last executing test programs:

2.271292999s ago: executing program 0 (id=625):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={<r5=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000240)={r5, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x48}, 0x90)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe8728ce82d5df8ab}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES32=r2], 0xc8}}, 0x40000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

1.411902533s ago: executing program 0 (id=634):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000002c0)=""/189, &(0x7f00000000c0)=0xbd)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="1500030000000000000100009b209279017df26104000000080005000602fa"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090)
r1 = socket(0x2, 0x80805, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = socket(0x0, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000800)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000900)=0xe8)
r5 = gettid()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@private0, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8)
r7 = socket$kcm(0x2, 0x5, 0x84)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, <r8=>0x0}, 0x0)
sendmsg$unix(r1, &(0x7f0000000c00)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x58}, 0x800)
r9 = getpid()
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r8, @ANYRESDEC=r7, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r9, @ANYBLOB="f9143b85e5e2049371467fa7ff2ca31fbacbeaf208bb54d78b6f5495fcbebe01a33c5eec60cf4eddd62b9a21"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280)={<r12=>0x0, <r13=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r11, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r12, r13}}}], 0x20, 0x4004c}}], 0x1, 0x20000011)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003280), &(0x7f00000032c0)=0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000003300)={0x0, r0}, 0x8)
sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="380060220370ff866490514db20074", @ANYRES16=r13, @ANYBLOB="000428bd7000ffdbdf25420000000c00990002000000010000000a000600ebe9f57faa4700000a0006000802110000010000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
pipe(&(0x7f0000000480)={<r14=>0xffffffffffffffff})
vmsplice(r14, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$caif_stream(0x25, 0x1, 0x5)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
socket$phonet(0x23, 0x2, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003500), &(0x7f0000003540)=0xc)

675.05311ms ago: executing program 2 (id=635):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000004000000240012800c0001006d6163766c616e001400028008000100100000000a00c443fbf0f811c8310300", @ANYRES32=r2, @ANYBLOB], 0x4c}}, 0x0)

621.268035ms ago: executing program 2 (id=636):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4ea3}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

620.770236ms ago: executing program 1 (id=637):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000580)=ANY=[@ANYRESOCT], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080), 0x4) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0}) (async)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000000c0)={'ip6_vti0\x00'})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x1d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x3079591b009eaaee)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000040)={0x3, 0x4, 0x401, 0x9}, 0x10) (async)
sendmsg$nl_generic(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async)
recvmmsg(r7, &(0x7f0000009a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/188, 0xbc}, {&(0x7f0000001e00)=""/74, 0x4a}], 0x5}, 0x8}], 0x3, 0x42, 0x0) (async)
sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000002d000100"], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x408}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6164b}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x30}}, 0xc0b0)

523.989805ms ago: executing program 2 (id=638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r3)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20048000)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYBLOB="400000b29e29d1582b61c6002652703400"/33, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6   \x00'}, 0x20)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x1d, 0x2, 0x6)
unshare(0x22020400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9, 0x0, 0x4}, 0x18)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001d0001002dbd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="d300a0010a000100aaaaaaaaaa370000d1a4edded874f79babd05f6ccffa756a652217313bc5688420ecbe43499d3b8d4dd4d9b4ed00c6f0252dcfad7854b186a821a82bbfaf0d46d5f9b169117a9b8cca"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r12 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)

523.628853ms ago: executing program 0 (id=639):
r0 = socket(0xa, 0x3, 0x87)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a000d0e"], 0x20}}, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$alg(0x26, 0x5, 0x0)
accept$alg(r8, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xc}, {0x7}, {0x3}}}, 0x24}}, 0x44)

389.118697ms ago: executing program 1 (id=640):
socket$inet6(0xa, 0x80001, 0x80005)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

388.178765ms ago: executing program 0 (id=641):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d7729120b6596a64187b19"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10)
socket$inet6(0xa, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000004000000588cde50f0ecc8c0edf9eacda1de080000000082a3fa6b3cc51d235e03ae84de000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0)

313.914564ms ago: executing program 1 (id=642):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r1, 0x4)
listen(r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x60}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023000000", @ANYRES32=0x0, @ANYBLOB="140002"], 0x2c}}, 0x0)

312.47509ms ago: executing program 0 (id=643):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x5822063364ccb978)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xd, 0x0, &(0x7f0000000200)="df33c9f7b9a600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES64=r5, @ANYRES16, @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0)
close(r5)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r4, 0x0, 0x0}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x38c)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

311.872256ms ago: executing program 1 (id=644):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002480)={0x14, 0x36, 0x1, 0x70bd29, 0x25dfdbfc, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2}, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa05dd7cf5c0a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22385}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}}, 0x4000010)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

238.489058ms ago: executing program 2 (id=645):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0], 0x158}, 0x1, 0xba01}, 0x44)

183.972052ms ago: executing program 1 (id=646):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x74}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x9, 0x5, 0x608, 0x8, 0x6, 0x8001, 0x6, 0x9, 0x7f]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0xd6385fcb34f21696)
setsockopt$inet6_tcp_int(r3, 0x11a, 0x3, 0x0, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000040a010300000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000810)
recvmmsg(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x29}], 0x1, 0x10020, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
write$cgroup_int(r0, 0x0, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x74}}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async)
connect$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x9, 0x5, 0x608, 0x8, 0x6, 0x8001, 0x6, 0x9, 0x7f]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0xd6385fcb34f21696) (async)
setsockopt$inet6_tcp_int(r3, 0x11a, 0x3, 0x0, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000040a010300000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000810) (async)
recvmmsg(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x29}], 0x1, 0x10020, 0x0) (async)

183.547882ms ago: executing program 2 (id=647):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000)
getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2, 0xa, 0xe, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x33fe0}}, 0x8890)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3bcaaff2eaa94d16ab00000000c8df00b1974035ae1d2f3da0ec91c6f5d8f437b5a70100007fd1f9f0e6c2086b1a19ac7528bcb9c40fb329cafb90781c7ba4e6569d6d63f8ffed55c4c75d941f144553273d56cbf0a8ca810b1c9229d009beb8cecd5104a2591ee5946749e2af8a9ac9567975ca110cb6c26e5fb6959ff1127fa10c81c9b3045111aeff72ee5df9c1b42807af2a66ed48a238450e2cc2c1982020fc21e4509688398880293f0ef0bd01689272929aff0075553a21e241722250f286def84b42b293463b065ad6c3b5b636d0bd5cdf06bbfefd5e0bc9b5a834f597f96afe85bf5692b4661c246d5c656c00ea", @ANYRES32=0x0, @ANYBLOB="5d5b0000f7d047ae0c002b8008000800", @ANYRES32=r3, @ANYBLOB="08002c0003000000"], 0x34}, 0x1, 0x0, 0x0, 0x18040}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
getsockname$packet(r4, &(0x7f0000000000), &(0x7f0000000040)=0x14)

103.66448ms ago: executing program 2 (id=648):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000240)={0x9, 0x1, 0x80000000, 0xb883, 0x4, 0xffff}) (async)
sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x24040800)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r5}, 0x10) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x10, 0x888, 0x8000, 0x4, 0x6, 0x4, 0x0, 0x4}, &(0x7f0000000200)=0x20) (async, rerun: 64)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) (async)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

101.849149ms ago: executing program 1 (id=649):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x9, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x24040880) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r0, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r4=>0x0)
sendto(r1, &(0x7f0000000440)="50e2eeb2b0abbc0402d5d227acba41cada3b77635b313d0bf65e555437c931a4e02e2644804525825156329e560265392a573e8cb6dc1b266b3107db1e25b6ea1f68f165c5d7a075e319eb661a004a1bd0f4594cfdf7fe7501509416a4e51efbe81c519ce48b0c6ee817301a7c8cfb8c7d701fe1ee4577c04360ed910a6a8a0dbc6b7fe2186d46350fed16791491eb5a92ca43362e086144c33522f5f6b3cf4e0b2d2503ff2451d766b0dbb0d2443de8651146332bd0527f42d3e8a2cdf944f3ccaccfc8d450c5c0d2", 0xc9, 0x200020c0, &(0x7f0000000180)=@nfc={0x27, r4, 0xffffffffffffffff, 0x3}, 0x80) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0)

