invalid length.
[  398.943949][T19204] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  398.953630][T19204] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  399.203520][T19223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3503'.
[  399.252706][T19226] netlink: 'syz.0.3505': attribute type 2 has an invalid length.
[  399.262886][T19226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  399.306568][T19228] netlink: 'syz.0.3506': attribute type 9 has an invalid length.
[  399.321928][T19228] macvlan50: entered promiscuous mode
[  399.323755][T19228] macvlan50: entered allmulticast mode
[  399.415048][T19236] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  399.420371][T19236] D: renamed from syzkaller0
[  399.423204][T19236] tipc: Disabling bearer <eth:syzkaller0>
[  399.464883][T19238] netlink: 'syz.0.3510': attribute type 1 has an invalid length.
[  399.820255][T19249] macvlan51: entered promiscuous mode
[  399.822994][T19249] macvlan51: entered allmulticast mode
[  399.970367][T19255] bond100: entered promiscuous mode
[  399.972677][T19255] 8021q: adding VLAN 0 to HW filter on device bond100
[  400.361688][T19289] bond115: (slave vxcan7): The slave device specified does not support setting the MAC address
[  400.379700][T19289] bond115: (slave vxcan7): Error -95 calling set_mac_address
[  400.462772][T19301] 8021q: adding VLAN 0 to HW filter on device bond101
[  400.531169][T19301] 8021q: adding VLAN 0 to HW filter on device bond101
[  400.534286][T19301] bond101: (slave vxcan1): The slave device specified does not support setting the MAC address
[  400.541010][T19301] bond101: (slave vxcan1): Error -95 calling set_mac_address
[  400.560868][T19306] IPv6: sit2: Disabled Multicast RS
[  400.593127][T19307] veth41: entered promiscuous mode
[  400.601068][T19307] bond101: (slave veth41): Enslaving as an active interface with a down link
[  400.678111][T19310] macvlan55: entered promiscuous mode
[  400.680408][T19310] macvlan55: entered allmulticast mode
[  400.682571][T19310] hsr0: entered allmulticast mode
[  400.684645][T19310] hsr_slave_0: entered allmulticast mode
[  400.693398][T19310] hsr_slave_1: entered allmulticast mode
[  401.010893][T19326] 8021q: adding VLAN 0 to HW filter on device bond116
[  401.039486][T19326] vlan3: entered promiscuous mode
[  401.041525][T19326] bond116: entered promiscuous mode
[  401.043492][T19326] vlan3: entered allmulticast mode
[  401.045237][T19326] bond116: entered allmulticast mode
[  401.186162][T19338] bond117: (slave vti1): The slave device specified does not support setting the MAC address
[  401.196914][T19338] bond117: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  401.202648][T19338] bond117: (slave vti1): making interface the new active one
[  401.205622][T19338] bond117: (slave vti1): Enslaving as an active interface with an up link
[  401.236180][T19340] macvlan52: entered promiscuous mode
[  401.259496][T19340] macvlan52: entered allmulticast mode
[  401.324357][T19344] bond118: entered promiscuous mode
[  401.326251][T19344] 8021q: adding VLAN 0 to HW filter on device bond118
[  401.386443][T19348] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  401.403549][T19351] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  401.494953][T19364] macvlan53: entered promiscuous mode
[  401.497427][T19364] macvlan53: entered allmulticast mode
[  401.805434][T19402] bond114: (slave bridge70): Releasing backup interface
[  401.814703][T19402] bridge70: left promiscuous mode
[  401.824808][T19402] bridge70: left allmulticast mode
[  401.831118][T19402] bond117: (slave vti1): Releasing backup interface
[  401.838938][T19400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.846407][T19402] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  401.864723][T19401] syzkaller0: entered promiscuous mode
[  401.867330][T19401] syzkaller0: entered allmulticast mode
[  401.930249][T19403] tipc: Resetting bearer <eth:syzkaller0>
[  401.955730][T19403] tipc: Disabling bearer <eth:syzkaller0>
[  402.033831][T19416] bond0: (slave bond138): Releasing backup interface
[  402.055736][T19416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  402.103776][T19422] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  402.165708][T19425] IPVS: length: 163 != 8
[  402.339868][T19436] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  402.492934][T19443] 8021q: adding VLAN 0 to HW filter on device bond102
[  402.539732][T19443] veth43: entered promiscuous mode
[  402.549980][T19443] bond102: (slave veth43): Enslaving as an active interface with a down link
[  402.559739][T19451] IPVS: Error connecting to the multicast addr
[  402.572919][T19451] validate_nla: 21 callbacks suppressed
[  402.572935][T19451] netlink: 'syz.1.3564': attribute type 16 has an invalid length.
