last executing test programs:

37.364186425s ago: executing program 1 (id=2131):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff3}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000a40)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0xffffffffffffff00)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r6, 0x4, 0x3}, 0x50)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800002000000000000a0000000000000004000400"], 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newnexthop={0x64, 0x68, 0x1, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20}, [@NHA_GROUP={0x4c, 0x2, [{0x1, 0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x2, 0x4}, {0x2, 0x3}, {0x1, 0x5e}, {0x0, 0xbc}, {0x1, 0xb}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x26008000}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x70bd28, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.self_freezing\x00', 0x0, 0x0)
openat$cgroup_subtree(r8, &(0x7f00000002c0), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_devices(r9, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f0000000080)={'b', ' *:* ', 'm\x00'}, 0x8)
sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0)

37.224453927s ago: executing program 1 (id=2132):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r1, &(0x7f0000009180)=[{{&(0x7f0000000800)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000840)="d91cf200bd1172df2a", 0x9}], 0x1}}, {{&(0x7f0000000f00)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000f40)='_', 0x1}], 0x1}}], 0x2, 0x4080)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)
socketpair(0x2, 0x3, 0xff, &(0x7f0000000040))
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010101, 0x1, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001000000060000000000000000000000003c000000000000000a000a002c0013"], 0xcc}}, 0x0)

37.165474642s ago: executing program 1 (id=2133):
r0 = socket$unix(0x1, 0x2, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r1}, 0x38) (async)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
syz_init_net_socket$ax25(0x3, 0x6, 0xc4) (async, rerun: 64)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async, rerun: 64)
sendmmsg$unix(r3, &(0x7f0000000440)=[{{&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x8000)
close(r0)

37.014122088s ago: executing program 1 (id=2135):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000080)=0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x9, <r1=>0x0}, 0x8)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x201, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x79}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000000000891214000000000095", @ANYBLOB="b370917fb408c2cc7cd3b60507ab6edc63e02004d5a3a9e39d78056f2141c803eeeabc55bc797ed2cc35044c55f7805cc37b0324134debbb8a312eb5bf864cebab30729a61ec980d42b9ff700d52ab455f092e0982af69c2ce5090ef85f4802b3ad778b408f2d38b407f7c30d11a03a36a445b99e391c0e47809aef37398ae32e91389d8d565ec815b7187c1d8af5ee955aff36870ed02590be7f9f1d9900c979b44797875a5b993c8575ffcd9ca97f375957f9a3043cd5ea7c605db03a8208e37cc67ed93bea609e1d7537973e0a42cee42842aca0b487f6253e14477dfc2972469be2e8bedbd08e6a919f30644b6811920"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x67, '\x00', r0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)

33.161579841s ago: executing program 1 (id=2135):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000080)=0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x9, <r1=>0x0}, 0x8)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x201, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x79}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000000000891214000000000095", @ANYBLOB="b370917fb408c2cc7cd3b60507ab6edc63e02004d5a3a9e39d78056f2141c803eeeabc55bc797ed2cc35044c55f7805cc37b0324134debbb8a312eb5bf864cebab30729a61ec980d42b9ff700d52ab455f092e0982af69c2ce5090ef85f4802b3ad778b408f2d38b407f7c30d11a03a36a445b99e391c0e47809aef37398ae32e91389d8d565ec815b7187c1d8af5ee955aff36870ed02590be7f9f1d9900c979b44797875a5b993c8575ffcd9ca97f375957f9a3043cd5ea7c605db03a8208e37cc67ed93bea609e1d7537973e0a42cee42842aca0b487f6253e14477dfc2972469be2e8bedbd08e6a919f30644b6811920"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x67, '\x00', r0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)

27.287161308s ago: executing program 1 (id=2135):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r0=>0x0, &(0x7f0000000080)=0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x9, <r1=>0x0}, 0x8)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x201, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x79}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000000000000000891214000000000095", @ANYBLOB="b370917fb408c2cc7cd3b60507ab6edc63e02004d5a3a9e39d78056f2141c803eeeabc55bc797ed2cc35044c55f7805cc37b0324134debbb8a312eb5bf864cebab30729a61ec980d42b9ff700d52ab455f092e0982af69c2ce5090ef85f4802b3ad778b408f2d38b407f7c30d11a03a36a445b99e391c0e47809aef37398ae32e91389d8d565ec815b7187c1d8af5ee955aff36870ed02590be7f9f1d9900c979b44797875a5b993c8575ffcd9ca97f375957f9a3043cd5ea7c605db03a8208e37cc67ed93bea609e1d7537973e0a42cee42842aca0b487f6253e14477dfc2972469be2e8bedbd08e6a919f30644b6811920"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x67, '\x00', r0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94)

581.222303ms ago: executing program 0 (id=2633):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x21, 0x0, 0x1000001)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
syz_emit_ethernet(0x10ae, &(0x7f0000001dc0)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "bd3645", 0x1078, 0x2c, 0x1, @loopback, @remote, {[@fragment={0x29, 0x0, 0xf, 0x0, 0x0, 0x5, 0x67}, @fragment={0xd3, 0x0, 0x6, 0x0, 0x0, 0x17, 0x68}, @routing={0x89, 0xc, 0x2, 0x5, 0x0, [@remote, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}, @empty]}], "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"}}}}}, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x40000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r6, 0xb97534d5fe9700cf, 0x4, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x200488c1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080025bd7000fc116baf57eab3102b37ce2d", @ANYRES32=r8, @ANYBLOB="0c009900a60c000055000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40480d0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
r9 = socket(0x2, 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x80, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000140), &(0x7f0000000180)=r9}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r10, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp=r9, 0x2}, 0x20)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000eb0505000000f7345ac3ebc0b050db20412c3ff0d72d0000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0x4}}}, 0x24}}, 0x0)

580.633305ms ago: executing program 2 (id=2634):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d080000711212000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd70100600010007000000080009000200000008000b000000000008000c00a80a0000050012"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d080000711212000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd70100600010007000000080009000200000008000b000000000008000c00a80a0000050012"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async)

501.669824ms ago: executing program 2 (id=2635):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0x0, @in=@multicast2}}, 0xe4) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in, 0x0, 0x2}}, 0xe8)
close(r0)

381.040398ms ago: executing program 2 (id=2636):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4044004)
recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x4008103}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f0000000680)=""/230, 0xe6}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x7}], 0x6, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

379.654904ms ago: executing program 2 (id=2637):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x7f, @none}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0xf3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x11}]}}]}, 0x3c}}, 0x24000000)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000280)=0x1a538e40, 0x4)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}}, 0x2)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "fabdecc977cfe30f40bd7fa05369e824e235689754c698523a0ecbe4ab527040feac4abc55f80f028e5b22ec9b42cdabc49e69290b3e8dee54b2961acd851630"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002103)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x4000002, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$packet(0x11, 0x2, 0x300)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r5, 0x1, 0x4a, &(0x7f0000000040)=0xb, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

281.580393ms ago: executing program 0 (id=2638):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async, rerun: 64)
r1 = socket$kcm(0x2, 0x5, 0x0) (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
sendmsg$inet(r1, 0x0, 0x0) (async, rerun: 64)
sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x24008000)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@any, 0x6b6e}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r6 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000000010000fd000000090000000100cdb2b1568fc8c49ea11808fedc040000", @ANYBLOB="463eb1a0e17c13e4aea05407fc566c4a112d08c2dd79c495b8ae15d9254d65c9e6d06880c9e52a8bbda5cb52ddb145ad6bf3f7c91e2a436d67489dd65332825679b2f5a5fce2ca9411b2fff5f966ba15fe9e69fc5c1fcddd24aadd7ec3801caa17d7222e98107057bfe54705e44a276f81fccba67055c3f043229d0cc84ec6f100091cd3e92bc97edc9bef3aa7b37827d03998cd48d9d11e473453d8d98b4cc0e03a32a30b76ac59c2bdd1ab8f811436ef80fdad07f630870d7d5687bd29211306e5594b928b82eeb5c2c6e314d001479e3bc7290eafeb", @ANYRES64=r6, @ANYRESOCT=r0, @ANYRES32, @ANYRESHEX=r3], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r7}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x4, r7}, 0x38)
sendmmsg$inet6(r6, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f00000002c0)=0x4, 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket(0x840000000002, 0x3, 0x100)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000080)={'wg2\x00', <r11=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11], 0x22c}}, 0x0) (async)
sendmmsg$inet(r8, &(0x7f0000002d40)=[{{&(0x7f00000000c0)={0x2, 0x4ea1, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}}, {{&(0x7f0000000a80)={0x2, 0x4e28, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}}], 0x2, 0x0) (async)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r6}, 0x8)
ioctl$PPPIOCATTCHAN(r12, 0x40047438, &(0x7f0000000340)=0x2)

207.226571ms ago: executing program 0 (id=2639):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2000000000}}, [@tmpl={0x104, 0x5, [{{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x5, 0x1}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8011}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

200.84346ms ago: executing program 2 (id=2640):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000180)=0x5, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'sit0\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4)
sendto$packet(r3, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="a6", 0x1, 0x40840, 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000000140)=""/46, 0x2e}, {0x0}, {&(0x7f00000001c0)=""/78, 0x4e}], 0x6}}], 0x1, 0x0, 0x0)
write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x1e8, r7, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e2}]}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xff9, @dev={0xfe, 0x80, '\x00', 0x17}, 0xd}}}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x78236a0cce3c93be}, 0x40480d5)
poll(&(0x7f00000003c0)=[{r0, 0x7004}], 0x1, 0x80)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)

199.641183ms ago: executing program 0 (id=2641):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000140))
socket$can_raw(0x1d, 0x3, 0x1)
socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
unshare(0x20000400)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xa1, @mcast1, 0x6}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000080)={@private0, r4}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt(r5, 0x2, 0x4, &(0x7f0000000580)="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", 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08000200e000000114000300000000000000000000000000000000000800090008000000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff, 0xffff}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20400d5}, 0x840)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)