0s ago: executing program 0 (id=650):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4) (async)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x2c1, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="64000000020601020000000000000000000000000900020073797a32000000000500040000000000050005000200000016000300686173683a6e65742c706f72742c6e657400000014000780080006000000000008001340fffffffc0500010007"], 0x64}, 0x1, 0x0, 0x0, 0x20008831}, 0x20000000) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="64000000020601020000000000000000000000000900020073797a32000000000500040000000000050005000200000016000300686173683a6e65742c706f72742c6e657400000014000780080006000000000008001340fffffffc0500010007"], 0x64}, 0x1, 0x0, 0x0, 0x20008831}, 0x20000000)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) (async)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0xe01, 0x4, 0x8009}, 0xfffb)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x48)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7}, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r5}, 0x3f)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket(0x11, 0x3, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="04010000ff070000000000000000260000000000", @ANYRES32=0x0, @ANYBLOB="0b18c5338e024ec1d6d5cac9d6a74dc13612269e160800498004001c801400d600fe8000000000000000000000000000aaf95bfc12542492ba5c2a614c966a1f54496443d08f9d1c7a817b28ab4f64a1dda07fbde4b560194272f6d1a0bc7574a04c232bd38a3dfb7e39ac089c9999abddef6fb58eafdd9b3d0cb84a0b481e5235e4a2a88526d31c1128f330de5e8d8a36677904f1c9f1dbc4d13d336ee95efb2303e583d46cf9f68c942f45f43a81c1a6a4077637c11173fd3c84ac5465e756ab9893370a47245a8895bed35e81de47df1cb7715c20dcf54f25c45600"/232], 0x100}], 0x1}, 0x20040051)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r4, 0x0, &(0x7f00000000c0)=@udp6}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r4, 0x0, &(0x7f00000000c0)=@udp6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711813000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59333' (ED25519) to the list of known hosts.
syzkaller login: [   49.877248][ T5778] cgroup: Unknown subsys name 'net'
[   49.976359][ T5778] cgroup: Unknown subsys name 'cpuset'
[   49.983096][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.336567][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.499904][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.505301][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.508062][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.510860][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.537246][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.541803][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.544718][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.545648][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.547504][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.552000][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.552279][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.555045][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.557413][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.566987][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.574080][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.883799][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   57.907616][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   57.963221][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   58.090203][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.093918][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.097216][ T5842] bridge_slave_0: entered allmulticast mode
[   58.101646][ T5842] bridge_slave_0: entered promiscuous mode
[   58.135200][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.138100][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.140878][ T5850] bridge_slave_0: entered allmulticast mode
[   58.144079][ T5850] bridge_slave_0: entered promiscuous mode
[   58.148174][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.150533][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.152863][ T5850] bridge_slave_1: entered allmulticast mode
[   58.155450][ T5850] bridge_slave_1: entered promiscuous mode
[   58.159802][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.163318][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.166776][ T5842] bridge_slave_1: entered allmulticast mode
[   58.171181][ T5842] bridge_slave_1: entered promiscuous mode
[   58.187951][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.190872][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.193705][ T5846] bridge_slave_0: entered allmulticast mode
[   58.197588][ T5846] bridge_slave_0: entered promiscuous mode
[   58.234422][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.238833][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.242238][ T5846] bridge_slave_1: entered allmulticast mode
[   58.245989][ T5846] bridge_slave_1: entered promiscuous mode
[   58.266172][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.272277][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.278370][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.311334][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.333171][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.365118][ T5850] team0: Port device team_slave_0 added
[   58.369771][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.374301][ T5850] team0: Port device team_slave_1 added
[   58.387178][ T5842] team0: Port device team_slave_0 added
[   58.392426][ T5842] team0: Port device team_slave_1 added
[   58.433277][ T5846] team0: Port device team_slave_0 added
[   58.458889][ T5846] team0: Port device team_slave_1 added
[   58.461693][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.464456][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.474863][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.480611][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.482768][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.491734][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.503894][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.506656][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.517268][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.522706][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.525174][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.534611][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.582050][ T5842] hsr_slave_0: entered promiscuous mode
[   58.584373][ T5842] hsr_slave_1: entered promiscuous mode
[   58.587044][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.589769][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.598747][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.604668][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.606921][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.615841][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.670134][ T5850] hsr_slave_0: entered promiscuous mode
[   58.672421][ T5850] hsr_slave_1: entered promiscuous mode
[   58.674496][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   58.676262][ T5850] Cannot create hsr debugfs directory
[   58.731755][ T5846] hsr_slave_0: entered promiscuous mode
[   58.734254][ T5846] hsr_slave_1: entered promiscuous mode
[   58.736404][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   58.739789][ T5846] Cannot create hsr debugfs directory
[   58.962798][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.981098][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.989051][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.010654][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.034445][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.057397][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.062803][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.068614][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.168239][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.179816][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.187201][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.197135][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.309118][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.326708][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.350238][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   59.361169][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.363744][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.379353][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.382033][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.387540][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   59.403644][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.406534][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.423188][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.426177][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.461290][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.505184][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   59.532287][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.535138][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.550179][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.553239][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.600570][ T5236] Bluetooth: hci0: command tx timeout
[   59.602547][   T55] Bluetooth: hci1: command tx timeout
[   59.603163][ T5236] Bluetooth: hci2: command tx timeout
[   59.716547][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.729876][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.810090][ T5842] veth0_vlan: entered promiscuous mode
[   59.822714][ T5850] veth0_vlan: entered promiscuous mode
[   59.841647][ T5842] veth1_vlan: entered promiscuous mode
[   59.851004][ T5850] veth1_vlan: entered promiscuous mode
[   59.871090][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.905891][ T5850] veth0_macvtap: entered promiscuous mode
[   59.929380][ T5842] veth0_macvtap: entered promiscuous mode
[   59.948185][ T5842] veth1_macvtap: entered promiscuous mode
[   59.954065][ T5850] veth1_macvtap: entered promiscuous mode
[   59.990374][ T5846] veth0_vlan: entered promiscuous mode
[   59.994631][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.002817][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.010216][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.022189][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.032630][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.036470][ T5846] veth1_vlan: entered promiscuous mode
[   60.053272][ T5877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.057636][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.067758][ T5877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.073145][ T5877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.076149][ T5877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.089245][ T5877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.105151][ T5877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.191542][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.194781][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.199695][ T5846] veth0_macvtap: entered promiscuous mode
[   60.206972][ T5846] veth1_macvtap: entered promiscuous mode
[   60.215326][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.220926][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.249498][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.266250][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.267721][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.272609][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.296140][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.309359][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.312961][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.316222][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.339953][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.345918][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.369425][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.438032][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.441063][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.504287][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.505514][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   60.507487][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.523405][ T5914] lo speed is unknown, defaulting to 1000
[   60.531692][ T5914] lo speed is unknown, defaulting to 1000
[   60.536256][ T5914] lo speed is unknown, defaulting to 1000
[   60.625517][ T5915] syzkaller1: entered promiscuous mode
[   60.627300][ T5915] syzkaller1: entered allmulticast mode
[   60.680645][ T5920] tipc: Started in network mode
[   60.682303][ T5920] tipc: Node identity 7a1f1eded3e, cluster identity 4711
[   60.684614][ T5920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.687461][ T5920] syzkaller0: entered promiscuous mode
[   60.690259][ T5920] syzkaller0: entered allmulticast mode
[   60.705085][ T5920] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1'.
[   60.711151][ T5920] tipc: Resetting bearer <eth:syzkaller0>
[   60.715581][ T5919] tipc: Resetting bearer <eth:syzkaller0>
[   60.731146][ T5919] tipc: Disabling bearer <eth:syzkaller0>
[   60.809773][ T5914] infiniband syz0: set active
[   60.812172][ T5897] lo speed is unknown, defaulting to 1000
[   60.814293][ T5914] infiniband syz0: added lo
[   60.844228][ T5923] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.4'.
[   60.854995][ T5914] RDS/IB: syz0: added