[  402.588964][T19451] netlink: 'syz.1.3564': attribute type 17 has an invalid length.
[  402.594532][T19451] tipc: Resetting bearer <eth:syzkaller0>
[  402.625505][T19451] hsr0: left allmulticast mode
[  402.629779][T19451] hsr_slave_0: left allmulticast mode
[  402.632007][T19451] hsr_slave_1: left allmulticast mode
[  402.779690][T19464] rdma_rxe: rxe_newlink: failed to add lo
[  402.943276][T19474] __nla_validate_parse: 23 callbacks suppressed
[  402.943293][T19474] netlink: 352 bytes leftover after parsing attributes in process `syz.2.3570'.
[  403.062712][T19485] netlink: 'syz.2.3571': attribute type 10 has an invalid length.
[  403.071203][T19486] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  403.150382][T19490] netlink: 'syz.0.3573': attribute type 9 has an invalid length.
[  403.153658][T19490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'.
[  403.163839][T19490] macvlan54: entered promiscuous mode
[  403.166313][T19490] macvlan54: entered allmulticast mode
[  403.178835][T19492] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[  403.181374][T19492] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  403.271839][T19497] netlink: 'syz.0.3575': attribute type 10 has an invalid length.
[  403.305508][T19500] netlink: 'syz.2.3576': attribute type 2 has an invalid length.
[  403.326944][T19500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3576'.
[  403.330608][T19500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'.
[  403.365770][T19505] IPv6: Can't replace route, no match found
[  403.391680][T19503] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3577'.
[  403.461361][T19508] syzkaller0: left promiscuous mode
[  403.461532][T19509] netlink: 'syz.2.3579': attribute type 10 has an invalid length.
[  403.463136][T19508] syzkaller0: left allmulticast mode
[  403.473867][T19514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3581'.
[  403.634592][T19520] netlink: 'syz.2.3582': attribute type 10 has an invalid length.
[  404.218771][T19529] netlink: 'syz.0.3585': attribute type 1 has an invalid length.
[  404.222214][T19529] netlink: 'syz.0.3585': attribute type 1 has an invalid length.
[  404.343752][T19529] 8021q: adding VLAN 0 to HW filter on device bond103
[  404.355408][T19529] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[  404.358993][T19529] bond103: (slave wlan0): Opening slave failed
[  404.374467][T19533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3586'.
[  404.393730][T19533] macvlan56: entered promiscuous mode
[  404.401560][T19533] macvlan56: entered allmulticast mode
[  404.406241][T19533] hsr0: entered allmulticast mode
[  404.409426][T19533] hsr_slave_0: entered allmulticast mode
[  404.411366][T19533] hsr_slave_1: entered allmulticast mode
[  404.614805][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3590'.
[  404.625951][T19541] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  404.839047][T19551] hsr0: left allmulticast mode
[  404.841576][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3595'.
[  404.845038][T19551] batadv_slave_1: left allmulticast mode
[  404.875759][T19562] macvlan57: entered promiscuous mode
[  404.892002][T19562] macvlan57: entered allmulticast mode
[  405.043135][T19572] lo speed is unknown, defaulting to 1000
[  405.270438][T19579] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  405.456320][T19592] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  405.602311][T19599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3604'.