129.593287ms ago: executing program 2 (id=2642):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r1 = socket$inet(0x2, 0x4, 0x7)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x438, 0x110, 0x110, 0x240, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000080), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="e13722e0165a", @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0xffffffff}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xff, 0xa, 0x4, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x750, 0xcc, 0x3, 0x7, 0x3, 0x59a, 'veth1_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x21}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xd, 0x401, 0xd8dd, 0x1, 0x0, "f2c2ff2d3deab77dfdbc44363c2b9433fb4943d686652f4194fa4e5dd9558863078587fda2e4b235cf1d4ccfa965d5e925d813134876cf51da17635a540dc09a"}}}, {{@arp={@empty, @empty, 0xffffff00, 0xffff00, 0x8, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7fff, 0x4, 0x15e, 0x7, 0x1, 0x7ff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x0, 0x82}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac, @remote, @remote, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0)

127.599384ms ago: executing program 0 (id=2643):
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = socket$inet6(0xa, 0x0, 0x5)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x70bd26, 0xc6, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x66004000}, 0x40001)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x338, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5e, 0x3, "a378c42d0d49ffa5d1630351974190eed5e0f03fc70ebcce6dc5873493e29c6cbbd610c5fa73d49e84594034ccfe11a0c709612af63217a92753b856cf9de5119c076d016766d7caa7c61f8802276d70cf486144b41d255ae43e"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "423a8447a56e2c33117c634cad1bebadaf95bca031628393ec3cdcb72a3fc494436dc4"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7dc000}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "02eedebf7c50ee2264a26488d0caa1dd398cf676b30ad5319c5adbdf1fa3160c18"}}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @loopback, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x93}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff8000}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @remote, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "c33b22b492486e6e74c3c6977f9f7346bbf3415af57fe04d09c7e2"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd38d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x48814}, 0x811)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000640)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x10000}, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)}, {&(0x7f0000000700)="bf35c49f2fe6425cbda189a3134aff7db2797284280ba0fcead17ce1e0b0f71945d17b63390b3244364f10c236b497a532541cf37837becb87ffa66be279cfc9", 0x40}], 0x2}, 0x0)
connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e22, 0x9, @empty, 0x41}, 0x1c)
ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000000800)="34a862193785641f05a26b425e5907d11e0419ae1e586a119260327972edb5a28849bc266680a236c8f2c7c018a0b6c69a3bc1deb7d8ef64b639e4be486d7651f051c47b09f3ba89f4047abdf657122b831cc88694d82cceebe02d70cf249be79fd2059e910b92049fad84081c972076cb6e86")
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl0\x00', <r6=>0x0, 0x4, 0x4, 0x10, 0x3, 0x20, @loopback, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x10, 0x1, 0xfc4, 0x1ff}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000009c0)={'wg2\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb8, r5, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0xb8}}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r8=>0x0})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000b80)=0x7fffffff, 0x4)
ppoll(&(0x7f0000000bc0)=[{r9, 0x2}], 0x1, &(0x7f0000000c00), &(0x7f0000000c40)={[0x1]}, 0x8)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80, 0x3b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x48}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3b33}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20048040)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x80}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008001)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001200)={&(0x7f0000000f00)="8c8d808d96d6009403b51d7a3c63f871093eec14fb865cdb3a7f0e90d8409ef542ee40b531e6bea020c43773786684f61070752a0587cb217fd92ef653d463e636c902d139c1a5", &(0x7f0000000f80)=""/118, &(0x7f0000001000)="04fe0b83c3a5f746a82379a35c8c77e6f4245abbf9a086aa4840f1c35702d810aae336e6df6715013ba894db0a30863c86432a2778fec74b6acd80ae056743400be153a0753db950692c248cdec846463c026e2bd19ba3ac20ed63710f0489c810054b49dd1b3a021f8fec46cac6362de48133b296735847e1baf743e32e420dcc957b3e32b220f3bb72f070e834875ceecfcf468ba0e5813e233a6f14d23023bd1442dcbbdf55eb3c38547488e854936bceefaf1590ca62f78dba99d1ceba79cdff781720ccd47968d24a9a4def5c104045c6da442c6f40360db181ee3b776a0521", &(0x7f0000001100)="e9d61065ec83b1111719bd6ba64b89c9316856427a71127038cc3b6272e467f58155c08646a782c31b523eba9c8a6b787a5d703dbc567903686e2a43d72ba5771cf9bbf5bf09c713a70d356b2a33eeb1693f593926564090d530db1433fc3b239dc0cf331d4076e46e2ebdbeb9f35acee32b15db3fdc02cadbc718f8c42273a497edbdff5be724added0d40dc5959cfa5e44244efd090235780e3697002733ee031e6c5c4d5c12ca9ce42686c3ba94218c1ec907f435e7544d0c05ad40ad1e6e76916b291211f8b6b5c4c59322e0bb200a4fe6682dece13c3f56d2c4515109f1991be570758e1842f921454ac955125964", 0x7fff, r2}, 0x38)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001240)={{0x0, 0x3b6f, 0x8, 0x35, 0x87b6, 0x8, 0x3, 0x934, 0xa7d, 0x2, 0x8001, 0x7fffffff, 0x7ff, 0x9}})
r10 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002280)={r10, r2, 0x0, 0x3, &(0x7f0000002240)='\\*\x00'}, 0x30)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r1, 0xde3c3000)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c801}, 0x58005)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000002400)={0x0, 0x7, 0xee}, 0x8)
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x38, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000002540)={<r11=>0x0, 0x8001}, &(0x7f0000002580)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000025c0)={r11, 0x9}, 0x8)

0s ago: executing program 0 (id=2644):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x12288}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0xc}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x30}}, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000240)={<r7=>0x0, 0x75, "3196c6736bb3b4dff9e914a8b79cbdab61131df61a32019e1387a5f2a832e75b478fa5f6753b3f5c908ea7e20d32e5897f2a6a5168e43c33d926eaca2ef1c5be05e8eb2f7df3e8d72c8962068c07641b33327972d5c3125c7c007501f89d5b01c403d675f11901648e84808ac98e32474d9f59a9da"}, &(0x7f00000001c0)=0x7d)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)={r7, 0x6e, "7f2ebba5b0e614f4450f2cceb2ca3f94b199af194470f14d9f65d1c3147ae71169fa21d2efd9fc3862af03a4e33d4048a887bcda11de8d2f43eec06475162c7e302430ba985623ec185789c09d272477ef04e6d5a4472890d7f1e094dfd297708c947b082d10c52ff2b1f0cd5f4e"}, &(0x7f0000000340)=0x76)
r8 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40)

kernel console output (not intermixed with test programs):