[   60.861500][ T5914] smc: adding ib device syz0 with port count 1
[   60.865811][ T5914] smc:    ib device syz0 port 1 has pnetid 
[   60.890935][  T791] lo speed is unknown, defaulting to 1000
[   60.908715][ T5914] lo speed is unknown, defaulting to 1000
[   60.997550][ T5929] netlink: 'syz.0.5': attribute type 1 has an invalid length.
[   61.017529][ T5929] bond1 (unregistering): Released all slaves
[   61.050974][ T5914] lo speed is unknown, defaulting to 1000
[   61.055418][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   61.180481][ T5935] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6'.
[   61.190474][ T5914] lo speed is unknown, defaulting to 1000
[   61.229799][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'.
[   61.291312][ T5939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'.
[   61.319349][ T5939] batman_adv: batadv0: Adding interface: dummy0
[   61.321365][ T5939] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.348269][ T5939] batman_adv: batadv0: Interface activated: dummy0
[   61.351156][ T5914] lo speed is unknown, defaulting to 1000
[   61.355510][ T5939] batadv0: mtu less than device minimum
[   61.358161][ T5939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   61.362181][ T5939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   61.366986][ T5939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   61.371527][ T5939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   61.375442][ T5939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   61.379925][ T5939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   61.384050][ T5939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   61.388263][ T5939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   61.392266][ T5939] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   61.410034][ T5940] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8'.
[   61.416651][ T5939] netlink: 'syz.0.8': attribute type 1 has an invalid length.
[   61.536108][ T5946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.592177][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'.
[   61.634543][ T5947] ipvlan2: entered promiscuous mode
[   61.638224][ T5948] bridge_slave_1: left allmulticast mode
[   61.640058][ T5948] bridge_slave_1: left promiscuous mode
[   61.642524][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.672586][ T5948] bridge_slave_0: left allmulticast mode
[   61.676128][ T5948] bridge_slave_0: left promiscuous mode
[   61.678955][ T5236] Bluetooth: hci2: command tx timeout
[   61.681806][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.685837][ T5950] netlink: 'syz.0.11': attribute type 1 has an invalid length.
[   61.689230][ T5236] Bluetooth: hci1: command tx timeout
[   61.689547][ T5845] Bluetooth: hci0: command tx timeout
[   61.691783][ T5950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11'.
[   61.752381][ T5952] Zero length message leads to an empty skb
[   61.805872][ T5946] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.822313][ T5956] 8021q: VLANs not supported on ipvlan1
[   61.836342][ T5957] macsec1: entered promiscuous mode
[   61.841340][ T5957] macsec1: entered allmulticast mode
[   62.019022][ T5964] bridge0: port 3(erspan0) entered blocking state
[   62.031590][ T5964] bridge0: port 3(erspan0) entered disabled state
[   62.042578][ T5964] erspan0: entered allmulticast mode
[   62.079167][ T5964] erspan0: entered promiscuous mode
[   62.102978][ T5964] bridge0: port 3(erspan0) entered blocking state
[   62.105565][ T5964] bridge0: port 3(erspan0) entered forwarding state
[   62.115513][ T5966] erspan0: left allmulticast mode
[   62.123397][ T5966] erspan0: left promiscuous mode
[   62.133299][ T5966] bridge0: port 3(erspan0) entered disabled state
[   62.330712][ T5968] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[   63.008978][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.015427][ T5979] bond0: (slave rose0): Enslaving as an active interface with an up link
[   63.416558][ T6014] 8021q: VLANs not supported on gre0
[   63.658010][ T6030] veth3: entered promiscuous mode
[   63.757970][ T5845] Bluetooth: hci1: command tx timeout
[   63.760843][ T5236] Bluetooth: hci0: command tx timeout
[   63.763146][ T5236] Bluetooth: hci2: command tx timeout
[   63.772421][ T6032] netlink: 'syz.0.32': attribute type 1 has an invalid length.
[   63.845603][ T6035] veth3: entered promiscuous mode
[   63.993422][ T6044] hsr_slave_1 (unregistering): left promiscuous mode
[   64.247629][ T6063] syzkaller0: entered promiscuous mode
[   64.252408][ T6063] syzkaller0: entered allmulticast mode
[   64.284902][ T6068] netlink: 'syz.0.38': attribute type 13 has an invalid length.
[   64.288526][ T6068] netlink: 'syz.0.38': attribute type 17 has an invalid length.
[   64.369295][ T6056] lo speed is unknown, defaulting to 1000
[   65.192505][ T6084] tipc: Started in network mode
[   65.194540][ T6084] tipc: Node identity aaa62beaa729, cluster identity 4711
[   65.202034][ T6084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.206740][ T6084] syzkaller0: entered promiscuous mode
[   65.209061][ T6084] syzkaller0: entered allmulticast mode
[   65.240617][ T6084] tipc: Resetting bearer <eth:syzkaller0>
[   65.250932][ T6083] tipc: Resetting bearer <eth:syzkaller0>
[   65.278968][ T6083] tipc: Disabling bearer <eth:syzkaller0>
[   65.350663][ T6098] netlink: 'syz.1.43': attribute type 13 has an invalid length.
[   65.508883][ T6102] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   65.531242][ T6102] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   65.623072][ T6115] netlink: 'syz.0.46': attribute type 2 has an invalid length.
[   65.650571][ T6118] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.668949][ T6115] k*]: entered promiscuous mode
[   65.783266][    C1] Illegal XDP return value 16128 on prog  (id 9) dev team0, expect packet loss!
[   65.791896][ T6115] veth0_to_team: entered promiscuous mode
[   65.807594][ T6115] veth0_to_team: entered allmulticast mode
[   65.827421][ T6126] netlink: 'syz.1.49': attribute type 4 has an invalid length.
[   65.837082][ T6126] xt_socket: unknown flags 0xd0
[   65.839149][   T55] Bluetooth: hci1: command tx timeout
[   65.840382][ T5845] Bluetooth: hci2: command tx timeout
[   65.841378][   T55] Bluetooth: hci0: command tx timeout
[   65.920360][ T6130] netlink: 'syz.0.50': attribute type 4 has an invalid length.
[   65.932437][ T6130] __nla_validate_parse: 76 callbacks suppressed
[   65.932449][ T6130] netlink: 152 bytes leftover after parsing attributes in process `syz.0.50'.
[   65.988506][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'.
[   66.238771][ T6147] syzkaller0: entered promiscuous mode
[   66.252936][ T6147] syzkaller0: entered allmulticast mode
[   66.501172][ T6156] veth3: entered promiscuous mode
[   66.507381][ T6157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.512170][ T6157] syzkaller0: entered promiscuous mode
[   66.513879][ T6157] syzkaller0: entered allmulticast mode
[   66.537348][ T6157] tipc: Resetting bearer <eth:syzkaller0>
[   66.545574][ T6155] tipc: Resetting bearer <eth:syzkaller0>
[   66.558394][ T6155] tipc: Disabling bearer <eth:syzkaller0>
[   66.785306][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'.
[   66.790525][ T6166] delete_channel: no stack
[   66.933098][ T6169] Bluetooth: MGMT ver 1.23
[   66.992082][ T6171] net_ratelimit: 14 callbacks suppressed
[   66.992107][ T6171] netlink: zone id is out of range
[   67.002431][ T6171] netlink: zone id is out of range
[   67.004602][ T6171] netlink: zone id is out of range
[   67.006308][ T6171] netlink: zone id is out of range
[   67.008522][ T6171] netlink: zone id is out of range
[   67.010256][ T6171] netlink: zone id is out of range
[   67.012503][ T6171] netlink: zone id is out of range
[   67.014239][ T6171] netlink: zone id is out of range
[   67.015910][ T6171] netlink: zone id is out of range
[   67.017609][ T6171] netlink: zone id is out of range
[   67.042680][ T6171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.65'.
[   67.045867][ T6171] netlink: 152 bytes leftover after parsing attributes in process `syz.0.65'.
[   67.053068][ T6170] delete_channel: no stack
[   67.109935][ T6179] ip6tnl1: entered promiscuous mode
[   67.111659][ T6179] ip6tnl1: entered allmulticast mode
[   67.195788][ T6185] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   67.224012][ T6185] veth5: entered promiscuous mode
[   67.237216][ T6187] netlink: 'syz.1.71': attribute type 13 has an invalid length.
[   67.239934][ T6187] netlink: 'syz.1.71': attribute type 17 has an invalid length.
[   67.253367][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'.
[   67.494303][ T6201] tipc: Started in network mode
[   67.496119][ T6201] tipc: Node identity 2a14783c4a38, cluster identity 4711
[   67.501634][ T6201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.516026][ T6201] syzkaller0: entered promiscuous mode
[   67.523695][ T6201] syzkaller0: entered allmulticast mode
[   67.643010][ T6200] tipc: Resetting bearer <eth:syzkaller0>
[   67.656664][ T6200] tipc: Disabling bearer <eth:syzkaller0>
[   67.758271][ T6221] netlink: 92 bytes leftover after parsing attributes in process `syz.0.78'.
[   67.818886][ T6226] IPv6: NLM_F_CREATE should be specified when creating new route
[   67.912023][ T6235] netlink: 'syz.1.86': attribute type 10 has an invalid length.
[   67.922461][ T6235] 8021q: adding VLAN 0 to HW filter on device team0
[   67.926853][ T6235] bond0: (slave team0): Enslaving as an active interface with an up link
[   67.936499][ T6235] netlink: 'syz.1.86': attribute type 10 has an invalid length.
[   67.946650][ T6235] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   68.004365][ T6240] netlink: 96 bytes leftover after parsing attributes in process `syz.1.88'.
[   68.015189][ T6240] 8021q: VLANs not supported on gre0
[   68.067050][ T6242] syzkaller1: entered promiscuous mode
[   68.072205][ T6242] syzkaller1: entered allmulticast mode
[   68.109124][ T6229] netlink: 'syz.2.85': attribute type 3 has an invalid length.
[   68.266165][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.268775][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.295707][ T6253] batman_adv: batadv0: Interface deactivated: dummy0
[   68.305329][ T6264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.94'.
[   68.362364][ T6253] veth0_to_team: left promiscuous mode
[   68.364899][ T6253] veth0_to_team: left allmulticast mode
[   68.383171][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.401760][ T6253] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.466649][ T6272] netlink: 'syz.2.95': attribute type 1 has an invalid length.
[   68.517949][ T6273] netlink: 3 bytes leftover after parsing attributes in process `syz.2.95'.
[   68.557083][ T6253] ipvlan2: left promiscuous mode
[   68.564394][ T6253] ip6tnl1: left promiscuous mode
[   68.566437][ T6253] ip6tnl1: left allmulticast mode
[   68.583152][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.642062][ T6273] batadv1: entered promiscuous mode
[   68.643954][ T6273] batadv1: entered allmulticast mode
[   68.671842][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.680176][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.683262][ T6276] 8021q: VLANs not supported on gre0
[   68.713583][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.725128][ T6343] lo speed is unknown, defaulting to 1000
[   69.782461][ T6346] geneve2: entered promiscuous mode
[   69.784716][ T6346] geneve2: entered allmulticast mode
[   69.915684][ T6351] syzkaller1: entered promiscuous mode
[   69.917512][ T6351] syzkaller1: entered allmulticast mode
[   70.009529][ T6356] netlink: 'syz.1.117': attribute type 1 has an invalid length.
[   70.161966][ T6359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.213296][ T6359] syzkaller0: entered promiscuous mode
[   70.215599][ T6359] syzkaller0: entered allmulticast mode
[   70.221777][ T6359] tipc: Resetting bearer <eth:syzkaller0>
[   70.234342][ T6358] tipc: Resetting bearer <eth:syzkaller0>
[   71.020838][ T6369] __nla_validate_parse: 7 callbacks suppressed
[   71.020850][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'.
[   71.045181][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.049026][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.189249][ T6358] tipc: Disabling bearer <eth:syzkaller0>
[   71.369654][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.375722][ T6367] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.475594][ T6367] veth3: left promiscuous mode
[   71.486130][ T6369] hsr_slave_0: left promiscuous mode
[   71.491800][ T6369] hsr_slave_1: left promiscuous mode
[   71.603627][ T5911] lo speed is unknown, defaulting to 1000
[   71.610966][ T5911] syz0: Port: 1 Link DOWN
[   71.612874][ T5911] lo speed is unknown, defaulting to 1000
[   71.616936][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.621778][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.639580][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.643867][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.663974][ T6380] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   71.889848][ T6385] bond1: (slave ip6gretap2): making interface the new active one
[   71.893743][ T6385] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link
[   71.967645][ T6391] netlink: 'syz.1.124': attribute type 10 has an invalid length.
[   71.983299][ T6391] batman_adv: batadv0: Adding interface: netdevsim0