[  405.931481][T19601] 8021q: adding VLAN 0 to HW filter on device bond119
[  406.399566][T19622] 8021q: adding VLAN 0 to HW filter on device bond120
[  406.823495][T19648] erspan0: left allmulticast mode
[  406.876432][T19648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  406.884187][  T794] lo speed is unknown, defaulting to 1000
[  406.889183][  T794] syz0: Port: 1 Link ACTIVE
[  406.890891][  T794] lo speed is unknown, defaulting to 1000
[  406.905578][T19656] lo speed is unknown, defaulting to 1000
[  407.216461][T19665] bond104: entered promiscuous mode
[  407.221658][T19665] 8021q: adding VLAN 0 to HW filter on device bond104
[  407.271137][T19665] bond104: (slave bridge28): making interface the new active one
[  407.273685][T19665] bridge28: entered promiscuous mode
[  407.281341][T19665] bond104: (slave bridge28): Enslaving as an active interface with an up link
[  407.327615][T19670] macvlan55: entered promiscuous mode
[  407.329873][T19670] macvlan55: entered allmulticast mode
[  407.331760][T19670] hsr0: entered allmulticast mode
[  407.333455][T19670] batadv_slave_1: entered allmulticast mode
[  407.458988][T19674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  407.477902][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  407.785461][T19691] validate_nla: 18 callbacks suppressed
[  407.785477][T19691] netlink: 'syz.1.3628': attribute type 1 has an invalid length.
[  407.901271][T19699] netlink: 'syz.0.3632': attribute type 1 has an invalid length.
[  407.930527][T19699] 8021q: adding VLAN 0 to HW filter on device bond105
[  408.114705][T19710] netlink: 'syz.2.3634': attribute type 1 has an invalid length.
[  408.463233][T19724] 8021q: adding VLAN 0 to HW filter on device bond141
[  408.471024][T19724] bond0: (slave bond141): Enslaving as a backup interface with a down link
[  408.584904][T19733] __nla_validate_parse: 15 callbacks suppressed
[  408.584916][T19733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3640'.
[  408.621295][T19733] veth37: entered promiscuous mode
[  408.685742][T19742] Bluetooth: MGMT ver 1.23
[  408.696367][T19742] netlink: 'syz.2.3642': attribute type 10 has an invalid length.
[  408.702993][T19742] netlink: 'syz.2.3642': attribute type 10 has an invalid length.
[  408.744439][T19748] netlink: 'syz.2.3644': attribute type 8 has an invalid length.
[  408.762150][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3644'.
[  408.780724][T19748] bond0: entered promiscuous mode
[  408.783172][T19748] bond141: entered promiscuous mode
[  408.786199][T19748] bond0: left promiscuous mode
[  408.792329][T19748] bond141: left promiscuous mode
[  408.841226][T19757] netlink: 'syz.1.3646': attribute type 1 has an invalid length.
[  408.846420][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3643'.
[  408.877186][T19757] 8021q: adding VLAN 0 to HW filter on device bond121
[  408.917451][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3647'.
[  408.990293][T19768] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3649'.
[  408.994907][T19768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3649'.
[  409.004623][T19768] netlink: 'syz.0.3649': attribute type 1 has an invalid length.
[  409.037435][T19768] 8021q: adding VLAN 0 to HW filter on device bond106
[  409.285600][T19782] bond101: (slave veth41): Releasing active interface
[  409.291491][T19782] bond102: (slave veth43): Releasing active interface
[  409.298279][T19782] bond104: (slave bridge28): Releasing backup interface
[  409.301525][T19782] bridge28: left promiscuous mode
[  409.319620][T19782] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3652'.
[  409.434525][T19792] netlink: 'syz.0.3653': attribute type 1 has an invalid length.
[  409.629641][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  409.640747][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  410.121626][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  412.572910][T19807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3657'.
[  412.575914][T19807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3657'.
[  412.610538][T19810] bpq0: entered promiscuous mode
[  412.631757][T19814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3658'.
[  412.806405][T19823] tc_dump_action: action bad kind
[  412.810453][T19824] tc_dump_action: action bad kind
[  413.155598][T19851] netlink: 'syz.0.3667': attribute type 10 has an invalid length.
[  413.167271][T19851] netlink: 'syz.0.3667': attribute type 10 has an invalid length.
[  413.206549][T19853] netlink: 'syz.2.3668': attribute type 58 has an invalid length.
[  413.396165][T19855] bond0: (slave bond141): Releasing backup interface
[  413.439412][T19855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  413.627530][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  413.668215][T19861] __nla_validate_parse: 7 callbacks suppressed
[  413.668229][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3671'.