ber set to 1
[  197.029029][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'.
[  197.047827][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'.
[  197.060845][ T7498] 8021q: adding VLAN 0 to HW filter on device bond1
[  197.098755][ T7498] netlink: 16 bytes leftover after parsing attributes in process `syz.2.467'.
[  197.253989][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'.
[  197.280457][ T7523] gretap1: entered promiscuous mode
[  197.358519][ T7540] xt_CT: No such helper "snmp_trap"
[  197.412105][ T7547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.460850][ T7552] netlink: 'syz.2.484': attribute type 2 has an invalid length.
[  197.465710][ T7552] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[  197.468142][ T7552] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[  197.575255][ T7560] unknown channel width for channel at 909000KHz?
[  198.158848][ T7612] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  198.304101][ T7629] netlink: 'syz.1.502': attribute type 21 has an invalid length.
[  198.591304][ T7639] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  199.032808][ T7689] netlink: 'syz.2.520': attribute type 29 has an invalid length.
[  199.326224][ T7715] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.343054][ T7716] netlink: 'syz.1.526': attribute type 2 has an invalid length.
[  199.378675][ T7716] : entered promiscuous mode
[  199.407558][ T7718] 8021q: adding VLAN 0 to HW filter on device batadv1
[  199.411243][ T7718] team0: Port device batadv1 added
[  199.433383][ T7715] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.497277][ T7715] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.556916][ T7715] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.641146][ T7715] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.657674][ T7715] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.672762][ T7715] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.687153][ T7715] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.465217][ T7761] netlink: 'syz.2.541': attribute type 4 has an invalid length.
[  200.469253][ T7761] __nla_validate_parse: 20 callbacks suppressed
[  200.469266][ T7761] netlink: 17 bytes leftover after parsing attributes in process `syz.2.541'.
[  200.485111][ T7761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.541'.
[  200.526299][ T7764] policy can only be matched on NF_INET_PRE_ROUTING
[  200.526316][ T7764] unable to load match
[  201.112355][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'.
[  201.200857][ T7783] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  201.205591][ T7783] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  201.350665][ T7786] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[  201.401814][ T7789] netlink: 104 bytes leftover after parsing attributes in process `syz.0.552'.
[  201.429828][ T7791] nbd: couldn't find a device at index 17
[  201.590005][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.557'.
[  201.637595][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'.
[  201.701283][ T7816] sctp: [Deprecated]: syz.0.562 (pid 7816) Use of int in max_burst socket option.
[  201.701283][ T7816] Use struct sctp_assoc_value instead
[  202.775798][ T7845] netlink: 596 bytes leftover after parsing attributes in process `syz.1.573'.
[  202.887625][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.576'.
[  202.906398][ T7855] netlink: 'syz.0.578': attribute type 2 has an invalid length.
[  202.921894][ T7855] netlink: 'syz.0.578': attribute type 9 has an invalid length.
[  202.932965][ T7855] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.578'.
[  202.955115][ T5841] Bluetooth: hci2: link tx timeout
[  202.957090][ T5841] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  202.960733][   T54] Bluetooth: hci2: link tx timeout
[  202.962362][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  203.058916][ T7870] Timeout policy `syz1' can only be used by L3 protocol number 35085
[  203.327181][ T7896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'.
[  203.569170][ T7920] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  203.604993][ T7932] ip6t_rpfilter: unknown options
[  203.616538][ T7932] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[  203.619383][ T7934] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  203.624370][ T7932] nbd: must specify at least one socket
[  203.721326][ T7940] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  203.760602][ T7942] netlink: 'syz.2.608': attribute type 1 has an invalid length.
[  203.793112][ T7942] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  203.799922][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  203.806425][ T7942] 8021q: adding VLAN 0 to HW filter on device bond2
[  203.829802][ T7942] veth3: entered promiscuous mode
[  203.834785][ T7942] bond2: (slave veth3): Enslaving as a backup interface with a down link
[  203.914135][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  204.530499][ T7983] tipc: Enabled bearer <ib:caif0>, priority 15
[  204.653443][ T7987] netlink: 'syz.0.622': attribute type 11 has an invalid length.
[  204.983625][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  205.105161][ T8019] dvmrp0: entered allmulticast mode
[  205.138758][ T8022] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[  205.158273][ T8022] 8021q: adding VLAN 0 to HW filter on device bond3
[  205.168552][ T8022] 8021q: adding VLAN 0 to HW filter on device batadv2
[  205.172233][ T8022] bond3: (slave batadv2): making interface the new active one
[  205.175695][ T8022] bond3: (slave batadv2): Enslaving as an active interface with an up link
[  205.306231][ T8033] vlan0: entered allmulticast mode
[  205.307886][ T8033] veth1: entered allmulticast mode
[  205.387413][ T8038] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  205.422063][ T8040] netlink: 'syz.2.637': attribute type 5 has an invalid length.
[  205.531209][ T8047] __nla_validate_parse: 13 callbacks suppressed
[  205.531222][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'.
[  205.536849][ T8047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.640'.
[  205.539582][ T8047] netlink: 188 bytes leftover after parsing attributes in process `syz.2.640'.
[  205.542365][ T8047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.640'.
[  205.641247][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'.
[  205.661307][ T8053] gtp0: entered promiscuous mode
[  205.781234][ T8064] netlink: 104 bytes leftover after parsing attributes in process `syz.0.648'.
[  205.797029][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'.
[  205.815511][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'.
[  205.825656][ T8064] ip6gre0: entered allmulticast mode
[  205.939051][ T8078] syz_tun: left allmulticast mode
[  205.940690][ T8078] syz_tun: left promiscuous mode
[  205.942414][ T8078] bridge0: port 3(syz_tun) entered disabled state
[  205.952491][ T8078] bridge_slave_0: left allmulticast mode
[  205.967897][ T8078] bridge_slave_0: left promiscuous mode
[  205.969778][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.979873][ T8078] bridge_slave_1: left allmulticast mode
[  205.981664][ T8078] bridge_slave_1: left promiscuous mode
[  205.983956][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.990392][ T8089] netlink: 'syz.1.652': attribute type 10 has an invalid length.
[  205.995909][ T8078] bond0: (slave bond_slave_0): Releasing backup interface
[  205.995977][ T8091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.000387][ T8091] IPv6: NLM_F_CREATE should be set when creating new route
[  206.002605][ T8091] IPv6: NLM_F_CREATE should be set when creating new route
[  206.008823][ T8078] bond0: (slave bond_slave_1): Releasing backup interface
[  206.033094][ T8089] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  206.800200][ T8115] xt_connbytes: Forcing CT accounting to be enabled
[  206.802463][ T8115] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  206.836123][ T8119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.842373][ T8119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.662'.
[  206.846908][ T8119] netlink: 64 bytes leftover after parsing attributes in process `syz.2.662'.
[  207.109513][ T8121] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.183690][ T8121] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.240269][ T8121] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.287947][ T8121] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.344413][ T8121] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.355640][ T8121] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.369622][ T8121] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.379606][ T8121] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.486447][ T8137] ipvlan3: entered promiscuous mode
[  207.494604][ T8137] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  207.497252][ T8137] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  207.529813][ T8141] netlink: 'syz.0.668': attribute type 2 has an invalid length.
[  207.532344][ T8141] netlink: 'syz.0.668': attribute type 1 has an invalid length.
[  207.543523][ T8141] tipc: Enabled bearer <eth:team0>, priority 0
[  207.693084][ T8157] veth1_macvtap: left promiscuous mode
[  207.699477][ T8157] macsec0: entered promiscuous mode
[  207.706761][ T8157] veth1_macvtap: entered promiscuous mode
[  207.711410][ T8157] macsec0: left promiscuous mode
[  207.796019][ T8166] netlink: 'syz.2.678': attribute type 10 has an invalid length.
[  207.806610][ T8166] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  207.815332][ T8165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.821549][ T8167] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  207.825420][ T8167] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  208.007268][ T8183] sctp: [Deprecated]: syz.1.684 (pid 8183) Use of int in maxseg socket option.
[  208.007268][ T8183] Use struct sctp_assoc_value instead
[  208.080560][ T8187] 8021q: adding VLAN 0 to HW filter on device bond2
[  208.083158][ T8187] bridge0: port 1(bond2) entered blocking state
[  208.087457][ T8187] bridge0: port 1(bond2) entered disabled state
[  208.093911][ T8187] bond2: entered allmulticast mode
[  208.097270][ T8187] bond2: entered promiscuous mode
[  208.099621][ T8187] bridge0: port 1(bond2) entered blocking state
[  208.101632][ T8187] bridge0: port 1(bond2) entered forwarding state
[  208.107017][ T6637] bridge0: port 1(bond2) entered disabled state
[  208.219088][ T8198] netlink: 'syz.1.690': attribute type 30 has an invalid length.
[  208.263616][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  208.310920][ T8208] xt_hashlimit: size too large, truncated to 1048576
[  208.313100][ T8208] xt_hashlimit: overflow, try lower: 3/0
[  208.690570][ T8242] netlink: 'syz.0.704': attribute type 9 has an invalid length.
[  208.721346][   T24] hid-generic 0005:046D:0A0E.0001: collection stack underflow
[  208.733581][   T24] hid-generic 0005:046D:0A0E.0001: item 0 0 0 12 parsing failed
[  208.739110][   T24] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22
[  208.819229][ T8254] 8021q: adding VLAN 0 to HW filter on device bond4
[  208.984141][ T8269] netlink: 'syz.0.713': attribute type 1 has an invalid length.
[  208.986507][ T8269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.059533][ T8283] openvswitch: netlink: Flow key attr not present in new flow.
[  209.106236][ T8288] bond0: (slave wlan1): Releasing backup interface
[  209.135298][ T8288] team0: Port device batadv1 removed
[  209.137944][ T8288] bond2: (slave ip6gretap1): Removing an active aggregator
[  209.140588][ T8288] bond2: (slave ip6gretap1): Releasing backup interface
[  209.142801][ T8288] bond2: (slave ip6gretap1): the permanent HWaddr of slave - c6:d7:be:16:d7:ef - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  209.152435][ T8288] bond2: (slave veth3): Releasing backup interface
[  209.158858][ T8288] bond3: (slave batadv2): Releasing active interface
[  209.336537][ T8316] syz_tun: entered allmulticast mode
[  209.346729][ T8316] syz_tun: left allmulticast mode
[  209.349210][ T8316] netlink: 'syz.1.730': attribute type 10 has an invalid length.
[  209.481108][ T8332] netlink: 'syz.1.733': attribute type 1 has an invalid length.
[  209.528214][ T8340] netlink: 'syz.2.737': attribute type 1 has an invalid length.
[  209.556536][ T8340] bond4: (slave gretap1): making interface the new active one
[  209.559278][ T8340] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  210.086948][ T8382] 8021q: adding VLAN 0 to HW filter on device bond5
[  210.102470][ T8382] bond5: (slave gretap2): making interface the new active one
[  210.107196][ T8382] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  210.120856][ T8382] tipc: Enabling of bearer <ib:ip6erspan0> rejected, failed to enable media
[  210.128857][ T8382] syz.2.748 (8382) used greatest stack depth: 17528 bytes left
[  210.376008][ T8406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  210.634607][ T8437] __nla_validate_parse: 17 callbacks suppressed