[   71.986067][ T6391] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.007642][ T6391] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   72.083804][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'.
[   72.177550][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.129'.
[   72.199909][    C0] net_ratelimit: 17 callbacks suppressed
[   72.199921][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   72.206398][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.129'.
[   72.462424][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.465807][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.624462][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.634990][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.827526][ T6411] macsec1: left promiscuous mode
[   72.831946][ T6411] macsec1: left allmulticast mode
[   72.851724][ T5876] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.855774][ T5876] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.863139][ T5876] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.867154][ T5876] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.893032][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'.
[   72.918949][ T6424] netlink: 'syz.1.133': attribute type 2 has an invalid length.
[   72.922500][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'.
[   72.925981][ T6417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'.
[   72.930553][ T6417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.132'.
[   72.935714][ T6417] netlink: 540 bytes leftover after parsing attributes in process `syz.2.132'.
[   72.940997][ T6417] netlink: 'syz.2.132': attribute type 10 has an invalid length.
[   72.946723][ T6417] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   73.130398][ T6436] syzkaller0: entered promiscuous mode
[   73.132666][ T6436] syzkaller0: entered allmulticast mode
[   73.139456][ T6436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.142239][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   73.286367][ T6434] tipc: Resetting bearer <eth:syzkaller0>
[   73.320531][ T6434] tipc: Disabling bearer <eth:syzkaller0>
[   73.366555][ T6453] lo speed is unknown, defaulting to 1000
[   73.439270][ T6455] netlink: 'syz.0.141': attribute type 13 has an invalid length.
[   73.441829][ T6455] netlink: 'syz.0.141': attribute type 17 has an invalid length.
[   73.476936][ T6455] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.489340][ T6455] 8021q: adding VLAN 0 to HW filter on device team0
[   73.499899][ T6455] batman_adv: batadv0: Interface activated: dummy0
[   73.504953][ T6455] batadv0: mtu less than device minimum
[   73.508360][ T6455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.512675][ T6455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.517155][ T6455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.521453][ T6455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.526459][ T6455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.530412][ T6455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.534265][ T6455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.538352][ T6455] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.665672][ T6465] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[   73.937547][ T6478] lo speed is unknown, defaulting to 1000
[   74.291979][ T6503] syzkaller1: entered promiscuous mode
[   74.293763][ T6503] syzkaller1: entered allmulticast mode
[   74.348951][ T6503] lo speed is unknown, defaulting to 1000
[   74.853371][ T6525] netlink: 'syz.0.157': attribute type 10 has an invalid length.
[   74.862723][ T6525] 8021q: adding VLAN 0 to HW filter on device team0
[   74.866208][ T6525] bond0: (slave team0): Enslaving as an active interface with an up link
[   74.904519][ T6528] netlink: 'syz.0.158': attribute type 10 has an invalid length.
[   74.922143][ T6528] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   75.377467][ T6542] lo speed is unknown, defaulting to 1000
[   76.171773][ T6552] batman_adv: batadv0: Removing interface: netdevsim0
[   76.237392][ T6571] netlink: 'syz.2.171': attribute type 3 has an invalid length.
[   76.562559][ T6575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.568483][ T6575] syzkaller0: entered promiscuous mode
[   76.571527][ T6575] syzkaller0: entered allmulticast mode
[   76.586397][ T6575] __nla_validate_parse: 7 callbacks suppressed
[   76.586407][ T6575] netlink: 2 bytes leftover after parsing attributes in process `syz.1.173'.
[   76.594151][ T6575] tipc: Resetting bearer <eth:syzkaller0>
[   76.598125][ T6574] tipc: Resetting bearer <eth:syzkaller0>
[   76.607874][ T6574] tipc: Disabling bearer <eth:syzkaller0>
[   76.835015][ T6577] syz_tun: entered allmulticast mode
[   77.003191][ T6576] syz_tun: left allmulticast mode
[   77.063963][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   77.067294][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   77.088356][ T5911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   77.098476][ T6582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.176'.
[   77.104639][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'.
[   77.110043][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.115296][ T6584] netlink: 48 bytes leftover after parsing attributes in process `syz.2.177'.
[   77.124829][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.129651][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.133095][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.193360][ T6588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'.
[   77.197667][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'.
[   77.210860][ T6589] netlink: 48 bytes leftover after parsing attributes in process `syz.2.179'.
[   77.301513][ T6595] syzkaller0: entered promiscuous mode
[   77.303808][ T6595] syzkaller0: entered allmulticast mode
[   77.418660][ T5911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   77.465783][ T6608] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[   77.473460][ T6607] netlink: 96 bytes leftover after parsing attributes in process `syz.2.184'.
[   77.489262][ T5911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   77.492252][ T6608] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.495325][ T6607] 8021q: VLANs not supported on ip6_vti0
[   77.500621][ T6608] net_ratelimit: 18 callbacks suppressed
[   77.500635][ T6608] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[   77.513714][ T6608] vlan2: entered allmulticast mode
[   77.515816][ T6608] batadv0: entered allmulticast mode
[   77.521395][ T6608] bond1: (slave vlan2): Opening slave failed
[   77.536026][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'.
[   77.558591][ T6610] netlink: 'syz.0.185': attribute type 2 has an invalid length.
[   77.639625][ T6616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.187'.
[   77.682863][ T6616] bond1 (unregistering): Released all slaves
[   78.010658][ T6632] batman_adv: batadv0: Interface deactivated: dummy0
[   78.041993][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.045541][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.058079][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.061545][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.170978][ T6695] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   79.184775][ T6696] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   79.192802][ T6696] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   79.198733][ T6699] 8021q: VLANs not supported on gre0
[   79.204557][ T6695] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   79.235749][ T6695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.243211][ T6695] syzkaller0: entered promiscuous mode
[   79.245358][ T6695] syzkaller0: entered allmulticast mode
[   79.284466][ T6695] syzkaller0: mtu less than device minimum
[   79.294723][ T6693] tipc: Resetting bearer <eth:syzkaller0>
[   79.321768][ T6693] tipc: Disabling bearer <eth:syzkaller0>
[   79.374540][ T6716] bridge1: entered promiscuous mode
[   79.385690][ T6714] bridge2: entered promiscuous mode
[   79.599471][ T6729] netlink: 'syz.1.208': attribute type 1 has an invalid length.
[   79.647377][ T6729] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.651004][ T6732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.657540][ T6734] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   79.682839][ T6732] syzkaller0: entered promiscuous mode
[   79.685110][ T6732] syzkaller0: entered allmulticast mode
[   79.697258][ T6734] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   79.722328][ T6732] tipc: Resetting bearer <eth:syzkaller0>
[   79.742367][ T6730] tipc: Resetting bearer <eth:syzkaller0>
[   79.756199][ T6730] tipc: Disabling bearer <eth:syzkaller0>
[   79.793189][ T6746] veth3: entered promiscuous mode
[   79.801350][ T6747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.828216][ T6747] syzkaller0: entered promiscuous mode
[   79.831249][ T6747] syzkaller0: entered allmulticast mode
[   79.846701][ T6747] tipc: Resetting bearer <eth:syzkaller0>
[   79.954411][ T6758] netlink: 'syz.2.212': attribute type 3 has an invalid length.
[   79.966873][ T6758] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.974397][ T6758] syzkaller0: entered promiscuous mode
[   79.976221][ T6758] syzkaller0: entered allmulticast mode
[   80.006318][ T6760] netlink: 'syz.1.213': attribute type 10 has an invalid length.
[   80.023268][ T6760] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   80.036160][ T6764] tipc: Resetting bearer <eth:syzkaller0>
[   80.109768][ T6767] !: renamed from dummy0
[   80.839312][   T10] tipc: Node number set to 2852069086
[   81.077995][ T5911] tipc: Node number set to 1613527100
[   81.287977][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   81.292134][ T1270] cfg80211: failed to load regulatory.db
[   82.963459][ T6757] tipc: Resetting bearer <eth:syzkaller0>
[   82.993615][ T6757] tipc: Disabling bearer <eth:syzkaller0>
[   83.005351][ T6737] tipc: Resetting bearer <eth:syzkaller0>
[   83.016867][ T6737] tipc: Disabling bearer <eth:syzkaller0>
[   83.112128][ T6774] __nla_validate_parse: 11 callbacks suppressed
[   83.112139][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'.
[   83.143291][ T6774] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[   83.235901][ T6782] pim6reg: entered allmulticast mode
[   83.241469][ T6782] pim6reg: left allmulticast mode
[   83.367696][ T6787] 8021q: VLANs not supported on ip6_vti0
[   83.405742][ T6789] netlink: 56 bytes leftover after parsing attributes in process `syz.1.221'.
[   83.462760][ T6790] : renamed from veth0_macvtap
[   83.471848][ T6790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.221'.
[   84.030759][ T6792] sctp: [Deprecated]: syz.0.222 (pid 6792) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.030759][ T6792] Use struct sctp_sack_info instead
[   84.177102][ T6796] netlink: 96 bytes leftover after parsing attributes in process `syz.0.224'.
[   84.192753][ T6796] 8021q: VLANs not supported on gre0
[   84.372924][ T6808] bond1: option mode: unable to set because the bond device has slaves
[   84.712275][ T6824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.833085][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.236'.
[   84.841891][ T6834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.236'.
[   84.853556][ T6835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.862392][ T6835] syzkaller0: entered promiscuous mode
[   84.866696][ T6835] syzkaller0: entered allmulticast mode
[   84.872826][ T6835] netlink: 2 bytes leftover after parsing attributes in process `syz.2.238'.
[   84.877190][ T6835] tipc: Resetting bearer <eth:syzkaller0>
[   84.881050][ T6833] tipc: Resetting bearer <eth:syzkaller0>
[   84.889066][ T6833] tipc: Disabling bearer <eth:syzkaller0>
[   84.995574][ T6837] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   84.998213][ T6837] netlink: 'syz.2.239': attribute type 2 has an invalid length.
[   85.000605][ T6837] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   85.003349][ T6837] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.239'.
[   85.006542][ T6837] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   85.009469][ T6837] netlink: 'syz.2.239': attribute type 2 has an invalid length.
[   85.011898][ T6837] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   85.014495][ T6837] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.239'.
[   85.017610][ T6837] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   85.022554][ T6837] netlink: 'syz.2.239': attribute type 2 has an invalid length.
[   85.025198][ T6837] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   85.028411][ T6837] netlink: 1156 bytes leftover after parsing attributes in process `syz.2.239'.
[   85.032031][ T6837] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   85.413862][ T6853] sctp: [Deprecated]: syz.2.245 (pid 6853) Use of int in maxseg socket option.
[   85.413862][ T6853] Use struct sctp_assoc_value instead
[   85.421186][ T6854] sctp: [Deprecated]: syz.2.245 (pid 6854) Use of int in maxseg socket option.
[   85.421186][ T6854] Use struct sctp_assoc_value instead
[   85.474244][ T6858] macsec0: entered promiscuous mode
[   85.476311][ T6858] macsec0: entered allmulticast mode
[   85.480512][ T6858] veth1_macvtap: entered allmulticast mode
[   85.483626][ T6858] macsec0: left promiscuous mode
[   85.485310][ T6858] macsec0: left allmulticast mode
[   85.486907][ T6858] veth1_macvtap: left allmulticast mode
[   85.506756][ T6869] veth0_to_bridge: entered promiscuous mode