[  413.748767][T19869] netlink: 'syz.2.3672': attribute type 1 has an invalid length.
[  413.799591][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3673'.
[  413.802412][T19874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3673'.
[  413.805259][T19874] netlink: 'syz.2.3673': attribute type 18 has an invalid length.
[  413.941258][T19876] 8021q: adding VLAN 0 to HW filter on device bond143
[  413.948729][T19876] bond0: (slave bond143): Enslaving as a backup interface with a down link
[  414.114292][T19881] netlink: 'syz.0.3675': attribute type 10 has an invalid length.
[  414.117538][T19881] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3675'.
[  414.173354][T19901] netlink: 'syz.2.3677': attribute type 1 has an invalid length.
[  414.176553][T19901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3677'.
[  414.178641][T19902] netlink: 'syz.0.3678': attribute type 66 has an invalid length.
[  414.186486][T19901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3677'.
[  414.227805][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3679'.
[  414.242717][T19904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3679'.
[  414.275622][T19906] openvswitch: netlink: IPv4 tun info is not correct
[  414.321598][T19911] netlink: 'syz.0.3682': attribute type 1 has an invalid length.
[  414.339382][T19911] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3682'.
[  414.342713][T19911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3682'.
[  414.348947][T19911] 8021q: adding VLAN 0 to HW filter on device bond108
[  414.519819][T19930] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  414.555685][T19930] bond122: entered promiscuous mode
[  414.557635][T19930] bond122: entered allmulticast mode
[  414.559513][T19930] 8021q: adding VLAN 0 to HW filter on device bond122
[  414.564156][T19930] netlink: 'syz.1.3686': attribute type 10 has an invalid length.
[  414.567114][T19930] !: entered promiscuous mode
[  414.569160][T19930] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  414.579576][T19939] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  414.852355][T19957] bond123: (slave vxcan7): The slave device specified does not support setting the MAC address
[  414.856477][T19957] bond123: (slave vxcan7): Error -95 calling set_mac_address
[  414.933301][T19970] syzkaller0: entered allmulticast mode
[  414.936179][T19970] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.952900][T19970] lo speed is unknown, defaulting to 1000
[  414.968792][T19972] bond0: entered promiscuous mode
[  414.970417][T19972] bond143: entered promiscuous mode
[  414.972954][T19972] bond0: left promiscuous mode
[  414.974405][T19972] bond143: left promiscuous mode
[  415.072376][T19967] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  415.822683][T20024] syzkaller0: entered promiscuous mode
[  415.832465][T20024] syzkaller0: entered allmulticast mode
[  416.215524][T20049] macvlan56: entered promiscuous mode
[  416.219225][T20049] macvlan56: entered allmulticast mode
[  416.222713][T20046] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  416.409375][T20062] syzkaller0: left promiscuous mode
[  416.411403][T20062] syzkaller0: left allmulticast mode
[  416.443075][T20065] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  416.749758][T20084] 8021q: adding VLAN 0 to HW filter on device bond124
[  416.805224][T20090] netlink: zone id is out of range
[  416.814177][T20090] netlink: zone id is out of range
[  416.816161][T20090] netlink: zone id is out of range
[  416.822049][T20090] netlink: zone id is out of range
[  416.824157][T20090] netlink: zone id is out of range
[  416.826353][T20090] netlink: zone id is out of range
[  417.021892][T20109] bridge0: port 1(erspan0) entered blocking state
[  417.025492][T20109] bridge0: port 1(erspan0) entered disabled state
[  417.030070][T20109] erspan0: entered allmulticast mode
[  417.034587][T20109] erspan0: left allmulticast mode
[  417.106938][T20116] veth35: entered promiscuous mode
[  417.539326][T20152] 8021q: adding VLAN 0 to HW filter on device bond111
[  417.575013][T20152] 8021q: adding VLAN 0 to HW filter on device bond111
[  417.579792][T20152] bond111: (slave vxcan1): The slave device specified does not support setting the MAC address
[  417.584560][T20152] bond111: (slave vxcan1): Error -95 calling set_mac_address
[  417.624729][T20155] 8021q: adding VLAN 0 to HW filter on device bond125
[  417.639910][T20159] bond111: (slave bridge29): Enslaving as an active interface with a down link
[  417.643645][T20155] bond125: (slave wlan0): Opening slave failed
[  417.665450][T20155] vlan4: entered allmulticast mode
[  417.667924][T20155] veth1: entered allmulticast mode
[  417.671204][T20155] bond125: (slave vlan4): Opening slave failed
[  417.924263][T20185] bond111: (slave bridge29): Releasing active interface
[  418.031084][T20194] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  418.163841][T20201] validate_nla: 18 callbacks suppressed
[  418.163859][T20201] netlink: 'syz.0.3752': attribute type 13 has an invalid length.