[  210.634620][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'.
[  210.635474][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.760'.
[  210.642371][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.760'.
[  210.757728][ T8448] GUP no longer grows the stack in syz.0.764 (8448): 200000006000-20000000a000 (200000005000)
[  210.761476][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.0.764 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  210.761489][ T8448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.761495][ T8448] Call Trace:
[  210.761499][ T8448]  <TASK>
[  210.761533][ T8448]  dump_stack_lvl+0x189/0x250
[  210.761552][ T8448]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.761562][ T8448]  ? __pfx__printk+0x10/0x10
[  210.761573][ T8448]  ? find_vma+0xe7/0x160
[  210.761590][ T8448]  __get_user_pages+0x2a60/0x30b0
[  210.761616][ T8448]  ? __pfx___get_user_pages+0x10/0x10
[  210.761624][ T8448]  ? __gup_longterm_locked+0xbf7/0x15b0
[  210.761633][ T8448]  ? down_read_killable+0x1d1/0x350
[  210.761642][ T8448]  ? try_get_folio+0x633/0x660
[  210.761653][ T8448]  __gup_longterm_locked+0xd66/0x15b0
[  210.761664][ T8448]  ? try_grab_folio_fast+0x1be/0x4f0
[  210.761678][ T8448]  ? gup_fast_fallback+0x1afc/0x2260
[  210.761688][ T8448]  gup_fast_fallback+0x1cd4/0x2260
[  210.761713][ T8448]  ? __pfx_gup_fast_fallback+0x10/0x10
[  210.761721][ T8448]  ? trace_contention_end+0x39/0x120
[  210.761733][ T8448]  ? __mutex_lock+0x330/0xe80
[  210.761741][ T8448]  ? futex_unqueue+0x22/0x240
[  210.761776][ T8448]  ? futex_unqueue+0x22/0x240
[  210.761787][ T8448]  ? futex_unqueue+0x22/0x240
[  210.761796][ T8448]  ? is_valid_gup_args+0x11f/0x200
[  210.761806][ T8448]  ? get_user_pages_fast+0x4d/0xb0
[  210.761815][ T8448]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  210.761831][ T8448]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  210.761842][ T8448]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  210.761853][ T8448]  ? wait_for_space+0x24d/0x2d0
[  210.761864][ T8448]  iov_iter_get_pages2+0x5e/0xa0
[  210.761875][ T8448]  __se_sys_vmsplice+0x548/0x10d0
[  210.761900][ T8448]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  210.761910][ T8448]  ? __pfx_futex_wait+0x10/0x10
[  210.761925][ T8448]  ? __lock_acquire+0xab9/0xd20
[  210.761949][ T8448]  ? do_pipe2+0xf7/0x170
[  210.761962][ T8448]  ? rcu_is_watching+0x15/0xb0
[  210.761975][ T8448]  ? do_syscall_64+0xbe/0x3b0
[  210.761986][ T8448]  do_syscall_64+0xfa/0x3b0
[  210.761993][ T8448]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.762000][ T8448]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.762008][ T8448]  ? exc_page_fault+0x9f/0xf0
[  210.762020][ T8448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.762028][ T8448] RIP: 0033:0x7f8778f8e929
[  210.762037][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.762045][ T8448] RSP: 002b:00007f8776dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  210.762056][ T8448] RAX: ffffffffffffffda RBX: 00007f87791b6080 RCX: 00007f8778f8e929
[  210.762062][ T8448] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b
[  210.762067][ T8448] RBP: 00007f8779010b39 R08: 0000000000000000 R09: 0000000000000000
[  210.762071][ T8448] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  210.762076][ T8448] R13: 0000000000000000 R14: 00007f87791b6080 R15: 00007ffe594ae0d8
[  210.762089][ T8448]  </TASK>
[  210.896687][ T8452] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  210.945924][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'.
[  210.948712][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.767'.
[  211.030146][ T8468] Bluetooth: MGMT ver 1.23
[  211.184915][ T8487] vlan3: entered promiscuous mode
[  211.187121][ T8487] bridge0: entered promiscuous mode
[  211.271028][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'.
[  211.275697][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'.
[  211.278483][ T8494] validate_nla: 2 callbacks suppressed
[  211.278516][ T8494] netlink: 'syz.1.776': attribute type 12 has an invalid length.
[  211.282524][ T8494] netlink: 'syz.1.776': attribute type 11 has an invalid length.
[  211.321936][ T8496] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  211.417148][ T8503] netlink: 72 bytes leftover after parsing attributes in process `syz.1.781'.
[  211.502542][ T8516] tipc: Can't bind to reserved service type 1
[  211.543021][ T8519] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  211.558235][ T8521] netlink: 'syz.1.787': attribute type 16 has an invalid length.
[  211.560770][ T8521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'.
[  211.859725][ T8533] bond0: entered promiscuous mode
[  211.862481][ T8533] batadv0: entered promiscuous mode
[  211.865241][ T8533] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  211.868518][ T8533] 8021q: adding VLAN 0 to HW filter on device hsr1
[  211.872430][ T8533] bond0: left promiscuous mode
[  211.875344][ T8533] batadv0: left promiscuous mode
[  212.028358][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'.
[  212.482144][ T8558] netlink: 'syz.0.800': attribute type 1 has an invalid length.
[  212.583533][ T4630] wlan0: Trigger new scan to find an IBSS to join
[  212.624004][ T8567] netlink: zone id is out of range
[  213.046876][ T8605] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  213.292864][ T8616] netlink: 'syz.0.817': attribute type 39 has an invalid length.
[  214.271286][ T8654] netlink: 'syz.1.829': attribute type 1 has an invalid length.
[  214.315370][ T8658] netlink: 'syz.1.832': attribute type 15 has an invalid length.
[  214.622565][ T8684] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  214.625494][ T8684] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  214.627967][ T8684] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  214.630392][ T8684] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  214.677107][ T8681] syzkaller0: entered promiscuous mode
[  214.678880][ T8681] syzkaller0: entered allmulticast mode
[  215.569720][ T8697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.572746][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.623498][ T4630] wlan0: Trigger new scan to find an IBSS to join
[  215.669941][ T8706] __nla_validate_parse: 19 callbacks suppressed
[  215.669952][ T8706] netlink: 80 bytes leftover after parsing attributes in process `syz.1.848'.
[  215.685299][ T8706] netlink: 96 bytes leftover after parsing attributes in process `syz.1.848'.
[  215.697047][ T8707] netlink: 96 bytes leftover after parsing attributes in process `syz.1.848'.
[  215.747493][ T8711] syzkaller1: entered promiscuous mode
[  215.749666][ T8711] syzkaller1: entered allmulticast mode
[  216.124265][ T8736] syzkaller1: entered promiscuous mode
[  216.130576][ T8736] syzkaller1: entered allmulticast mode
[  216.280614][ T8730] netlink: 248 bytes leftover after parsing attributes in process `syz.0.856'.
[  216.405364][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'.
[  216.408159][ T8730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.856'.
[  216.429778][ T8752] netlink: 'syz.2.861': attribute type 10 has an invalid length.
[  216.496410][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'.
[  216.636732][ T8767] netlink: 56 bytes leftover after parsing attributes in process `syz.0.865'.
[  216.646575][ T8767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.650257][ T8767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.663508][ T8767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.671025][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'.
[  216.678889][ T8769] syz_tun: entered allmulticast mode
[  216.692002][ T8767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.696560][ T8767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.707010][ T8770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.709605][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.713598][ T8767] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.976843][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.863'.
[  217.085066][ T8788] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  217.128350][ T8793] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.181173][ T8793] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.240147][ T8793] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.291058][ T8793] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.366300][ T8793] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.377188][ T8793] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.387883][ T8793] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.397157][ T8793] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.671312][ T8818] netlink: 'syz.0.876': attribute type 13 has an invalid length.
[  217.909128][ T8854] netlink: 'syz.2.885': attribute type 4 has an invalid length.
[  218.082396][ T8870] geneve2: entered promiscuous mode
[  218.257077][ T8890] netlink: 'syz.2.896': attribute type 2 has an invalid length.
[  218.664212][ T6637] wlan0: Trigger new scan to find an IBSS to join
[  218.677030][ T8935] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003
[  218.680226][ T8936] netlink: 'syz.0.909': attribute type 1 has an invalid length.
[  218.686745][ T8931] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  218.798782][ T8946] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  218.864916][ T8952] netlink: 'syz.1.914': attribute type 1 has an invalid length.
[  218.871578][ T8947] 8021q: adding VLAN 0 to HW filter on device bond1
[  218.874732][ T8952] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  219.044697][ T8967] trusted_key: syz.0.917 sent an empty control message without MSG_MORE.
[  219.195052][ T8977] pimreg: entered allmulticast mode
[  219.198243][ T8978] xt_hashlimit: size too large, truncated to 1048576
[  219.201247][ T8978] xt_hashlimit: max too large, truncated to 1048576
[  219.205337][ T8977] pimreg: left allmulticast mode
[  219.508232][ T8994] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  219.547743][ T4630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.642267][ T9004] Driver unsupported XDP return value 0 on prog  (id 212) dev N/A, expect packet loss!
[  219.996341][ T9017] erspan0: entered promiscuous mode
[  219.999407][ T9017] erspan0: left promiscuous mode
[  220.905064][ T9043] __nla_validate_parse: 30 callbacks suppressed
[  220.905077][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'.
[  220.948061][ T9043] bridge5: the hash_elasticity option has been deprecated and is always 16
[  221.232598][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'.
[  221.385204][ T9047] net_ratelimit: 17 callbacks suppressed
[  221.385226][ T9047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.391055][ T9047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.599455][ T9084] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  221.712136][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'.
[  221.863043][ T9104] bridge_slave_0: left allmulticast mode
[  221.874619][ T9104] bridge_slave_0: left promiscuous mode
[  221.884105][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.933704][ T9104] bridge_slave_1: left allmulticast mode
[  221.936192][ T9104] bridge_slave_1: left promiscuous mode
[  221.938635][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.957463][ T9104] bond0: (slave bond_slave_0): Releasing backup interface
[  221.967802][ T9104] bond0: (slave bond_slave_1): Releasing backup interface
[  221.996238][ T9104] team0: Port device C removed
[  222.002886][ T9104] team0: Port device team_slave_1 removed
[  222.009313][ T9104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.011631][ T9104] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.021818][ T9104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.029217][ T9104] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.060964][ T9111] vlan0: entered promiscuous mode
[  222.089165][ T9111] team0: Port device vlan0 added
[  222.090733][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.239396][ T9124] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  222.254848][ T9123] sctp: [Deprecated]: syz.2.958 (pid 9123) Use of int in max_burst socket option deprecated.
[  222.254848][ T9123] Use struct sctp_assoc_value instead
[  222.329677][ T9130] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  222.381490][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.963'.
[  222.437477][ T9136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.964'.
[  222.585236][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.644131][ T9151] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  222.716341][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.971'.
[  222.722646][ T9153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.744138][ T9153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.769179][ T9153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.777623][ T9153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.788374][ T9152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.985302][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'.