[   85.665967][ T6880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.671989][ T6880] syzkaller0: entered promiscuous mode
[   85.673724][ T6880] syzkaller0: entered allmulticast mode
[   85.681176][ T6880] tipc: Resetting bearer <eth:syzkaller0>
[   85.693945][ T6879] tipc: Resetting bearer <eth:syzkaller0>
[   85.719359][ T6879] tipc: Disabling bearer <eth:syzkaller0>
[   85.844211][ T6881] veth0_to_bridge: left promiscuous mode
[   86.450869][ T6941] 8021q: adding VLAN 0 to HW filter on device team0
[   86.702119][ T6959] sctp: [Deprecated]: syz.2.269 (pid 6959) Use of int in max_burst socket option deprecated.
[   86.702119][ T6959] Use struct sctp_assoc_value instead
[   88.226156][ T6985] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.580529][ T7013] __nla_validate_parse: 78 callbacks suppressed
[   88.580540][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'.
[   88.774281][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.278'.
[   88.844737][ T7027] syz_tun: entered allmulticast mode
[   88.859922][ T7026] syz_tun: left allmulticast mode
[   89.012816][ T7035] bond0: (slave bond_slave_0): Releasing backup interface
[   89.024451][ T7035] bond0: (slave bond_slave_1): Releasing backup interface
[   89.030955][ T7035] team0: Port device team_slave_0 removed
[   89.036400][ T7035] team0: Port device team_slave_1 removed
[   89.039311][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.042159][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.045696][ T7035] bond0: (slave netdevsim0): Releasing backup interface
[   89.064598][ T7041] macvlan2: entered promiscuous mode
[   89.066421][ T7041] vlan0: entered promiscuous mode
[   89.069669][ T1270] syz1: Port: 1 Link DOWN
[   89.164563][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'.
[   89.176939][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'.
[   89.178195][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.190184][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.193501][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.196857][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.254715][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'.
[   89.273244][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'.
[   89.275996][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.283393][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.295731][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.304184][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.317420][ T7059] netlink: 360 bytes leftover after parsing attributes in process `syz.1.286'.
[   89.341342][ T7059] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   89.343352][ T7049] syz.2.284 (7049) used greatest stack depth: 19704 bytes left
[   89.350327][ T7059] bond1: (slave macvlan3): Enslaving as an active interface with an up link
[   89.355944][ T7059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.286'.
[   89.497099][ T7073] team0: Device gtp0 is up. Set it down before adding it as a team port
[   89.906846][ T7081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.921881][ T7086] bond0: entered promiscuous mode
[   89.923930][ T7086] bond0: entered allmulticast mode
[   89.927284][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.026611][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[   90.031773][ T7092] sch_tbf: burst 2 is lower than device wg0 mtu (1420) !
[   90.110355][ T7096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'.
[   90.149734][ T7096] IPVS: Scheduler module ip_vs_sip not found
[   90.231496][ T7095] delete_channel: no stack
[   90.921371][ T7113] lo speed is unknown, defaulting to 1000
[   91.038293][ T7115] bond0: (slave syz_tun): Releasing backup interface
[   91.076986][ T7118] ip6tnl2: entered promiscuous mode
[   91.080176][ T7118] ip6tnl2: entered allmulticast mode
[   91.083015][ T7118] team0: Device ip6tnl2 is of different type
[   91.198944][ T7116] lo speed is unknown, defaulting to 1000
[   91.646723][ T7132] bridge_slave_1: left allmulticast mode
[   91.649592][ T7132] bridge_slave_1: left promiscuous mode
[   91.652776][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.659404][ T7132] bridge_slave_0: left allmulticast mode
[   91.661622][ T7132] bridge_slave_0: left promiscuous mode
[   91.664488][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.018412][ T7139] vlan2: entered allmulticast mode
[   92.245295][ T7153] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   92.421253][ T7168] validate_nla: 195 callbacks suppressed
[   92.421278][ T7168] netlink: 'syz.2.316': attribute type 1 has an invalid length.
[   92.440198][ T7169] netlink: 'syz.2.316': attribute type 1 has an invalid length.
[   92.473993][ T7168] bond0: left promiscuous mode
[   92.501441][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   92.504288][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   92.526895][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   92.540978][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.775058][ T7197] can: request_module (can-proto-0) failed.
[  106.779443][ T7197] openvswitch: netlink: IP tunnel dst address not specified
[  106.811599][ T7197] can: request_module (can-proto-0) failed.
[  106.817109][ T7207] netlink: 'syz.2.321': attribute type 13 has an invalid length.
[  106.818169][ T7197] openvswitch: netlink: IP tunnel dst address not specified
[  106.820363][ T7207] netlink: 'syz.2.321': attribute type 17 has an invalid length.
[  106.847718][ T7197] can: request_module (can-proto-0) failed.
[  106.853896][ T7197] openvswitch: netlink: IP tunnel dst address not specified
[  106.932727][ T7207] bond0: left allmulticast mode
[  106.935004][ T7207] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.943805][ T7207] 8021q: adding VLAN 0 to HW filter on device team0
[  106.957357][ T7207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.967609][   T10] lo speed is unknown, defaulting to 1000
[  106.970271][ T7202] tipc: Enabling <ib:lo> not permitted
[  106.972283][ T7202] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  106.976091][   T10] syz0: Port: 1 Link ACTIVE
[  106.982519][   T10] lo speed is unknown, defaulting to 1000
[  106.992477][ T7202] __nla_validate_parse: 3 callbacks suppressed
[  106.992490][ T7202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.320'.
[  106.995877][ T7211] lo speed is unknown, defaulting to 1000
[  106.998456][ T7213] syzkaller1: entered promiscuous mode
[  107.008386][ T7213] syzkaller1: entered allmulticast mode
[  107.284746][ T7220] veth0_to_hsr: entered allmulticast mode
[  107.490695][ T7231] netlink: 'syz.0.326': attribute type 13 has an invalid length.
[  107.494076][ T7231] netlink: 'syz.0.326': attribute type 17 has an invalid length.
[  107.517375][ T7231] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.523971][ T7231] 8021q: adding VLAN 0 to HW filter on device team0
[  107.527469][ T7231] batman_adv: batadv0: Interface activated: dummy0
[  107.530931][ T7231] batadv0: mtu less than device minimum
[  107.534649][ T7231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  107.539929][ T7231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  107.545132][ T7231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  107.550431][ T7231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  107.555683][ T7231] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  107.623953][ T7234] netlink: 60 bytes leftover after parsing attributes in process `syz.2.327'.
[  107.640713][ T7232] lo speed is unknown, defaulting to 1000
[  107.778330][ T7240] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  108.198016][ T7253] netlink: 48 bytes leftover after parsing attributes in process `syz.1.330'.
[  108.220559][ T7253] netlink: 176 bytes leftover after parsing attributes in process `syz.1.330'.
[  108.247082][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'.
[  108.254879][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'.
[  108.257230][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'.
[  108.355978][ T7253] bond0: (slave team0): Releasing backup interface
[  108.360717][ T7253] team0 (unregistering): Port device team_slave_0 removed
[  108.364514][ T7253] team0 (unregistering): Port device team_slave_1 removed
[  108.481232][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'.
[  108.496115][ T7275] bond0: (slave bond_slave_0): Releasing backup interface
[  108.547977][ T7275] bond0: (slave bond_slave_1): Releasing backup interface
[  108.559472][ T7275] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.563294][ T7275] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.579444][ T7275] bond0: (slave wlan1): Releasing backup interface
[  108.590289][ T7275] bond1: (slave ip6gretap2): Releasing active interface
[  108.593221][ T7275] bond1: (slave macvlan3): making interface the new active one
[  108.601803][ T7275] bond1: (slave macvlan3): Releasing active interface
[  108.674998][ T7282] netlink: 'syz.2.339': attribute type 1 has an invalid length.
[  108.740233][ T7282] 8021q: adding VLAN 0 to HW filter on device bond1
[  108.757191][ T7286] netlink: 56 bytes leftover after parsing attributes in process `syz.0.340'.
[  108.772925][ T7275] ieee802154 phy0 wpan0: encryption failed: -22
[  108.843692][ T7292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.847358][ T7292] syzkaller0: entered promiscuous mode
[  108.850514][ T7292] syzkaller0: entered allmulticast mode
[  108.875835][ T7294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.343'.
[  108.879380][ T7292] netlink: 'syz.2.342': attribute type 5 has an invalid length.
[  108.879547][ T7294] 8021q: VLANs not supported on ipvlan1
[  108.889329][ T7294] macsec1: entered promiscuous mode
[  108.891278][ T7294] macsec1: entered allmulticast mode
[  108.911233][ T7296] netlink: 'syz.1.344': attribute type 1 has an invalid length.
[  108.939240][ T7292] tipc: Resetting bearer <eth:syzkaller0>
[  108.948669][ T7291] tipc: Resetting bearer <eth:syzkaller0>
[  108.974382][ T7291] tipc: Disabling bearer <eth:syzkaller0>
[  109.074580][ T7305] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  109.108422][ T7308] netlink: 'syz.2.348': attribute type 1 has an invalid length.
[  109.123207][ T7308] lo speed is unknown, defaulting to 1000
[  109.413526][ T7320] syzkaller1: entered promiscuous mode
[  109.416120][ T7320] syzkaller1: entered allmulticast mode
[  109.473738][ T7325] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.659445][ T7332] bridge3: the hash_elasticity option has been deprecated and is always 16
[  109.663102][ T7332] bridge3: entered allmulticast mode
[  109.727419][ T7334] lo speed is unknown, defaulting to 1000
[  110.228750][ T7352] veth0_to_hsr: left allmulticast mode
[  110.313855][ T7355] netlink: 'syz.0.361': attribute type 10 has an invalid length.
[  110.372845][ T7355] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.393224][ T7355] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  110.447124][ T7358] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[  110.531068][ T7358] 8021q: adding VLAN 0 to HW filter on device bond4
[  110.536170][ T7358] delete_channel: no stack
[  110.666666][ T7366] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  110.781382][ T7368] geneve2: entered promiscuous mode
[  110.783496][ T7368] geneve2: entered allmulticast mode
[  110.835418][ T6376] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  110.840195][ T6376] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  110.868106][ T6376] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  110.873055][ T6376] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  111.172132][ T7401] bridge0: port 1(erspan0) entered blocking state
[  111.174580][ T7401] bridge0: port 1(erspan0) entered disabled state
[  111.179847][ T7401] erspan0: entered allmulticast mode
[  111.184154][ T7401] erspan0: entered promiscuous mode
[  111.194097][ T7401] erspan0: left allmulticast mode
[  111.204178][ T7401] erspan0: left promiscuous mode
[  111.206372][ T7401] bridge0: port 1(erspan0) entered disabled state
[  111.210119][ T7403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  111.249944][ T7404] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.364975][ T7404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.454453][ T7404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.512590][ T7425] erspan0: entered promiscuous mode
[  111.515882][ T7425] erspan0: left promiscuous mode
[  111.546587][ T7404] bond0: (slave netdevsim0): Releasing backup interface
[  111.551709][ T7404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.622777][ T5877] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.643589][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.654141][ T6376] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.665044][ T6376] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.986892][ T7448] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  112.060815][ T7454] validate_nla: 2 callbacks suppressed
[  112.060866][ T7454] netlink: 'syz.0.388': attribute type 2 has an invalid length.
[  112.084822][ T7454] net_ratelimit: 18 callbacks suppressed
[  112.084860][ T7454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  112.240008][ T7458] __nla_validate_parse: 17 callbacks suppressed
[  112.240022][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[  112.246001][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'.
[  112.393726][ T7470] netlink: 'syz.2.392': attribute type 1 has an invalid length.