[  418.173249][T20201] netlink: 'syz.0.3752': attribute type 12 has an invalid length.
[  418.464388][T20223] bond0: (slave bond143): Releasing backup interface
[  418.573048][T20223] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  418.658755][T20234] netlink: 'syz.1.3758': attribute type 1 has an invalid length.
[  418.676915][T20234] 8021q: adding VLAN 0 to HW filter on device bond126
[  418.701366][T20234] 8021q: adding VLAN 0 to HW filter on device bond126
[  418.703661][T20234] bond126: (slave vxcan7): The slave device specified does not support setting the MAC address
[  418.708234][T20234] bond126: (slave vxcan7): Error -95 calling set_mac_address
[  418.792030][T20247] bridge0: port 1(macsec0) entered blocking state
[  418.796019][T20247] bridge0: port 1(macsec0) entered disabled state
[  418.800317][T20247] macsec0: entered allmulticast mode
[  418.804698][T20247] macsec0: left allmulticast mode
[  418.864145][T20250] __nla_validate_parse: 29 callbacks suppressed
[  418.864162][T20250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3762'.
[  418.896019][T20252] netlink: 'syz.2.3763': attribute type 1 has an invalid length.
[  418.900412][T20252] workqueue: Failed to create a rescuer kthread for wq "bond144": -EINTR
[  419.031190][T20263] sctp: [Deprecated]: syz.0.3765 (pid 20263) Use of int in maxseg socket option.
[  419.031190][T20263] Use struct sctp_assoc_value instead
[  419.160414][T20272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3767'.
[  419.227294][    C1] ==================================================================
[  419.230543][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  419.233677][    C1] Read of size 2 at addr ffff88812279042a by task swapper/1/0
[  419.237097][    C1] 
[  419.238451][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  419.238471][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.238482][    C1] Call Trace:
[  419.238489][    C1]  <IRQ>
[  419.238497][    C1]  dump_stack_lvl+0x189/0x250
[  419.238518][    C1]  ? rcu_is_watching+0x15/0xb0
[  419.238532][    C1]  ? __kasan_check_byte+0x12/0x40
[  419.238553][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.238568][    C1]  ? rcu_is_watching+0x15/0xb0
[  419.238580][    C1]  ? lock_release+0x4b/0x3e0
[  419.238600][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  419.238618][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  419.238636][    C1]  print_report+0xca/0x240
[  419.238649][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  419.238666][    C1]  kasan_report+0x118/0x150
[  419.238687][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  419.238718][    C1]  rose_timer_expiry+0x471/0x4b0
[  419.238738][    C1]  call_timer_fn+0x17e/0x5f0
[  419.238759][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  419.238786][    C1]  ? call_timer_fn+0xbe/0x5f0
[  419.238832][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  419.238859][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  419.238878][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.238897][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  419.238916][    C1]  __run_timer_base+0x61a/0x860
[  419.238935][    C1]  ? ktime_get+0x3e/0x1f0
[  419.238956][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  419.238973][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  419.238997][    C1]  run_timer_softirq+0xb7/0x180
[  419.239016][    C1]  handle_softirqs+0x286/0x870
[  419.239033][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  419.239047][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  419.239061][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  419.239079][    C1]  __irq_exit_rcu+0xca/0x1f0
[  419.239093][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  419.239111][    C1]  irq_exit_rcu+0x9/0x30
[  419.239123][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  419.239143][    C1]  </IRQ>
[  419.239148][    C1]  <TASK>
[  419.239154][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  419.239171][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  419.239192][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 b6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  419.239234][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  419.239253][    C1] RAX: fbb79067444df300 RBX: ffffffff819683a8 RCX: fbb79067444df300