[  222.998961][ T9169] netlink: 666 bytes leftover after parsing attributes in process `syz.0.974'.
[  223.286305][ T9187] bond0: option min_links: invalid value (18446744073709551604)
[  223.289171][ T9187] bond0: option min_links: allowed values 0 - 2147483647
[  223.366677][ T9189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.980'.
[  223.370984][ T9189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.980'.
[  224.668146][ T9236] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  224.671899][ T9236] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  225.750222][ T9283] tipc: Enabling of bearer <ib:caif0> rejected, already enabled
[  225.790043][ T9287] tc_dump_action: action bad kind
[  226.010518][ T9300] __nla_validate_parse: 8 callbacks suppressed
[  226.010536][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'.
[  226.084179][ T9302] xt_bpf: check failed: parse error
[  226.097853][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'.
[  226.101916][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'.
[  226.106200][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'.
[  226.110185][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'.
[  226.124948][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'.
[  226.132576][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'.
[  226.135735][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'.
[  226.138376][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'.
[  226.141197][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'.
[  226.374208][ T9319] sctp: [Deprecated]: syz.2.1024 (pid 9319) Use of int in maxseg socket option.
[  226.374208][ T9319] Use struct sctp_assoc_value instead
[  226.440287][ T9329] net_ratelimit: 4079 callbacks suppressed
[  226.440301][ T9329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.445521][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.460200][ T9331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.462898][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.649445][ T9334] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  226.681874][ T9347] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  226.687255][  T793] IPVS: starting estimator thread 0...
[  226.697630][ T9347] sctp: [Deprecated]: syz.1.1028 (pid 9347) Use of int in max_burst socket option.
[  226.697630][ T9347] Use struct sctp_assoc_value instead
[  226.774007][ T9350] IPVS: using max 62 ests per chain, 148800 per kthread
[  227.239794][ T9378] netlink: 'syz.0.1039': attribute type 8 has an invalid length.
[  227.608314][ T9398] netlink: 'syz.0.1046': attribute type 3 has an invalid length.
[  227.667995][ T9402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.671417][ T9402] syzkaller0: entered promiscuous mode
[  227.674295][ T9402] syzkaller0: entered allmulticast mode
[  227.695541][ T9403] tipc: Resetting bearer <eth:syzkaller0>
[  227.762952][ T9410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.766229][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.822280][ T9401] tipc: Resetting bearer <eth:syzkaller0>
[  227.860956][ T9401] tipc: Disabling bearer <eth:syzkaller0>
[  228.007616][ T9432] ieee802154 phy0 wpan0: encryption failed: -22
[  228.067560][ T9436] netlink: 'syz.0.1055': attribute type 2 has an invalid length.
[  228.129546][ T9434] syzkaller1: entered promiscuous mode
[  228.131351][ T9434] syzkaller1: entered allmulticast mode
[  228.198195][ T9447] openvswitch: netlink: Multiple metadata blocks provided
[  228.431378][ T9461] netlink: 'syz.1.1063': attribute type 3 has an invalid length.
[  228.720996][ T9477] 8021q: adding VLAN 0 to HW filter on device bond6
[  228.841126][ T9477] vlan0: entered promiscuous mode
[  229.623855][ T9491] netlink: 'syz.1.1070': attribute type 58 has an invalid length.
[  229.630071][ T9493] netlink: 'syz.1.1070': attribute type 58 has an invalid length.
[  229.822691][ T9503] netlink: 'syz.0.1073': attribute type 1 has an invalid length.
[  229.825099][ T9503] netlink: 'syz.0.1073': attribute type 1 has an invalid length.
[  230.083707][ T9510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.087482][ T9513] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 3328, id = 0
[  230.222637][ T9520] netlink: 'syz.0.1077': attribute type 1 has an invalid length.
[  230.227074][ T9520] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  230.323672][ T9530] 8021q: adding VLAN 0 to HW filter on device team1
[  230.453863][ T9537] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  230.456868][ T9537] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  230.504094][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.513153][ T9546] netlink: 'syz.2.1084': attribute type 10 has an invalid length.
[  230.518521][ T9546] batadv0: entered promiscuous mode
[  230.520117][ T9546] batadv0: entered allmulticast mode
[  230.522242][ T9546] bridge0: port 1(batadv0) entered blocking state
[  230.527814][ T9546] bridge0: port 1(batadv0) entered disabled state
[  230.665278][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  230.668872][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  231.068302][ T9578] __nla_validate_parse: 46 callbacks suppressed
[  231.068317][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  231.238093][ T9582] SET target dimension over the limit!
[  231.712018][ T9600] bridge0: port 1(batadv0) entered disabled state
[  231.765466][ T9600] bond4: (slave gretap1): Releasing active interface
[  231.784976][ T4630] net_ratelimit: 2 callbacks suppressed
[  231.784992][ T4630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.790601][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.805836][ T9600] bond5: (slave gretap2): Releasing active interface
[  231.832905][ T9604] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.846342][ T9604] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  231.917014][ T9607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1103'.
[  232.212468][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[  232.410358][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'.
[  232.467069][ T9621] bond7: (slave vcan0): The slave device specified does not support setting the MAC address
[  232.472126][ T9621] bond7: (slave vcan0): Error -95 calling set_mac_address
[  232.500402][ T9630] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1112'.
[  232.641829][   T33] audit: type=1107 audit(1752100106.478:5): pid=9634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='7_]MLԪ`(]]vGv6Qqk'
[  232.642445][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'.
[  232.679947][ T9640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1116'.
[  232.683119][ T9640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1116'.
[  232.697616][ T9640] team0: entered promiscuous mode
[  232.700783][ T9640] bond0: entered promiscuous mode
[  232.709088][ T9640] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  232.714897][ T9640] 8021q: adding VLAN 0 to HW filter on device hsr1
[  232.768515][ T9646] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1118'.
[  232.774511][ T9646] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  232.779068][ T9646] openvswitch: netlink: Message has 1 unknown bytes.
[  232.839719][ T9651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'.
[  232.867056][ T9648] bond2: left allmulticast mode
[  232.869248][ T9648] bond2: left promiscuous mode
[  232.871253][ T9648] bridge0: port 1(bond2) entered disabled state
[  233.077037][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.133812][ T9667] validate_nla: 2 callbacks suppressed
[  233.133822][ T9667] netlink: 'syz.1.1125': attribute type 58 has an invalid length.
[  233.637135][ T9690] netlink: 'syz.0.1134': attribute type 32 has an invalid length.
[  234.171482][ T9726] netlink: 'syz.1.1147': attribute type 4 has an invalid length.
[  234.187819][ T9728] IPVS: length: 33 != 8
[  234.236845][ T9737] sctp: [Deprecated]: syz.2.1150 (pid 9737) Use of int in max_burst socket option.
[  234.236845][ T9737] Use struct sctp_assoc_value instead
[  234.300244][ T9739] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  234.393799][ T9745] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  234.396922][ T9745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  235.197392][ T9794] xt_hashlimit: size too large, truncated to 1048576
[  235.735862][ T9825] IPv6: sit3: Disabled Multicast RS
[  235.946475][ T9839] syzkaller1: entered promiscuous mode
[  235.949889][ T9839] syzkaller1: entered allmulticast mode
[  236.148546][ T9859] __nla_validate_parse: 26 callbacks suppressed
[  236.148561][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'.
[  236.258410][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'.
[  236.275813][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.278780][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.299432][ T9870] bond8: (slave vcan0): The slave device specified does not support setting the MAC address
[  236.306858][ T9870] bond8: (slave vcan0): Error -95 calling set_mac_address
[  236.512675][ T9884] --map-set only usable from mangle table
[  236.520048][ T9880] xt_CT: No such helper "pptp"
[  237.209560][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'.
[  237.257660][ T9912] netlink: 'syz.2.1205': attribute type 1 has an invalid length.
[  237.260404][ T9912] netlink: 'syz.2.1205': attribute type 2 has an invalid length.
[  237.272669][ T9912] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1205'.
[  237.429631][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1208'.
[  237.439181][ T9927] netlink: 'syz.0.1210': attribute type 2 has an invalid length.
[  237.442554][ T9925] netlink: 'syz.1.1208': attribute type 7 has an invalid length.
[  237.447747][ T9925] netlink: 'syz.1.1208': attribute type 8 has an invalid length.
[  237.452234][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'.
[  237.457585][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'.
[  237.520923][ T9934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1211'.
[  237.545394][   T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.548243][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.611363][ T9938] netlink: 'syz.2.1213': attribute type 29 has an invalid length.
[  237.628515][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1215'.
[  237.632834][ T9938] netlink: 'syz.2.1213': attribute type 29 has an invalid length.
[  237.640367][ T9938] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1213'.
[  237.911604][ T9970] ip6t_srh: unknown srh invflags 4000
[  238.161528][ T9995] xt_TPROXY: Can be used only with -p tcp or -p udp
[  238.199189][ T9989] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  238.378024][T10009] netlink: 'syz.2.1238': attribute type 4 has an invalid length.
[  238.381769][T10009] netlink: 'syz.2.1238': attribute type 4 has an invalid length.
[  238.685986][T10022] tipc: Resetting bearer <eth:team0>
[  238.925361][T10022] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.928634][T10022] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.931894][T10022] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.935662][T10022] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.982105][T10021] @: renamed from veth0_vlan
[  239.151106][T10039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.160907][T10039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.164727][T10039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.168088][T10039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.256411][T10050] netlink: 'syz.2.1251': attribute type 21 has an invalid length.
[  239.258107][T10053] macsec2: entered promiscuous mode
[  239.261382][T10053] gretap0: entered promiscuous mode
[  239.263915][T10053] macsec2: entered allmulticast mode
[  239.266046][T10053] gretap0: entered allmulticast mode
[  239.277866][T10052] netlink: 'syz.1.1253': attribute type 11 has an invalid length.
[  239.286242][T10050] netlink: 'syz.2.1251': attribute type 6 has an invalid length.
[  239.438079][T10063] mac80211_hwsim hwsim5 ": renamed from wlan0 (while UP)
[  239.741703][T10084] netlink: 'syz.2.1262': attribute type 1 has an invalid length.
[  240.796014][T10084] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  241.105630][T10109] 8021q: VLANs not supported on wg0
[  241.123505][T10106] vlan2: entered promiscuous mode
[  241.125143][T10106] bridge0: entered promiscuous mode
[  241.126997][T10106] vlan2: entered allmulticast mode
[  241.128808][T10106] bridge0: entered allmulticast mode
[  241.163555][T10113] __nla_validate_parse: 11 callbacks suppressed
[  241.163572][T10113] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1272'.
[  241.174072][T10113] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1272'.
[  241.303827][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'.
[  241.328105][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'.