[  112.463686][ T7473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.729629][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'.
[  112.745053][ T7494] bond5: entered promiscuous mode
[  112.746924][ T7494] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.850391][ T7494] bond5 (unregistering): Released all slaves
[  112.957356][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'.
[  112.976900][ T7504] veth3: entered promiscuous mode
[  113.518417][ T7514] syz_tun: entered allmulticast mode
[  113.530310][ T7514] dvmrp8: entered allmulticast mode
[  113.574901][ T7514] lo speed is unknown, defaulting to 1000
[  113.718065][ T7519] netlink: 'syz.0.402': attribute type 2 has an invalid length.
[  113.741593][ T7519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.778059][ T7519] veth0_to_team: entered promiscuous mode
[  113.787913][ T7519] veth0_to_team: entered allmulticast mode
[  113.803485][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'.
[  113.897522][ T7521] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  113.937174][ T7522] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  113.957339][ T7525] netlink: 'syz.1.404': attribute type 2 has an invalid length.
[  114.070524][ T7530] netlink: 52 bytes leftover after parsing attributes in process `syz.0.406'.
[  114.088589][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'.
[  114.449749][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.408'.
[  114.453063][ T7543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.456104][ T7543] IPv6: NLM_F_CREATE should be set when creating new route
[  114.459136][ T7543] IPv6: NLM_F_CREATE should be set when creating new route
[  114.465551][ T7514] syz_tun: left allmulticast mode
[  114.526266][ T7552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'.
[  114.531398][ T7552] netlink: 36 bytes leftover after parsing attributes in process `syz.0.408'.
[  114.644575][ T7563] netlink: 'syz.0.413': attribute type 1 has an invalid length.
[  114.671721][ T7563] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.719381][ T7566] bridge3: left allmulticast mode
[  114.722547][   T10] lo speed is unknown, defaulting to 1000
[  114.725694][   T10] syz0: Port: 1 Link DOWN
[  114.730138][   T10] lo speed is unknown, defaulting to 1000
[  114.816018][ T7574] macvlan1: entered promiscuous mode
[  114.821560][ T7574] macvlan1: left promiscuous mode
[  114.833867][ T7573] syzkaller1: entered promiscuous mode
[  114.836093][ T7573] syzkaller1: entered allmulticast mode
[  114.903647][ T7578] netlink: 'syz.2.420': attribute type 2 has an invalid length.
[  114.917189][ T7578] k*]: entered promiscuous mode
[  114.928501][ T7578] veth0_to_team: entered promiscuous mode
[  114.930364][ T7578] veth0_to_team: entered allmulticast mode
[  114.934037][ T7580] netlink: 'syz.0.421': attribute type 1 has an invalid length.
[  114.950752][ T7580] 8021q: adding VLAN 0 to HW filter on device bond3
[  114.981973][ T7580] 8021q: adding VLAN 0 to HW filter on device bond3
[  114.984666][ T7580] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  114.999941][ T7580] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  115.026202][ T7589] bond3: (slave bridge4): Enslaving as an active interface with a down link
[  115.065856][ T7590] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  115.191460][ T7601] team0: Port device team_slave_0 removed
[  115.332760][ T7604] raw_sendmsg: syz.1.427 forgot to set AF_INET. Fix it!
[  115.424444][ T7610] netlink: 'syz.1.428': attribute type 10 has an invalid length.
[  115.851568][ T7627] veth0_to_team: left promiscuous mode
[  115.912615][ T7632] netlink: 'syz.1.434': attribute type 10 has an invalid length.
[  115.919427][ T7632] bond0: (slave 0!): Enslaving as an active interface with an up link
[  116.735220][ T7641] pim6reg1: entered promiscuous mode
[  116.741949][ T7641] pim6reg1: entered allmulticast mode
[  116.752713][ T7645] netlink: 'syz.2.437': attribute type 1 has an invalid length.
[  116.838596][ T7645] 8021q: adding VLAN 0 to HW filter on device bond4
[  116.934116][ T7659] gretap1: entered promiscuous mode
[  116.953222][ T7650] bond4: (slave bridge4): making interface the new active one
[  116.963419][ T7650] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  117.056104][ T7668] lo speed is unknown, defaulting to 1000
[  117.155687][ T7666] validate_nla: 2 callbacks suppressed
[  117.155703][ T7666] netlink: 'syz.1.442': attribute type 1 has an invalid length.
[  117.195273][ T7666] 8021q: adding VLAN 0 to HW filter on device bond5
[  117.222009][ T7666] bond5: (slave wlan0): Opening slave failed
[  117.376925][ T7681] __nla_validate_parse: 43 callbacks suppressed
[  117.376941][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'.
[  117.386181][ T7681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'.
[  117.471158][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.449'.
[  117.559399][ T7688] openvswitch: netlink: Flow key attr not present in new flow.
[  117.817664][ T7705] ip6tnl2: entered promiscuous mode
[  117.821330][ T7705] ip6tnl2: entered allmulticast mode
[  117.828593][ T7703] netlink: 'syz.2.455': attribute type 1 has an invalid length.
[  117.863205][ T7703] bond5: entered promiscuous mode
[  117.865849][ T7703] bond5: entered allmulticast mode
[  117.872040][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[  117.874370][ T7711] openvswitch: netlink: Flow key attr not present in new flow.
[  117.885138][ T7712] netlink: 'syz.1.457': attribute type 1 has an invalid length.
[  117.888616][ T7712] netlink: 224 bytes leftover after parsing attributes in process `syz.1.457'.
[  118.002078][ T7716] ip6gretap1: entered promiscuous mode
[  118.058716][ T7718] netlink: 'syz.1.459': attribute type 2 has an invalid length.
[  118.517095][ T7739] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[  118.799981][ T7748] netlink: 32 bytes leftover after parsing attributes in process `syz.1.465'.
[  118.984279][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'.
[  119.004911][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'.
[  119.087446][ T7763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.091765][ T7763] syzkaller0: entered promiscuous mode
[  119.094204][ T7763] syzkaller0: entered allmulticast mode
[  119.120771][ T7763] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  119.132505][ T7763] tipc: Resetting bearer <eth:syzkaller0>
[  119.135417][ T7765] lo speed is unknown, defaulting to 1000
[  119.145927][ T7762] tipc: Resetting bearer <eth:syzkaller0>
[  119.161856][ T7762] tipc: Disabling bearer <eth:syzkaller0>
[  119.238117][ T7772] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.243270][ T7772] syzkaller0: entered promiscuous mode
[  119.245816][ T7772] syzkaller0: entered allmulticast mode
[  119.259283][ T7774] tipc: Resetting bearer <eth:syzkaller0>
[  119.265714][ T7771] tipc: Resetting bearer <eth:syzkaller0>
[  119.286277][ T7771] tipc: Disabling bearer <eth:syzkaller0>
[  119.453562][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'.
[  119.489666][ T7784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.475'.
[  119.645215][ T7794] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  119.928884][ T7804] bridge0: port 1(syz_tun) entered blocking state
[  119.932559][ T7804] bridge0: port 1(syz_tun) entered disabled state
[  119.935385][ T7804] syz_tun: entered allmulticast mode
[  119.941628][ T7804] syz_tun: entered promiscuous mode
[  120.384909][   T55] Bluetooth: hci2: link tx timeout
[  120.387274][   T55] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  120.392388][   T55] Bluetooth: hci2: link tx timeout
[  120.394291][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.532413][ T7833] bridge_slave_1: left allmulticast mode
[  120.534896][ T7833] bridge_slave_1: left promiscuous mode
[  120.537386][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.548681][ T7833] bridge_slave_0: left promiscuous mode
[  120.550916][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.850734][ T7845] netlink: 'syz.2.492': attribute type 1 has an invalid length.
[  120.882055][ T7845] 8021q: adding VLAN 0 to HW filter on device bond6
[  120.897412][ T7849] bond6: (slave gretap1): making interface the new active one
[  120.902185][ T7849] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  120.910285][ T7845] vlan4: entered promiscuous mode
[  120.912246][ T7845] bond6: entered promiscuous mode
[  120.914239][ T7845] gretap1: entered promiscuous mode
[  120.916113][ T7845] vlan4: entered allmulticast mode
[  120.918272][ T7845] bond6: entered allmulticast mode
[  120.919956][ T7845] gretap1: entered allmulticast mode
[  120.926368][ T7847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.930739][ T7847] syzkaller0: entered promiscuous mode
[  120.932888][ T7847] syzkaller0: entered allmulticast mode
[  120.935853][ T5876] syzkaller0: tun_net_xmit 70
[  120.952250][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[  120.955282][ T7847] syzkaller0: tun_net_xmit 90
[  120.962285][ T7846] tipc: Resetting bearer <eth:syzkaller0>
[  120.977584][ T7846] tipc: Disabling bearer <eth:syzkaller0>
[  121.072067][ T7853] netlink: 'syz.0.495': attribute type 5 has an invalid length.
[  121.092020][ T7853] macvlan3: entered promiscuous mode
[  121.192127][ T7856] netlink: 'syz.0.496': attribute type 13 has an invalid length.
[  121.195147][ T7856] netlink: 'syz.0.496': attribute type 17 has an invalid length.
[  121.203475][ T7856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.232055][ T7856] lo speed is unknown, defaulting to 1000
[  121.267598][ T7855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.404754][ T7864] netlink: 'syz.1.499': attribute type 26 has an invalid length.
[  121.486698][ T7851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.633650][ T5911] IPVS: starting estimator thread 0...
[  121.748263][ T7879] IPVS: using max 64 ests per chain, 153600 per kthread
[  121.754279][ T7886] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  121.759592][ T7886] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  121.795165][ T7888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.055495][ T7909] team0: entered promiscuous mode
[  122.068724][ T7909] 8021q: adding VLAN 0 to HW filter on device team0
[  122.121564][ T7911] geneve2: left promiscuous mode
[  122.123536][ T7911] geneve2: left allmulticast mode
[  122.135627][ T7911] veth3: left promiscuous mode
[  122.150599][ T7911] ip6tnl2: left promiscuous mode
[  122.152638][ T7911] ip6tnl2: left allmulticast mode
[  122.162517][ T5876] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  122.165411][ T5876] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  122.175161][ T5876] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  122.188342][ T5876] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  122.270359][ T7920] validate_nla: 2 callbacks suppressed
[  122.270370][ T7920] netlink: 'syz.2.514': attribute type 13 has an invalid length.
[  122.288247][ T7920] netlink: 'syz.2.514': attribute type 17 has an invalid length.
[  122.341295][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.344535][ T7920] team0: left promiscuous mode
[  122.358300][ T7920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.364645][ T5911] lo speed is unknown, defaulting to 1000
[  122.367002][ T5911] syz0: Port: 1 Link ACTIVE
[  122.369678][ T5911] lo speed is unknown, defaulting to 1000
[  122.389881][ T7923] lo speed is unknown, defaulting to 1000
[  122.398646][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  122.413417][ T7922] __nla_validate_parse: 19 callbacks suppressed
[  122.413432][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'.
[  122.457755][ T7920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.683594][ T7948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.692362][ T7948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.697292][ T7948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.704220][ T7948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.709036][ T7948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.714161][ T7948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.750157][ T7948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.754316][ T7948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.790609][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'.
[  122.906780][ T7957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.525'.
[  122.969835][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'.
[  122.974883][ T7966] netlink: 'syz.0.527': attribute type 4 has an invalid length.
[  122.977268][ T7966] netlink: 152 bytes leftover after parsing attributes in process `syz.0.527'.
[  122.981035][ T7966] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  123.029946][ T7968] netlink: 'syz.0.528': attribute type 1 has an invalid length.
[  123.042270][ T7969] veth3: entered promiscuous mode
[  123.066567][ T7968] 8021q: adding VLAN 0 to HW filter on device bond4
[  123.181220][ T7920] syz.2.514 (7920) used greatest stack depth: 19488 bytes left
[  123.299007][ T5876] syzkaller0: tun_net_xmit 76
[  123.301710][ T5876] syzkaller0: tun_net_xmit 48
[  123.328346][ T6239] syzkaller0: tun_net_xmit 76
[  123.338409][ T7984] syz_tun: left allmulticast mode
[  123.340440][ T7984] syz_tun: left promiscuous mode
[  123.342509][ T7984] bridge0: port 1(syz_tun) entered disabled state
[  123.374697][ T7984] bond4: (slave bridge4): Releasing active interface
[  123.403159][ T7984] bond6: (slave gretap1): Releasing active interface