[  419.239264][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b7115 RDI: ffffffff8be33300
[  419.239274][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  419.239285][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38230
[  419.239296][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d7000
[  419.239308][    C1]  ? do_idle+0x1e8/0x510
[  419.239326][    C1]  default_idle+0x13/0x20
[  419.239338][    C1]  default_idle_call+0x74/0xb0
[  419.239351][    C1]  do_idle+0x1e8/0x510
[  419.239367][    C1]  ? __pfx_do_idle+0x10/0x10
[  419.239388][    C1]  cpu_startup_entry+0x44/0x60
[  419.239401][    C1]  start_secondary+0x101/0x110
[  419.239422][    C1]  common_startup_64+0x13e/0x147
[  419.239448][    C1]  </TASK>
[  419.239452][    C1] 
[  419.358088][    C1] Allocated by task 20037:
[  419.359914][    C1]  kasan_save_track+0x3e/0x80
[  419.361832][    C1]  __kasan_kmalloc+0x93/0xb0
[  419.363545][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  419.365210][    C1]  subflow_ulp_init+0xd0/0x5c0
[  419.366634][    C1]  tcp_set_ulp+0x53c/0x5f0
[  419.368116][    C1]  mptcp_subflow_create_socket+0x5c5/0xb40
[  419.370397][    C1]  __mptcp_nmpc_sk+0x150/0x720
[  419.372283][    C1]  mptcp_sendmsg_fastopen+0xd4/0x580
[  419.374343][    C1]  mptcp_sendmsg+0x176c/0x1970
[  419.376209][    C1]  __sock_sendmsg+0x19c/0x270
[  419.378087][    C1]  ____sys_sendmsg+0x505/0x830
[  419.380028][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  419.381941][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  419.383911][    C1]  do_syscall_64+0xfa/0x3b0
[  419.385714][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.387988][    C1] 
[  419.388971][    C1] Freed by task 1155:
[  419.390538][    C1]  kasan_save_track+0x3e/0x80
[  419.392366][    C1]  kasan_save_free_info+0x46/0x50
[  419.394122][    C1]  __kasan_slab_free+0x5b/0x80
[  419.395763][    C1]  kmem_cache_free_bulk+0x2d1/0x520
[  419.397695][    C1]  kvfree_rcu_bulk+0xe5/0x1f0
[  419.399532][    C1]  kfree_rcu_work+0xed/0x170
[  419.401400][    C1]  process_scheduled_works+0xae1/0x17b0
[  419.403644][    C1]  worker_thread+0x8a0/0xda0
[  419.405507][    C1]  kthread+0x711/0x8a0
[  419.407135][    C1]  ret_from_fork+0x3fc/0x770
[  419.409005][    C1]  ret_from_fork_asm+0x1a/0x30
[  419.410858][    C1] 
[  419.411835][    C1] Last potentially related work creation:
[  419.414046][    C1]  kasan_save_stack+0x3e/0x60
[  419.415862][    C1]  kasan_record_aux_stack+0xbd/0xd0
[  419.417848][    C1]  kvfree_call_rcu+0xbb/0x410
[  419.419676][    C1]  tcp_cleanup_ulp+0x7c/0xf0
[  419.421544][    C1]  tcp_v4_destroy_sock+0x273/0x5d0
[  419.423522][    C1]  inet_csk_destroy_sock+0x166/0x3a0
[  419.425596][    C1]  __tcp_close+0xb19/0xde0
[  419.427323][    C1]  __mptcp_close_ssk+0x3d7/0xfd0
[  419.429234][    C1]  mptcp_destroy_common+0x152/0x320
[  419.431284][    C1]  mptcp_destroy+0x84/0x120
[  419.433150][    C1]  __mptcp_destroy_sock+0x156/0x350
[  419.435256][    C1]  __mptcp_close+0x76a/0xb00
[  419.437110][    C1]  mptcp_close+0x28/0x1a0
[  419.438875][    C1]  inet_release+0x144/0x190
[  419.440707][    C1]  sock_close+0xc3/0x240
[  419.442409][    C1]  __fput+0x44c/0xa70
[  419.444038][    C1]  task_work_run+0x1d4/0x260
[  419.445877][    C1]  exit_to_user_mode_loop+0xec/0x110
[  419.447965][    C1]  do_syscall_64+0x2bd/0x3b0
[  419.449859][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.452233][    C1] 
[  419.453225][    C1] The buggy address belongs to the object at ffff888122790400
[  419.453225][    C1]  which belongs to the cache kmalloc-512 of size 512
[  419.458694][    C1] The buggy address is located 42 bytes inside of
[  419.458694][    C1]  freed 512-byte region [ffff888122790400, ffff888122790600)
[  419.464008][    C1] 
[  419.465000][    C1] The buggy address belongs to the physical page:
[  419.467597][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122790