[  241.451910][T10138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1279'.
[  241.456521][T10138] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1279'.
[  241.499592][T10140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1280'.
[  241.520798][T10140] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1280'.
[  241.670706][T10149] batman_adv: batadv0: Adding interface: dummy0
[  241.675229][T10149] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.689391][T10149] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  241.777067][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'.
[  241.780692][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'.
[  242.094326][T10171] ieee802154 phy0 wpan0: encryption failed: -22
[  242.190086][T10174] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  242.192847][T10173] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  242.325608][T10192] netlink: 'syz.0.1293': attribute type 4 has an invalid length.
[  242.325622][T10191] netlink: 'syz.0.1293': attribute type 4 has an invalid length.
[  242.358505][T10197] netlink: 'syz.1.1295': attribute type 7 has an invalid length.
[  242.362485][T10191] bridge0: port 1(gretap0) entered blocking state
[  242.365013][T10191] bridge0: port 1(gretap0) entered disabled state
[  242.371976][T10197] batadv_slave_1: entered promiscuous mode
[  242.475295][T10197] batadv_slave_1: left promiscuous mode
[  242.512335][T10212] netlink: 'syz.0.1298': attribute type 6 has an invalid length.
[  243.696128][T10253] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  243.887841][T10269] netlink: 'syz.2.1316': attribute type 5 has an invalid length.
[  244.078510][T10284] xt_CT: You must specify a L4 protocol and not use inversions on it
[  244.184427][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  244.415762][T10302] netlink: 'syz.2.1326': attribute type 39 has an invalid length.
[  244.419580][T10302] veth0_macvtap: left promiscuous mode
[  244.645602][T10314] veth0_to_bridge: entered promiscuous mode
[  244.649781][T10313] veth0_to_bridge: left promiscuous mode
[  244.867177][T10322] macsec0: entered promiscuous mode
[  244.869342][T10322] macvlan1: entered promiscuous mode
[  244.877606][T10322] macvlan1: left promiscuous mode
[  244.910111][T10326] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  245.825156][T10391] netlink: 'syz.0.1356': attribute type 2 has an invalid length.
[  245.867532][T10394] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  245.966007][T10398] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  245.969149][T10398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.098943][T10404] netlink: 'syz.0.1361': attribute type 83 has an invalid length.
[  246.263611][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  246.802722][T10431] __nla_validate_parse: 19 callbacks suppressed
[  246.802734][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  246.807784][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  246.810536][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  246.813572][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  246.816421][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  246.819411][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  246.822822][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  246.830620][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  246.836814][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  246.839645][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1365'.
[  247.016451][T10448] syzkaller1: entered promiscuous mode
[  247.018679][T10448] syzkaller1: entered allmulticast mode
[  247.113062][T10461] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  247.174427][T10465] batman_adv: batadv0: Removing interface: dummy0
[  247.194127][T10465] bond0: (slave wlan1): Releasing backup interface
[  247.260383][T10467] xt_CT: No such helper "syz0"
[  247.277659][T10465] netlink: 'syz.2.1372': attribute type 10 has an invalid length.
[  247.280186][T10465] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  247.284475][T10465] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  247.298850][T10465] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  247.302825][T10465] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  247.458225][T10488] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20001
[  247.797006][T10509] netlink: 'syz.0.1385': attribute type 10 has an invalid length.
[  247.815011][T10509] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.817449][T10509] team0: Device bond0 failed to register rx_handler
[  247.897635][T10513] xt_socket: unknown flags 0x8
[  247.926939][T10513] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  248.214580][T10536] netlink: 'syz.0.1395': attribute type 1 has an invalid length.
[  248.286358][T10536] 8021q: adding VLAN 0 to HW filter on device bond2
[  248.384250][T10540] xt_l2tp: v2 tid > 0xffff: 4294967295
[  248.468642][T10564] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  248.485955][T10564] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  248.592318][T10573] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  248.596756][T10573] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  248.658878][T10576] xt_hashlimit: size too large, truncated to 1048576
[  248.896114][T10582] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  248.925068][T10582] veth0: entered promiscuous mode
[  248.948883][T10582] veth0 (unregistering): left promiscuous mode
[  249.087477][T10599] netlink: 'syz.1.1411': attribute type 21 has an invalid length.
[  249.089834][T10599] netlink: 'syz.1.1411': attribute type 4 has an invalid length.
[  249.092097][T10599] netlink: 'syz.1.1411': attribute type 3 has an invalid length.
[  249.117465][T10599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.124526][T10597] tipc: Disabling bearer <eth:syzkaller0>
[  249.192746][T10608] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  249.199500][T10608] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  249.937053][T10665] netlink: 'syz.0.1435': attribute type 58 has an invalid length.
[  249.961784][T10667] netlink: 'syz.1.1436': attribute type 39 has an invalid length.
[  249.966536][T10667] tipc: Invalid UDP bearer configuration
[  249.966563][T10667] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  250.042213][T10674] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000
[  250.091447][T10679] syzkaller0: entered promiscuous mode
[  250.093364][T10679] syzkaller0: entered allmulticast mode
[  250.202408][T10687] xt_l2tp: v2 sid > 0xffff: 4294901760
[  250.289776][T10691] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  250.297128][T10691] netlink: 'syz.2.1445': attribute type 4 has an invalid length.
[  250.690169][T10730] netlink: 'syz.2.1455': attribute type 1 has an invalid length.
[  251.282482][T10755] infiniband syz0: set down
[  251.288722][T10755] infiniband syz0: added ipvlan1
[  251.304703][T10767] netlink: 'syz.2.1465': attribute type 21 has an invalid length.
[  251.308083][T10767] netlink: 'syz.2.1465': attribute type 5 has an invalid length.
[  251.311343][T10767] netlink: 'syz.2.1465': attribute type 6 has an invalid length.
[  251.327411][T10767] ipt_ECN: cannot use operation on non-tcp rule
[  251.350906][T10755] RDS/IB: syz0: added
[  251.353352][T10755] smc: adding ib device syz0 with port count 1
[  251.355947][T10755] smc:    ib device syz0 port 1 has pnetid 
[  251.471381][T10774] syzkaller0: entered promiscuous mode
[  251.473736][T10774] syzkaller0: entered allmulticast mode
[  251.624874][ T4496] ": No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  251.971314][T10798] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  252.104282][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.145385][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.330882][T10811] tc_dump_action: action bad kind
[  252.462579][T10816] __nla_validate_parse: 53 callbacks suppressed
[  252.462597][T10816] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1481'.
[  252.554888][T10819] : entered promiscuous mode
[  252.601900][T10819] ip6gre1: entered allmulticast mode
[  252.885223][T10829] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1485'.
[  253.022682][T10843] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1491'.
[  253.219964][T10865] : entered promiscuous mode
[  253.356705][T10878] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  253.361241][T10878] syzkaller0: entered promiscuous mode
[  253.362941][T10878] syzkaller0: entered allmulticast mode
[  253.379133][T10879] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  253.421659][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'.
[  253.474818][T10882] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1504'.
[  253.581496][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'.
[  253.739215][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'.
[  253.742986][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'.
[  253.762944][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1510'.
[  253.772972][T10906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1510'.
[  253.972804][T10925] openvswitch: netlink: Flow key attribute not present in set flow.
[  254.204073][T10939] syzkaller1: entered promiscuous mode
[  254.206511][T10939] syzkaller1: entered allmulticast mode
[  254.311599][ T5872] hid-generic 0005:07C0:0007.0002: collection stack underflow
[  254.315207][ T5872] hid-generic 0005:07C0:0007.0002: item 0 0 0 12 parsing failed
[  254.318720][ T5872] hid-generic 0005:07C0:0007.0002: probe with driver hid-generic failed with error -22
[  254.547900][T10964] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.659316][T10964] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.712021][T10964] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.798689][T10964] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.900156][T10991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.926816][T10964] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.946581][T10964] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.966304][T10964] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.990184][T10964] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.008047][T10966] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.046322][T10998] validate_nla: 7 callbacks suppressed
[  255.046343][T10998] netlink: 'syz.1.1540': attribute type 1 has an invalid length.
[  255.057727][T10966] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.111175][T10966] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.158817][T10966] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.340298][T11011] netlink: 'syz.1.1544': attribute type 1 has an invalid length.
[  255.392918][T11013] atomic_op ffff8880343f4198 conn xmit_atomic 0000000000000000
[  255.466671][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.488571][T11017] netlink: 'syz.1.1547': attribute type 12 has an invalid length.
[  256.250870][T10966] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.262517][T10966] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.272805][T10966] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.284723][T10966] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.391195][T11076] xt_CT: You must specify a L4 protocol and not use inversions on it
[  256.492133][T11086] netlink: 'syz.0.1568': attribute type 11 has an invalid length.
[  256.703778][T11100] netlink: 'syz.0.1573': attribute type 7 has an invalid length.
[  256.908094][T11113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.192273][T11132] ieee802154 phy0 wpan0: encryption failed: -22
[  257.260818][T11135] syzkaller1: entered promiscuous mode
[  257.262791][T11135] syzkaller1: entered allmulticast mode
[  257.352298][T11140] netlink: 'syz.0.1584': attribute type 10 has an invalid length.
[  257.358006][T11140] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  257.363162][T11140] bond0: (slave wlan1): refused to change device type
[  257.541742][T11149] netlink: 'syz.2.1589': attribute type 4 has an invalid length.
[  257.604940][T11159] __nla_validate_parse: 17 callbacks suppressed
[  257.604951][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'.
[  257.635138][T11160] netlink: 'syz.0.1591': attribute type 11 has an invalid length.
[  257.858089][T11178] batman_adv: batadv0: Adding interface: ipvlan2
[  257.862382][T11178] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.876116][T11178] batman_adv: batadv0: Interface activated: ipvlan2
[  257.890611][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88802f123800: rx timeout, send abort
[  258.080922][T11192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1602'.
[  258.280070][T11204] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1606'.
[  258.390669][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888112730000: rx timeout, send abort
[  258.394024][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88802f123800: abort rx timeout. Force session deactivation
[  258.511214][T11214] netlink: 'syz.2.1609': attribute type 12 has an invalid length.