[  123.405475][ T7984] gretap1: left promiscuous mode
[  123.408849][ T7984] gretap1: left allmulticast mode
[  123.633894][ T7991] netlink: 248 bytes leftover after parsing attributes in process `syz.1.535'.
[  123.726530][ T7997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.536'.
[  124.480209][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  124.726994][ T7995] netlink: 248 bytes leftover after parsing attributes in process `syz.1.535'.
[  124.806351][ T8001] netlink: 'syz.2.537': attribute type 1 has an invalid length.
[  124.829815][ T8001] 8021q: adding VLAN 0 to HW filter on device bond7
[  124.832869][ T8006] lo: entered allmulticast mode
[  124.842711][ T8006] dvmrp8: entered allmulticast mode
[  124.852087][ T8001] bond7: (slave geneve2): making interface the new active one
[  124.855637][ T8001] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  124.861558][ T8006] lo: left allmulticast mode
[  124.863663][ T8006] dvmrp8: left allmulticast mode
[  124.923420][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.539'.
[  124.928644][ T6376] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.932027][ T8009] netlink: 48 bytes leftover after parsing attributes in process `syz.0.539'.
[  124.942480][ T8011] netlink: 'syz.1.538': attribute type 23 has an invalid length.
[  124.945857][ T6376] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.952369][ T6376] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.962807][ T6376] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.135422][ T5878] lo speed is unknown, defaulting to 1000
[  125.138822][ T8021] netlink: 'syz.1.541': attribute type 30 has an invalid length.
[  125.139118][ T6376] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.148240][ T5878] syz0: Port: 1 Link DOWN
[  125.157612][ T6376] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.161193][ T6376] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.164551][ T6376] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.169513][ T5878] lo speed is unknown, defaulting to 1000
[  125.184131][ T5876] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.188327][ T5876] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.191671][ T5876] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.194954][ T5876] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.366822][ T8034] 8021q: VLANs not supported on vcan0
[  126.077873][ T5878] IPVS: starting estimator thread 0...
[  126.168653][ T8099] IPVS: using max 38 ests per chain, 91200 per kthread
[  126.184715][ T8106] netlink: 'syz.0.556': attribute type 6 has an invalid length.
[  126.236808][ T8104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.407756][ T8119] netlink: 'syz.0.561': attribute type 13 has an invalid length.
[  126.410959][ T8119] netlink: 'syz.0.561': attribute type 17 has an invalid length.
[  126.416596][ T8119] gretap0: refused to change device tx_queue_len
[  126.427395][ T8119] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  126.501652][ T8128] 8021q: adding VLAN 0 to HW filter on device bond7
[  126.531742][ T8128] bond7: (slave veth3): Enslaving as an active interface with a down link
[  126.544790][ T8128] gretap1: entered promiscuous mode
[  126.550950][ T8128] bond7: (slave gretap1): making interface the new active one
[  126.559977][ T8128] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  126.576884][ T8128] macvlan4: entered promiscuous mode
[  126.579683][ T8128] macvlan4: entered allmulticast mode
[  126.582525][ T8128] bond7: entered promiscuous mode
[  126.585294][ T8128] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  126.588938][ T8128] bond7: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  126.595995][ T8128] bond7: left promiscuous mode
[  126.783742][ T8143] lo speed is unknown, defaulting to 1000
[  126.812333][ T8147] : entered promiscuous mode
[  127.054768][ T8162] 8021q: adding VLAN 0 to HW filter on device bond8
[  127.163805][ T8175] bond0: (slave team0): Releasing backup interface
[  127.171846][ T8175] batman_adv: batadv0: Interface deactivated: dummy0
[  127.174554][ T8175] batman_adv: batadv0: Removing interface: dummy0
[  127.188414][ T8175] bond0: (slave bond_slave_0): Releasing backup interface
[  127.200551][ T8175] bond0: (slave bond_slave_1): Releasing backup interface
[  127.206014][ T8175] team0: Port device team_slave_1 removed
[  127.211514][ T8175] bond0: (slave batadv_slave_0): Releasing backup interface
[  127.222613][ T8175] bond3: (slave bridge4): Releasing active interface
[  127.230541][ T8175] bond7: (slave veth3): Releasing active interface
[  127.232814][ T8175] bond7: (slave veth3): the permanent HWaddr of slave - f6:b4:2a:ac:93:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  127.242772][ T8175] bond7: (slave gretap1): Releasing active interface
[  127.259950][ T8172] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.264819][ T8172] syzkaller0: entered promiscuous mode
[  127.266902][ T8172] syzkaller0: entered allmulticast mode
[  127.357126][ T8176] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  127.383095][ T8171] tipc: Resetting bearer <eth:syzkaller0>
[  127.417389][ T8171] tipc: Disabling bearer <eth:syzkaller0>
[  127.522487][ T8193] __nla_validate_parse: 18 callbacks suppressed
[  127.522499][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'.
[  127.533167][ T8193] erspan0: entered promiscuous mode
[  127.535223][ T8193] macvtap1: entered promiscuous mode
[  127.537091][ T8193] macvtap1: entered allmulticast mode
[  127.539661][ T8193] erspan0: entered allmulticast mode
[  127.545291][ T8193] validate_nla: 4 callbacks suppressed
[  127.545303][ T8193] netlink: 'syz.0.578': attribute type 1 has an invalid length.
[  127.553373][ T8193] netlink: 600 bytes leftover after parsing attributes in process `syz.0.578'.
[  127.608118][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  127.616948][ T8198] macsec1: entered promiscuous mode
[  127.619090][ T8198] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  127.621553][ T8198] macsec1: entered allmulticast mode
[  127.623185][ T8198] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  128.115450][ T8211] netlink: 68 bytes leftover after parsing attributes in process `syz.1.583'.
[  128.121074][ T8211] netlink: 'syz.1.583': attribute type 9 has an invalid length.
[  128.263228][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'.
[  128.368105][ T8217] bond0: option arp_validate: invalid value (15597313)
[  128.530297][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[  128.534883][ T8227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.589'.
[  128.545082][ T8227] netlink: 'syz.0.589': attribute type 1 has an invalid length.
[  128.548925][ T8227] netlink: 244 bytes leftover after parsing attributes in process `syz.0.589'.
[  128.559312][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'.
[  128.606774][ T8241] netlink: 'syz.1.593': attribute type 2 has an invalid length.
[  128.614605][ T8241] : entered promiscuous mode
[  128.616945][ T8240] vlan0: entered promiscuous mode
[  128.693293][ T8254] netlink: 'syz.1.597': attribute type 1 has an invalid length.
[  128.712824][ T8254] 8021q: adding VLAN 0 to HW filter on device bond6
[  128.720476][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'.
[  128.726827][ T8254] bond6: (slave geneve3): making interface the new active one
[  128.731953][ T8254] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  128.734748][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.740292][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.753985][ T8254] bond6: entered promiscuous mode
[  128.755687][ T8254] geneve3: entered promiscuous mode
[  128.760556][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.769386][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.837208][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'.
[  128.880981][ T8278] netlink: 'syz.1.602': attribute type 9 has an invalid length.
[  128.929653][ T8280] gtp0: entered promiscuous mode
[  129.056887][ T8292] netlink: 'syz.1.607': attribute type 1 has an invalid length.
[  129.098745][ T8292] bond7: entered promiscuous mode
[  129.101177][ T8292] 8021q: adding VLAN 0 to HW filter on device bond7
[  129.129824][ T8296] 8021q: adding VLAN 0 to HW filter on device bond9
[  129.154409][ T8292] 8021q: adding VLAN 0 to HW filter on device bond8
[  129.160854][ T8292] bond7: (slave bond8): making interface the new active one
[  129.170260][ T8292] bond8: entered promiscuous mode
[  129.173381][ T8292] bond7: (slave bond8): Enslaving as an active interface with an up link
[  129.177078][ T8303] 8021q: VLANs not supported on gre0
[  129.183391][ T8304] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  129.187144][ T8304] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  129.268506][ T8308] lo speed is unknown, defaulting to 1000
[  129.303854][ T8312] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  129.308141][ T8312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.139753][ T8337] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  130.203783][ T8343] netlink: 'syz.2.621': attribute type 1 has an invalid length.
[  130.265552][ T8343] gretap2: entered promiscuous mode
[  130.276030][ T8343] bond8: (slave gretap2): making interface the new active one
[  130.293736][ T8343] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  130.310725][ T8343] 8021q: adding VLAN 0 to HW filter on device bond8
[  130.314318][ T8354] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  130.681628][ T8373] bond7: (slave geneve2): Releasing active interface
[  130.694798][ T8373] bond8: (slave gretap2): Releasing active interface
[  130.747464][ T8373] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  131.043604][ T8382] netlink: 'syz.2.630': attribute type 10 has an invalid length.
[  131.046957][ T8382] bond0: (slave team0): refused to change device type
[  131.162444][ T8391] lo speed is unknown, defaulting to 1000
[  132.133854][ T8418] bridge0: failed insert local address into bridge forwarding table
[  132.213380][ T8423] netlink: 'syz.1.640': attribute type 4 has an invalid length.
[  132.359069][ T8431] macsec1: entered promiscuous mode
[  132.360940][ T8431] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  132.363254][ T8431] macsec1: entered allmulticast mode
[  132.364939][ T8431] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  132.376740][ T8431] macsec2: entered promiscuous mode
[  132.378894][ T8431] macsec2: entered allmulticast mode
[  132.381769][ T8433] 8021q: VLANs not supported on gre0
[  132.532315][ T8442] bond9: entered promiscuous mode
[  132.534176][ T8442] 8021q: adding VLAN 0 to HW filter on device bond9
[  132.550816][ T8443] 8021q: adding VLAN 0 to HW filter on device bond9
[  132.553263][ T8443] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address
[  132.556528][ T8443] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  132.564930][ T8443] bond9: (slave wireguard0): making interface the new active one
[  132.567512][ T8443] wireguard0: entered promiscuous mode
[  132.570584][ T8443] bond9: (slave wireguard0): Enslaving as an active interface with an up link
[  132.577343][ T8443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.579723][ T8443] IPv6: NLM_F_CREATE should be set when creating new route
[  132.581993][ T8443] IPv6: NLM_F_CREATE should be set when creating new route
[  132.584702][ T8443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  132.611582][ T8443] bond9: (slave wireguard1): The slave device specified does not support setting the MAC address
[  132.620137][ T8443] bond9: (slave wireguard1): Enslaving as a backup interface with an up link
[  132.670921][ T8445] ==================================================================
[  132.674144][ T8445] BUG: KASAN: slab-use-after-free in nf_hook_entry_head+0x1f1/0x2c0
[  132.677336][ T8445] Read of size 8 at addr ffff888124238108 by task syz.1.649/8445
[  132.681242][ T8445] 
[  132.682246][ T8445] CPU: 0 UID: 0 PID: 8445 Comm: syz.1.649 Not tainted syzkaller #0 PREEMPT(full) 
[  132.682262][ T8445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.682271][ T8445] Call Trace:
[  132.682277][ T8445]  <TASK>
[  132.682284][ T8445]  dump_stack_lvl+0x189/0x250
[  132.682302][ T8445]  ? __kasan_check_byte+0x12/0x40
[  132.682322][ T8445]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.682336][ T8445]  ? lock_release+0x4b/0x3e0
[  132.682357][ T8445]  ? __virt_addr_valid+0x4a5/0x5c0
[  132.682374][ T8445]  print_report+0xca/0x240
[  132.682386][ T8445]  ? nf_hook_entry_head+0x1f1/0x2c0
[  132.682399][ T8445]  kasan_report+0x118/0x150
[  132.682417][ T8445]  ? nf_hook_entry_head+0x1f1/0x2c0
[  132.682432][ T8445]  nf_hook_entry_head+0x1f1/0x2c0
[  132.682446][ T8445]  __nf_unregister_net_hook+0x74/0x700
[  132.682461][ T8445]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[  132.682475][ T8445]  __nft_release_hook+0x180/0x350
[  132.682495][ T8445]  nft_rcv_nl_event+0x26f/0x640
[  132.682511][ T8445]  ? __pfx_nft_rcv_nl_event+0x10/0x10
[  132.682529][ T8445]  ? nfulnl_rcv_nl_event+0x1d5/0x210
[  132.682544][ T8445]  notifier_call_chain+0x1b6/0x3e0
[  132.682561][ T8445]  blocking_notifier_call_chain+0x6a/0x90
[  132.682575][ T8445]  netlink_release+0x1259/0x1b10
[  132.682590][ T8445]  ? netlink_release+0x108/0x1b10
[  132.682603][ T8445]  ? __pfx_netlink_release+0x10/0x10
[  132.682615][ T8445]  ? down_write+0x162/0x1f0
[  132.682628][ T8445]  ? __pfx_down_write+0x10/0x10
[  132.682646][ T8445]  sock_close+0xc3/0x240
[  132.682664][ T8445]  ? __pfx_sock_close+0x10/0x10