[  419.471141][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  419.474531][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  419.477589][    C1] page_type: f5(slab)
[  419.479208][    C1] raw: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  419.482556][    C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  419.485972][    C1] head: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  419.489334][    C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  419.492637][    C1] head: 057ff00000000002 ffffea000489e401 00000000ffffffff 00000000ffffffff
[  419.495689][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  419.498324][    C1] page dumped because: kasan: bad access detected
[  419.500328][    C1] page_owner tracks the page as allocated
[  419.502107][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11568, tgid 11567 (syz.1.1491), ts 209425057157, free_ts 204689876967
[  419.508589][    C1]  post_alloc_hook+0x240/0x2a0
[  419.510090][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  419.511962][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  419.513687][    C1]  alloc_pages_mpol+0x232/0x4a0
[  419.515127][    C1]  allocate_slab+0x8a/0x370
[  419.516534][    C1]  ___slab_alloc+0xbeb/0x1410
[  419.517984][    C1]  __kmalloc_noprof+0x305/0x4f0
[  419.519454][    C1]  ops_init+0x7b/0x5c0
[  419.520664][    C1]  setup_net+0x10c/0x320
[  419.521999][    C1]  copy_net_ns+0x31b/0x4d0
[  419.523410][    C1]  create_new_namespaces+0x3f3/0x720
[  419.525066][    C1]  unshare_nsproxy_namespaces+0x11c/0x170
[  419.526841][    C1]  ksys_unshare+0x4c8/0x8c0
[  419.528286][    C1]  __x64_sys_unshare+0x38/0x50
[  419.529779][    C1]  do_syscall_64+0xfa/0x3b0
[  419.531205][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.533057][    C1] page last free pid 6209 tgid 6209 stack trace:
[  419.534980][    C1]  __free_frozen_pages+0xbc4/0xd30
[  419.536555][    C1]  pcpu_depopulate_chunk+0x45f/0x500
[  419.538187][    C1]  pcpu_balance_workfn+0x350/0xe00
[  419.539743][    C1]  process_scheduled_works+0xae1/0x17b0
[  419.541474][    C1]  worker_thread+0x8a0/0xda0
[  419.542866][    C1]  kthread+0x711/0x8a0
[  419.544072][    C1]  ret_from_fork+0x3fc/0x770
[  419.545513][    C1]  ret_from_fork_asm+0x1a/0x30
[  419.547021][    C1] 
[  419.547779][    C1] Memory state around the buggy address:
[  419.549460][    C1]  ffff888122790300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  419.551901][    C1]  ffff888122790380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  419.554406][    C1] >ffff888122790400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.556814][    C1]                                   ^
[  419.558451][    C1]  ffff888122790480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.560899][    C1]  ffff888122790500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  419.563377][    C1] ==================================================================
[  419.565938][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  419.568086][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  419.570957][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.574210][    C1] Call Trace:
[  419.575291][    C1]  <IRQ>
[  419.576227][    C1]  dump_stack_lvl+0x99/0x250
[  419.577783][    C1]  ? __asan_memcpy+0x40/0x70
[  419.579427][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.581187][    C1]  ? __pfx__printk+0x10/0x10
[  419.582801][    C1]  vpanic+0x281/0x750
[  419.584083][    C1]  ? __pfx_vpanic+0x10/0x10
[  419.585475][    C1]  ? asm_common_interrupt+0x26/0x40
[  419.587096][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.588757][    C1]  panic+0xb9/0xc0
[  419.589914][    C1]  ? __pfx_panic+0x10/0x10
[  419.591263][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  419.593189][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  419.594940][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  419.596499][    C1]  check_panic_on_warn+0x89/0xb0
[  419.598069][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  419.599690][    C1]  end_report+0x78/0x160
[  419.601032][    C1]  kasan_report+0x129/0x150
[  419.602461][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  419.604014][    C1]  rose_timer_expiry+0x471/0x4b0