[  258.518962][T11214] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1609'.
[  258.617176][T11222] netlink: 'syz.1.1611': attribute type 4 has an invalid length.
[  258.620030][T11222] netlink: 'syz.1.1611': attribute type 4 has an invalid length.
[  258.878874][T11237] IPv6: sit1: Disabled Multicast RS
[  258.881858][T11237] sit1: entered allmulticast mode
[  258.893374][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888112730000: abort rx timeout. Force session deactivation
[  259.045704][T11242] netlink: 'syz.1.1616': attribute type 1 has an invalid length.
[  259.585437][T11261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1624'.
[  259.585437][T11262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1624'.
[  259.668767][T11265] bpq0: left promiscuous mode
[  259.670635][T11265] bpq0: left allmulticast mode
[  259.839867][T11273] team0: Port device vlan0 removed
[  259.843017][T11273] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  260.055271][T11287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1632'.
[  260.114776][T11287] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  260.129996][T11287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1632'.
[  260.266297][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1635'.
[  260.271623][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'.
[  260.466020][T11300] validate_nla: 2 callbacks suppressed
[  260.466035][T11300] netlink: 'syz.0.1637': attribute type 1 has an invalid length.
[  260.484950][T11300] 8021q: adding VLAN 0 to HW filter on device bond3
[  260.499402][T11300] veth1: entered promiscuous mode
[  260.505878][T11300] bond3: (slave veth1): Enslaving as an active interface with a down link
[  260.511272][T11300] erspan0: entered allmulticast mode
[  260.517567][T11300] bond3: (slave erspan0): making interface the new active one
[  260.523797][T11300] erspan0: entered promiscuous mode
[  260.525695][T11300] bond3: (slave erspan0): Enslaving as an active interface with an up link
[  260.826354][T11321] xt_bpf: check failed: parse error
[  261.304580][T11326] !: entered promiscuous mode
[  261.307987][T11326] macsec0: entered allmulticast mode
[  261.309856][T11326] !: entered allmulticast mode
[  261.316923][T11326] !: left allmulticast mode
[  261.318564][T11326] !: left promiscuous mode
[  261.424431][T11328] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  261.529920][T11328] 8021q: adding VLAN 0 to HW filter on device bond9
[  261.537946][T11328] bond0: (slave bond9): Enslaving as an active interface with an up link
[  261.755618][T11363] netlink: zone id is out of range
[  261.758449][T11363] netlink: zone id is out of range
[  261.760945][T11363] netlink: zone id is out of range
[  261.763052][T11363] netlink: zone id is out of range
[  261.765410][T11363] netlink: zone id is out of range
[  261.766975][T11363] netlink: zone id is out of range
[  261.768552][T11363] netlink: zone id is out of range
[  261.770790][T11363] netlink: zone id is out of range
[  261.831434][T11374] netlink: 'syz.1.1661': attribute type 1 has an invalid length.
[  262.001769][T11391] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.106198][T11393] netlink: 'syz.2.1667': attribute type 9 has an invalid length.
[  262.127478][T11407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  262.327281][T11437] netlink: 'syz.2.1675': attribute type 1 has an invalid length.
[  262.359935][T11437] 8021q: adding VLAN 0 to HW filter on device bond7
[  262.642877][T11470] atomic_op ffff888030184198 conn xmit_atomic 0000000000000000
[  262.686218][T11474] __nla_validate_parse: 13 callbacks suppressed
[  262.686238][T11474] netlink: 9720 bytes leftover after parsing attributes in process `syz.2.1688'.
[  262.748344][T11482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1690'.
[  262.848240][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1694'.
[  262.941573][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'.
[  262.945502][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1695'.
[  263.411679][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'.
[  263.756987][T11539] dvmrp8: entered allmulticast mode
[  263.766978][T11533] dvmrp8: left allmulticast mode
[  263.906996][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'.
[  263.916130][T11553] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1711'.
[  263.919026][T11553] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1711'.
[  263.921689][T11553] netlink: 'syz.0.1711': attribute type 6 has an invalid length.
[  263.924564][T11553] netlink: 'syz.0.1711': attribute type 5 has an invalid length.
[  263.929511][T11553] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1711'.
[  263.944116][T11553] netlink: 'syz.0.1711': attribute type 2 has an invalid length.
[  264.044940][T11566] netlink: 'syz.0.1717': attribute type 83 has an invalid length.
[  264.238065][T11579] netlink: 'syz.0.1722': attribute type 21 has an invalid length.
[  264.459871][T11598] netlink: 'syz.1.1726': attribute type 1 has an invalid length.
[  264.698851][T11614] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  264.711375][T11614] bond0 (unregistering): (slave bond9): Releasing backup interface
[  264.716908][T11614] bond0 (unregistering): Released all slaves
[  264.884013][T11631] veth13: entered promiscuous mode
[  264.934418][T11636] erspan0: entered allmulticast mode
[  264.987832][T11647] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  264.997751][T11641] net_ratelimit: 4055 callbacks suppressed
[  264.997760][T11641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.131647][T11754] batman_adv: batadv0: Adding interface: ip6gretap1
[  266.133827][T11754] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.142539][T11754] batman_adv: batadv0: Interface activated: ip6gretap1
[  266.304778][T11764] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  266.456050][T11782] validate_nla: 4 callbacks suppressed
[  266.456061][T11782] netlink: 'syz.0.1789': attribute type 1 has an invalid length.
[  266.517930][T11782] bond5: (slave gretap2): making interface the new active one
[  266.520694][T11782] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  266.584032][T11788] openvswitch: netlink: Message has 4 unknown bytes.
[  266.737444][T11803] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  266.750285][T11803] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  266.806947][T11811] netlink: 'syz.2.1799': attribute type 1 has an invalid length.
[  266.994449][T11828] netlink: 'syz.2.1806': attribute type 4 has an invalid length.
[  267.044804][T11831] netlink: 'syz.2.1807': attribute type 2 has an invalid length.
[  267.285050][T11855] netlink: 'syz.0.1815': attribute type 21 has an invalid length.
[  267.287451][T11855] netlink: 'syz.0.1815': attribute type 4 has an invalid length.
[  267.289735][T11855] netlink: 'syz.0.1815': attribute type 3 has an invalid length.
[  267.356479][T11864] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  267.358945][T11862] netlink: 'syz.2.1817': attribute type 1 has an invalid length.
[  267.611739][T11875] netlink: 'syz.1.1823': attribute type 8 has an invalid length.
[  267.758269][T11888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.807985][T11893] __nla_validate_parse: 34 callbacks suppressed
[  267.807998][T11893] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1828'.
[  267.946808][T11904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1831'.
[  268.053155][T11911] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.072449][T11911] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.075022][T11911] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  268.078873][T11911] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  268.117869][T11914] macvlan3: entered promiscuous mode
[  268.119610][T11914] macvlan3: entered allmulticast mode
[  268.121698][T11914] bond0: entered promiscuous mode
[  268.124234][T11914] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  268.128812][T11914] bond0: left promiscuous mode
[  268.384719][T11925] wireguard0: entered promiscuous mode
[  268.386473][T11925] wireguard0: entered allmulticast mode
[  268.657307][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'.
[  268.990783][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1848'.
[  269.152291][T11987] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1853'.
[  269.157157][T11987] No such timeout policy "syz0"
[  269.279161][T12005] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1859'.
[  269.352803][T12013] x_tables: duplicate underflow at hook 2
[  269.355984][T12013] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  270.107805][T12046] sctp: [Deprecated]: syz.1.1874 (pid 12046) Use of struct sctp_assoc_value in delayed_ack socket option.
[  270.107805][T12046] Use struct sctp_sack_info instead
[  270.199785][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1877'.
[  270.215414][T12057] batman_adv: batadv0: Interface deactivated: ipvlan2
[  270.217546][T12057] batman_adv: batadv0: Removing interface: ipvlan2
[  270.344423][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1881'.
[  270.410842][T12076] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1883'.
[  270.418898][T12077] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  270.496683][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'.
[  270.739427][T12103] delete_channel: no stack
[  270.893454][T12117] xt_CT: No such helper "snmp"
[  270.937872][T12123] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.992003][T12124] 8021q: adding VLAN 0 to HW filter on device batadv1
[  270.995733][T12124] batadv1: entered promiscuous mode
[  270.998114][T12124] team0: Port device batadv1 added
[  271.002305][T12123] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.037317][T12123] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.087177][T12123] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.138859][T12123] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.148170][T12123] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.157665][T12123] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.166467][T12123] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.247907][T12130] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  271.252288][T12130] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  271.256561][T12130] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  271.270530][T12130] batman_adv: batadv0: Adding interface: team0
[  271.272440][T12130] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  271.283358][T12130] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  271.294227][T12130] 8021q: adding VLAN 0 to HW filter on device team0
[  271.296292][T12130] batman_adv: batadv0: Interface activated: team0
[  271.298224][T12130] batman_adv: batadv0: Interface deactivated: team0
[  271.300161][T12130] batman_adv: batadv0: Removing interface: team0
[  271.304238][T12130] bridge0: port 1(team0) entered blocking state
[  271.306497][T12130] bridge0: port 1(team0) entered disabled state
[  271.308414][T12130] team0: entered allmulticast mode
[  271.310105][T12130] batadv1: entered allmulticast mode
[  271.312850][T12130] team0: left allmulticast mode
[  271.314767][T12130] batadv1: left allmulticast mode
[  271.346794][T12136] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  271.352578][T12138] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  271.477950][T12151] validate_nla: 10 callbacks suppressed
[  271.477961][T12151] netlink: 'syz.0.1905': attribute type 29 has an invalid length.
[  271.559452][T12166] x_tables: duplicate underflow at hook 1
[  271.561476][T12166] netlink: 'syz.0.1910': attribute type 1 has an invalid length.
[  271.569173][T12166] netlink: 'syz.0.1910': attribute type 1 has an invalid length.
[  271.613786][T11943] erspan0: left promiscuous mode
[  271.643688][T12177] netlink: 'syz.0.1912': attribute type 11 has an invalid length.
[  272.081138][T12207] netlink: 'syz.2.1923': attribute type 12 has an invalid length.
[  272.600231][T12211] pim6reg8: entered allmulticast mode
[  272.828726][T12224] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  272.834086][T12226] Timeout policy `syz1' can only be used by L3 protocol number 35085
[  272.870474][T12230] __nla_validate_parse: 9 callbacks suppressed
[  272.870484][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'.
[  272.883366][T12230] netlink: 'syz.0.1934': attribute type 1 has an invalid length.
[  272.912953][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'.
[  272.913365][T12232] netlink: 'syz.1.1935': attribute type 10 has an invalid length.
[  272.915850][T12234] 8021q: VLANs not supported on vcan0
[  273.127948][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1942'.
[  273.131082][T12255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1942'.
[  273.176022][T12261] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1945'.
[  273.267029][T12265] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  273.417693][T12291] netlink: 'syz.0.1952': attribute type 11 has an invalid length.