[  132.682678][ T8445]  __fput+0x44c/0xa70
[  132.682696][ T8445]  task_work_run+0x1d4/0x260
[  132.682714][ T8445]  ? __pfx_task_work_run+0x10/0x10
[  132.682732][ T8445]  ? exit_to_user_mode_loop+0x40/0x110
[  132.682751][ T8445]  exit_to_user_mode_loop+0xec/0x110
[  132.682769][ T8445]  do_syscall_64+0x2bd/0x3b0
[  132.682783][ T8445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.682796][ T8445]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  132.682811][ T8445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.682823][ T8445] RIP: 0033:0x7f0ae638ebe9
[  132.682836][ T8445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.682877][ T8445] RSP: 002b:00007ffde6b52ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  132.682891][ T8445] RAX: 0000000000000000 RBX: 00007f0ae65c7da0 RCX: 00007f0ae638ebe9
[  132.682900][ T8445] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  132.682907][ T8445] RBP: 00007f0ae65c7da0 R08: 0000000000000000 R09: 00000010e6b531df
[  132.682915][ T8445] R10: 000000000003fd3c R11: 0000000000000246 R12: 00000000000208a0
[  132.682923][ T8445] R13: 00007ffde6b52fe0 R14: ffffffffffffffff R15: 00007ffde6b53000
[  132.682938][ T8445]  </TASK>
[  132.682943][ T8445] 
[  132.791938][ T8445] Allocated by task 8449:
[  132.793577][ T8445]  kasan_save_track+0x3e/0x80
[  132.795461][ T8445]  __kasan_kmalloc+0x93/0xb0
[  132.797338][ T8445]  __kvmalloc_node_noprof+0x30d/0x5f0
[  132.799492][ T8445]  alloc_netdev_mqs+0xa3/0x11b0
[  132.801391][ T8445]  rtnl_create_link+0x31f/0xd10
[  132.803364][ T8445]  rtnl_newlink_create+0x25c/0xb00
[  132.805474][ T8445]  rtnl_newlink+0x16d6/0x1c70
[  132.807379][ T8445]  rtnetlink_rcv_msg+0x7cf/0xb70
[  132.809374][ T8445]  netlink_rcv_skb+0x208/0x470
[  132.811285][ T8445]  netlink_unicast+0x82f/0x9e0
[  132.813215][ T8445]  netlink_sendmsg+0x805/0xb30
[  132.815153][ T8445]  __sock_sendmsg+0x21c/0x270
[  132.817063][ T8445]  ____sys_sendmsg+0x505/0x830
[  132.818993][ T8445]  ___sys_sendmsg+0x21f/0x2a0
[  132.820906][ T8445]  __x64_sys_sendmsg+0x19b/0x260
[  132.822929][ T8445]  do_syscall_64+0xfa/0x3b0
[  132.824805][ T8445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.827177][ T8445] 
[  132.828161][ T8445] Freed by task 8449:
[  132.829769][ T8445]  kasan_save_track+0x3e/0x80
[  132.831673][ T8445]  kasan_save_free_info+0x46/0x50
[  132.833693][ T8445]  __kasan_slab_free+0x5b/0x80
[  132.835618][ T8445]  kfree+0x18e/0x440
[  132.837175][ T8445]  device_release+0x9c/0x1c0
[  132.839018][ T8445]  kobject_put+0x22b/0x480
[  132.840799][ T8445]  netdev_run_todo+0xd2e/0xea0
[  132.842727][ T8445]  rtnl_newlink+0x177b/0x1c70
[  132.844657][ T8445]  rtnetlink_rcv_msg+0x7cf/0xb70
[  132.846646][ T8445]  netlink_rcv_skb+0x208/0x470
[  132.848578][ T8445]  netlink_unicast+0x82f/0x9e0
[  132.850494][ T8445]  netlink_sendmsg+0x805/0xb30
[  132.852417][ T8445]  __sock_sendmsg+0x21c/0x270
[  132.854307][ T8445]  ____sys_sendmsg+0x505/0x830
[  132.856237][ T8445]  ___sys_sendmsg+0x21f/0x2a0
[  132.858146][ T8445]  __x64_sys_sendmsg+0x19b/0x260
[  132.860150][ T8445]  do_syscall_64+0xfa/0x3b0
[  132.861982][ T8445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.864359][ T8445] 
[  132.865342][ T8445] Last potentially related work creation:
[  132.867602][ T8445]  kasan_save_stack+0x3e/0x60
[  132.869517][ T8445]  kasan_record_aux_stack+0xbd/0xd0
[  132.871580][ T8445]  insert_work+0x3d/0x330
[  132.873293][ T8445]  __queue_work+0xcd2/0xfb0
[  132.875054][ T8445]  call_timer_fn+0x17e/0x5f0
[  132.876895][ T8445]  __run_timer_base+0x646/0x860
[  132.878845][ T8445]  run_timer_softirq+0xb7/0x180
[  132.880791][ T8445]  handle_softirqs+0x286/0x870
[  132.882715][ T8445]  __irq_exit_rcu+0xca/0x1f0
[  132.884600][ T8445]  irq_exit_rcu+0x9/0x30
[  132.886331][ T8445]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  132.888588][ T8445]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  132.891001][ T8445] 
[  132.891987][ T8445] Second to last potentially related work creation:
[  132.894622][ T8445]  kasan_save_stack+0x3e/0x60
[  132.896486][ T8445]  kasan_record_aux_stack+0xbd/0xd0
[  132.898507][ T8445]  insert_work+0x3d/0x330
[  132.900285][ T8445]  __queue_work+0xcd2/0xfb0
[  132.902109][ T8445]  call_timer_fn+0x17e/0x5f0
[  132.904003][ T8445]  __run_timer_base+0x646/0x860
[  132.905987][ T8445]  run_timer_softirq+0xb7/0x180
[  132.907927][ T8445]  handle_softirqs+0x286/0x870
[  132.909854][ T8445]  __irq_exit_rcu+0xca/0x1f0
[  132.911734][ T8445]  irq_exit_rcu+0x9/0x30
[  132.913481][ T8445]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  132.915765][ T8445]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  132.918194][ T8445] 
[  132.919164][ T8445] The buggy address belongs to the object at ffff888124238000
[  132.919164][ T8445]  which belongs to the cache kmalloc-cg-8k of size 8192
[  132.924745][ T8445] The buggy address is located 264 bytes inside of
[  132.924745][ T8445]  freed 8192-byte region [ffff888124238000, ffff88812423a000)
[  132.930090][ T8445] 
[  132.931073][ T8445] The buggy address belongs to the physical page:
[  132.933528][ T8445] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x124238
[  132.937021][ T8445] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  132.940356][ T8445] memcg:ffff888110e879a1
[  132.942075][ T8445] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  132.945443][ T8445] page_type: f5(slab)
[  132.947079][ T8445] raw: 057ff00000000040 ffff88801a44b640 ffffea0004440c00 0000000000000005
[  132.950449][ T8445] raw: 0000000000000000 0000000080020002 00000000f5000000 ffff888110e879a1
[  132.953880][ T8445] head: 057ff00000000040 ffff88801a44b640 ffffea0004440c00 0000000000000005
[  132.957298][ T8445] head: 0000000000000000 0000000080020002 00000000f5000000 ffff888110e879a1
[  132.960783][ T8445] head: 057ff00000000003 ffffea0004908e01 00000000ffffffff 00000000ffffffff
[  132.964264][ T8445] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  132.967727][ T8445] page dumped because: kasan: bad access detected
[  132.970270][ T8445] page_owner tracks the page as allocated
[  132.972540][ T8445] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8215, tgid 8214 (syz.1.585), ts 128350417943, free_ts 120700587934
[  132.980761][ T8445]  post_alloc_hook+0x240/0x2a0
[  132.982736][ T8445]  get_page_from_freelist+0x21e4/0x22c0
[  132.984970][ T8445]  __alloc_frozen_pages_noprof+0x181/0x370
[  132.987428][ T8445]  alloc_pages_mpol+0x232/0x4a0
[  132.989369][ T8445]  allocate_slab+0x8a/0x370
[  132.991230][ T8445]  ___slab_alloc+0xbeb/0x1410
[  132.993102][ T8445]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  132.995527][ T8445]  krealloc_noprof+0x124/0x340
[  132.997385][ T8445]  copy_array+0x63/0xf0
[  132.999011][ T8445]  copy_verifier_state+0x958/0xf10
[  133.001031][ T8445]  do_check+0x4017/0xe520
[  133.002675][ T8445]  do_check_common+0x1949/0x24f0
[  133.004658][ T8445]  bpf_check+0x1746a/0x1d2d0
[  133.006498][ T8445]  bpf_prog_load+0x1318/0x1930
[  133.008394][ T8445]  __sys_bpf+0x528/0x870
[  133.010074][ T8445]  __x64_sys_bpf+0x7c/0x90
[  133.011794][ T8445] page last free pid 7823 tgid 7822 stack trace:
[  133.014210][ T8445]  __free_frozen_pages+0xbc4/0xd30
[  133.016260][ T8445]  __put_partials+0x156/0x1a0
[  133.018060][ T8445]  put_cpu_partial+0x17c/0x250
[  133.019920][ T8445]  __slab_free+0x2d5/0x3c0
[  133.021653][ T8445]  qlist_free_all+0x97/0x140
[  133.023477][ T8445]  kasan_quarantine_reduce+0x148/0x160
[  133.025594][ T8445]  __kasan_slab_alloc+0x22/0x80
[  133.027583][ T8445]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  133.029885][ T8445]  alloc_inode+0x6a/0x1b0
[  133.031558][ T8445]  new_inode+0x22/0x170
[  133.033270][ T8445]  __debugfs_create_file+0x14d/0x4f0
[  133.035408][ T8445]  debugfs_create_file_unsafe+0x3a/0x50
[  133.037616][ T8445]  nsim_bpf_init+0xeb/0x250
[  133.039373][ T8445]  nsim_create+0xaa6/0xf10
[  133.041133][ T8445]  __nsim_dev_port_add+0x6b6/0xb10
[  133.043188][ T8445]  nsim_dev_port_add_all+0x37/0xf0
[  133.045285][ T8445] 
[  133.046274][ T8445] Memory state around the buggy address:
[  133.048514][ T8445]  ffff888124238000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.051705][ T8445]  ffff888124238080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.054892][ T8445] >ffff888124238100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.058096][ T8445]                       ^
[  133.059844][ T8445]  ffff888124238180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.062974][ T8445]  ffff888124238200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  133.066061][ T8445] ==================================================================
[  133.138299][ T8445] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  133.141333][ T8445] CPU: 1 UID: 0 PID: 8445 Comm: syz.1.649 Not tainted syzkaller #0 PREEMPT(full) 
[  133.145238][ T8445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.149365][ T8445] Call Trace:
[  133.150736][ T8445]  <TASK>
[  133.151972][ T8445]  dump_stack_lvl+0x99/0x250
[  133.153946][ T8445]  ? __asan_memcpy+0x40/0x70
[  133.155909][ T8445]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.157563][ T8445]  ? __pfx__printk+0x10/0x10
[  133.159033][ T8445]  vpanic+0x281/0x750
[  133.160286][ T8445]  ? preempt_schedule+0xae/0xc0
[  133.161814][ T8445]  ? __pfx_vpanic+0x10/0x10
[  133.163233][ T8445]  ? preempt_schedule_common+0x83/0xd0
[  133.165001][ T8445]  ? preempt_schedule+0xae/0xc0
[  133.166422][ T8445]  ? __pfx_preempt_schedule+0x10/0x10
[  133.168169][ T8445]  panic+0xb9/0xc0
[  133.169420][ T8445]  ? __pfx_panic+0x10/0x10
[  133.170997][ T8445]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  133.173360][ T8445]  ? nf_hook_entry_head+0x1f1/0x2c0
[  133.175229][ T8445]  check_panic_on_warn+0x89/0xb0
[  133.176884][ T8445]  ? nf_hook_entry_head+0x1f1/0x2c0
[  133.178504][ T8445]  end_report+0x78/0x160
[  133.179737][ T8445]  kasan_report+0x129/0x150
[  133.181061][ T8445]  ? nf_hook_entry_head+0x1f1/0x2c0
[  133.182651][ T8445]  nf_hook_entry_head+0x1f1/0x2c0
[  133.184298][ T8445]  __nf_unregister_net_hook+0x74/0x700
[  133.186134][ T8445]  ? __pfx_nf_flow_table_offload_setup+0x10/0x10
[  133.188246][ T8445]  __nft_release_hook+0x180/0x350
[  133.190137][ T8445]  nft_rcv_nl_event+0x26f/0x640
[  133.192169][ T8445]  ? __pfx_nft_rcv_nl_event+0x10/0x10
[  133.194435][ T8445]  ? nfulnl_rcv_nl_event+0x1d5/0x210
[  133.196589][ T8445]  notifier_call_chain+0x1b6/0x3e0
[  133.198683][ T8445]  blocking_notifier_call_chain+0x6a/0x90
[  133.200517][ T8445]  netlink_release+0x1259/0x1b10
[  133.202139][ T8445]  ? netlink_release+0x108/0x1b10
[  133.204031][ T8445]  ? __pfx_netlink_release+0x10/0x10
[  133.206036][ T8445]  ? down_write+0x162/0x1f0
[  133.207728][ T8445]  ? __pfx_down_write+0x10/0x10
[  133.209561][ T8445]  sock_close+0xc3/0x240
[  133.211245][ T8445]  ? __pfx_sock_close+0x10/0x10
[  133.213179][ T8445]  __fput+0x44c/0xa70
[  133.214784][ T8445]  task_work_run+0x1d4/0x260
[  133.216839][ T8445]  ? __pfx_task_work_run+0x10/0x10
[  133.218925][ T8445]  ? exit_to_user_mode_loop+0x40/0x110
[  133.221128][ T8445]  exit_to_user_mode_loop+0xec/0x110
[  133.223275][ T8445]  do_syscall_64+0x2bd/0x3b0
[  133.225138][ T8445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.227502][ T8445]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  133.229883][ T8445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.232214][ T8445] RIP: 0033:0x7f0ae638ebe9
[  133.233986][ T8445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.241590][ T8445] RSP: 002b:00007ffde6b52ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  133.244973][ T8445] RAX: 0000000000000000 RBX: 00007f0ae65c7da0 RCX: 00007f0ae638ebe9
[  133.248080][ T8445] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  133.251172][ T8445] RBP: 00007f0ae65c7da0 R08: 0000000000000000 R09: 00000010e6b531df
[  133.254291][ T8445] R10: 000000000003fd3c R11: 0000000000000246 R12: 00000000000208a0
[  133.257435][ T8445] R13: 00007ffde6b52fe0 R14: ffffffffffffffff R15: 00007ffde6b53000
[  133.260635][ T8445]  </TASK>
[  133.262581][ T8445] Kernel Offset: disabled
[  133.264385][ T8445] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:35:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008ea71d0
R8 =ffff888105e58237 R9 =1ffff11020bcb046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018fe R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555594695500 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc9a3bbefc8 CR3=000000010ee7e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=fb1ee5a416945001 75fef7fd4c59f4d0
XMM02=8cfb8c7c1a3017e8 6e0c8be49c511ce8 XMM03=0d8a6a0a91ed6043 c07745eee11f707d
XMM04=5aeb91147916ed0f 35466d18e27f6bbc XMM05=d2c0c550d4c8cfac ccf344f9cda2e8d3
XMM06=427f52d02b334611 65e83d44d2b0dbb0 XMM07=66d75124ff03252d 0b4ecfb3f6f52235
XMM08=c34461082e3643ca 925aeb91147916ed XMM09=0000000000000000 00007f0ae6412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000003 RBX=ffffea0000b6e3d8 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e139ee0 RBP=ffffea0000b6e3c0 RSP=ffffc9000422f318
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff9400016dc79
R12=ffffffff822e559d R13=0000000000000000 R14=1ffffd400016dc79 R15=0000000000000001
RIP=ffffffff819d5a7b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555bd78500 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f01d78f56c0 CR3=0000000024a5c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f01d6c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