[  419.605495][    C1]  call_timer_fn+0x17e/0x5f0
[  419.606867][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  419.608551][    C1]  ? call_timer_fn+0xbe/0x5f0
[  419.610005][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  419.611608][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  419.613312][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.615184][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  419.616858][    C1]  __run_timer_base+0x61a/0x860
[  419.618366][    C1]  ? ktime_get+0x3e/0x1f0
[  419.619844][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  419.621874][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  419.624057][    C1]  run_timer_softirq+0xb7/0x180
[  419.625985][    C1]  handle_softirqs+0x286/0x870
[  419.627913][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  419.629586][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  419.631329][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  419.633044][    C1]  __irq_exit_rcu+0xca/0x1f0
[  419.634444][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  419.636089][    C1]  irq_exit_rcu+0x9/0x30
[  419.637456][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  419.639295][    C1]  </IRQ>
[  419.640233][    C1]  <TASK>
[  419.641137][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  419.643483][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  419.645754][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 b6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  419.652208][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  419.654007][    C1] RAX: fbb79067444df300 RBX: ffffffff819683a8 RCX: fbb79067444df300
[  419.656403][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b7115 RDI: ffffffff8be33300
[  419.659129][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  419.662115][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa38230
[  419.664530][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d7000
[  419.666936][    C1]  ? do_idle+0x1e8/0x510
[  419.668397][    C1]  default_idle+0x13/0x20
[  419.669727][    C1]  default_idle_call+0x74/0xb0
[  419.671140][    C1]  do_idle+0x1e8/0x510
[  419.672370][    C1]  ? __pfx_do_idle+0x10/0x10
[  419.673757][    C1]  cpu_startup_entry+0x44/0x60
[  419.675254][    C1]  start_secondary+0x101/0x110
[  419.676735][    C1]  common_startup_64+0x13e/0x147
[  419.678353][    C1]  </TASK>
[  419.679941][    C1] Kernel Offset: disabled
[  419.681324][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:00:14  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff84c611d5 RBX=0000000000000e00 RCX=ffff888124bc3980 RDX=0000000000000002
RSI=0000000000000e00 RDI=0000000000000000 RBP=ffffc90027d2fb10 RSP=ffffc90027d2f960
R8 =ffff88802c0d1fff R9 =1ffff1100581a3ff R10=dffffc0000000000 R11=ffffed100581a400
R12=0000000000000000 R13=dffffc0000000000 R14=0000000000001000 R15=0000000000000e00
RIP=ffffffff84c611ef RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdc52d4f6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000499000 CR3=0000000030e90000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000004090a06 000000500a000001
XMM02=327a797300020009 0000000200e30000 XMM03=00000000307a7973 0001000900000000
XMM04=0a00000002000000 0000000000010011 XMM05=00000014000000d1 4007000580020004
XMM06=0000006574616964 656d6d690001000e XMM07=800100188004001c 00000000307a7973
XMM08=953a0cf3565dd268 30c7feb2f922493f XMM09=0000000000000000 00007f1f03812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0470
R8 =ffff888107328237 R9 =1ffff11020e65046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99afa8c1 R14=ffffffff99def3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000005b000 CR3=0000000030e90000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fdc52187498 00007fdc52187470 XMM03=00007fdc521874a8 00007fdc521874a0
XMM04=00007fdc52ced100 00007fdc52187460 XMM05=00007fdc52187478 00007fdc521874c0
XMM06=00007fdc521874b8 00007fdc521874b0 XMM07=00007fdc521874a8 00007fdc521874a0
XMM08=0000000000000000 00007fdc52012ee7 XMM09=0000000000000000 00007fdc52012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