[  274.387759][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1973'.
[  274.509060][T12373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1976'.
[  274.512106][T12374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.570734][T12378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  274.612143][T12380] sit1: entered promiscuous mode
[  274.643090][T12381] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1977'.
[  274.756098][T12395] netlink: 'syz.2.1983': attribute type 1 has an invalid length.
[  274.762664][T12395] gtp1: entered promiscuous mode
[  274.765975][T12395] gtp1: entered allmulticast mode
[  274.801911][T12397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1986'.
[  274.881918][T12403] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004
[  274.995201][T12397] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.997877][T12397] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.000599][T12397] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.003785][T12397] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.286076][T12427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1992'.
[  275.380113][T12435] netlink: 'syz.1.1994': attribute type 29 has an invalid length.
[  276.402027][T12470] "syz.0.2003" (12470) uses obsolete ecb(arc4) skcipher
[  276.570817][T12494] netlink: 'syz.0.2008': attribute type 3 has an invalid length.
[  276.574772][T12495] netlink: 'syz.0.2008': attribute type 3 has an invalid length.
[  277.566799][T12516] delete_channel: no stack
[  277.609974][T12518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  277.865983][T12538] bond9: (slave vcan1): The slave device specified does not support setting the MAC address
[  277.871318][T12546] netlink: 'syz.1.2028': attribute type 1 has an invalid length.
[  277.875457][T12538] bond9: (slave vcan1): Error -95 calling set_mac_address
[  277.901649][T12546] bond10: (slave gretap2): making interface the new active one
[  277.904776][T12546] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  277.908692][T12546] __nla_validate_parse: 11 callbacks suppressed
[  277.908703][T12546] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2028'.
[  277.921909][T12548] netlink: 'syz.0.2027': attribute type 1 has an invalid length.
[  277.966488][T12554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'.
[  277.969561][T12554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'.
[  277.972595][T12554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'.
[  277.978135][T12554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'.
[  277.980977][T12554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'.
[  277.985433][T12554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'.
[  277.988961][T12554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'.
[  277.991916][T12554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'.
[  277.997397][T12554] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'.
[  278.039325][T12563] xt_CT: You must specify a L4 protocol and not use inversions on it
[  278.150065][T12572] 8021q: VLANs not supported on bond0
[  278.335201][T12580] 8021q: VLANs not supported on caif0
[  278.530421][T12587] erspan0: left allmulticast mode
[  278.544037][T12587] 8021q: adding VLAN 0 to HW filter on device team0
[  278.552957][T12587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  278.745706][T12589] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  279.073478][T12621] ieee802154 phy0 wpan0: encryption failed: -22
[  279.241604][T12639] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20007
[  279.364664][T12646] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  279.636273][T12681] netlink: 'syz.2.2066': attribute type 10 has an invalid length.
[  279.638801][T12681] dummy0: entered promiscuous mode
[  279.642832][T12681] bridge0: port 1(dummy0) entered blocking state
[  279.645234][T12681] bridge0: port 1(dummy0) entered disabled state
[  279.647442][T12681] dummy0: entered allmulticast mode
[  279.651038][T12681] bridge0: port 1(dummy0) entered blocking state
[  279.653132][T12681] bridge0: port 1(dummy0) entered listening state
[  279.810489][T12692] netlink: 'syz.1.2070': attribute type 4 has an invalid length.
[  279.818110][T12692] netlink: 'syz.1.2070': attribute type 4 has an invalid length.
[  279.868471][T12699] sctp: [Deprecated]: syz.1.2072 (pid 12699) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.868471][T12699] Use struct sctp_sack_info instead
[  279.882302][T12699] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  280.082003][T12708] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  280.093405][   T33] audit: type=1804 audit(1752100153.928:6): pid=12708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2076" name="/newroot/724/cgroup.controllers" dev="tmpfs" ino=3709 res=1 errno=0
[  280.103058][   T33] audit: type=1800 audit(1752100153.928:7): pid=12708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2076" name="cgroup.controllers" dev="tmpfs" ino=3709 res=0 errno=0
[  280.168596][T12710] netlink: 'syz.2.2078': attribute type 3 has an invalid length.
[  280.424371][T12742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  280.557739][T12762] ieee802154 phy0 wpan0: encryption failed: -22
[  280.728794][T12776] vlan0: left promiscuous mode
[  280.730946][T12776] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  280.733350][T12776] vti0: left promiscuous mode
[  280.735353][T12776] gretap1: left promiscuous mode
[  280.737399][T12776] gretap1: left allmulticast mode
[  280.739658][T12776] wireguard0: left promiscuous mode
[  280.741726][T12776] wireguard0: left allmulticast mode
[  280.762539][T12776] gtp0: left promiscuous mode
[  280.766817][T12776] ip6gre1: left allmulticast mode
[  280.769682][T12776] sit1: left promiscuous mode
[  280.938860][T12793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  281.024499][T12788] netlink: 'syz.2.2104': attribute type 11 has an invalid length.
[  281.511162][T12811] netlink: 'syz.1.2109': attribute type 1 has an invalid length.
[  281.516449][T12811] netlink: 'syz.1.2109': attribute type 1 has an invalid length.
[  281.697046][T12825] validate_nla: 1 callbacks suppressed
[  281.697061][T12825] netlink: 'syz.0.2111': attribute type 12 has an invalid length.
[  281.846209][T12837] sctp: [Deprecated]: syz.0.2115 (pid 12837) Use of struct sctp_assoc_value in delayed_ack socket option.
[  281.846209][T12837] Use struct sctp_sack_info instead
[  282.229419][T12876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  282.986288][ T1149] ": No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  283.184680][T12926] x_tables: duplicate underflow at hook 2
[  283.245973][T12932] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  283.300678][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  283.304529][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  283.307283][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  283.310483][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  283.315747][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  283.317339][T12942] gretap4: entered promiscuous mode
[  283.319837][T12942] gretap4: entered allmulticast mode
[  283.476589][T12951] sctp: [Deprecated]: syz.2.2147 (pid 12951) Use of int in max_burst socket option.
[  283.476589][T12951] Use struct sctp_assoc_value instead
[  283.584180][T12938] chnl_net:caif_netlink_parms(): no params data found
[  283.640696][T12961] __nla_validate_parse: 78 callbacks suppressed
[  283.640712][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'.
[  283.662978][T12938] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.665463][T12938] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.667897][T12938] bridge_slave_0: entered allmulticast mode
[  283.670690][T12938] bridge_slave_0: entered promiscuous mode
[  283.677189][T12938] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.679564][T12938] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.681889][T12938] bridge_slave_1: entered allmulticast mode
[  283.685617][T12938] bridge_slave_1: entered promiscuous mode
[  283.688247][T12964] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  283.715996][T12938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.720916][T12938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.755623][T12938] team0: Port device team_slave_0 added
[  283.759685][T12938] team0: Port device team_slave_1 added
[  283.780216][T12938] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.782409][T12938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.791186][T12938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.796758][T12938] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.798947][T12938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.809337][T12938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.842300][T12938] hsr_slave_0: entered promiscuous mode
[  283.844875][T12938] hsr_slave_1: entered promiscuous mode
[  283.847092][T12938] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  283.850344][T12938] Cannot create hsr debugfs directory
[  284.063769][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'.
[  284.066413][T12986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2158'.
[  284.194962][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2161'.
[  284.262109][T12999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2162'.
[  284.276813][T12938] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  284.286864][T12938] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  284.295593][T12938] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  284.302131][T12938] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  284.316082][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'.
[  284.344006][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2165'.
[  284.387136][T12938] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.407057][T12938] 8021q: adding VLAN 0 to HW filter on device team0
[  284.415281][ T6651] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.417720][ T6651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.429211][T13018] veth0_to_bond: entered allmulticast mode
[  284.432732][T13017] syz.0.2166: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  284.439373][T13017] CPU: 1 UID: 0 PID: 13017 Comm: syz.0.2166 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  284.439386][T13017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.439398][T13017] Call Trace:
[  284.439402][T13017]  <TASK>
[  284.439406][T13017]  dump_stack_lvl+0x189/0x250
[  284.439423][T13017]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.439433][T13017]  ? __pfx__printk+0x10/0x10
[  284.439446][T13017]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  284.439458][T13017]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  284.439469][T13017]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  284.439480][T13017]  warn_alloc+0x214/0x310
[  284.439495][T13017]  ? __pfx_warn_alloc+0x10/0x10
[  284.439509][T13017]  ? __get_vm_area_node+0x28f/0x300
[  284.439520][T13017]  ? xskq_create+0xbf/0x170
[  284.439529][T13017]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  284.439552][T13017]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  284.439565][T13017]  ? __kasan_kmalloc+0x93/0xb0
[  284.439577][T13017]  vmalloc_user_noprof+0xad/0xf0
[  284.439587][T13017]  ? xskq_create+0xbf/0x170
[  284.439594][T13017]  xskq_create+0xbf/0x170
[  284.439602][T13017]  xsk_init_queue+0xb0/0x110
[  284.439615][T13017]  xsk_setsockopt+0x4de/0x710
[  284.439626][T13017]  ? __pfx_xsk_setsockopt+0x10/0x10
[  284.439640][T13017]  ? aa_sock_opt_perm+0x74/0x110
[  284.439653][T13017]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  284.439660][T13017]  ? __pfx_xsk_setsockopt+0x10/0x10
[  284.439671][T13017]  do_sock_setsockopt+0x25a/0x3e0
[  284.439683][T13017]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  284.439695][T13017]  ? __fget_files+0x2a/0x420
[  284.439710][T13017]  __x64_sys_setsockopt+0x18b/0x220
[  284.439722][T13017]  do_syscall_64+0xfa/0x3b0
[  284.439731][T13017]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.439739][T13017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.439747][T13017]  ? exc_page_fault+0x9f/0xf0
[  284.439760][T13017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.439767][T13017] RIP: 0033:0x7f8778f8e929
[  284.439776][T13017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.439784][T13017] RSP: 002b:00007f8776dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  284.439793][T13017] RAX: ffffffffffffffda RBX: 00007f87791b6080 RCX: 00007f8778f8e929
[  284.439799][T13017] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  284.439804][T13017] RBP: 00007f8779010b39 R08: 0000000000000004 R09: 0000000000000000
[  284.439808][T13017] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  284.439829][T13017] R13: 0000000000000001 R14: 00007f87791b6080 R15: 00007ffe594ae0d8
[  284.439842][T13017]  </TASK>
[  284.440284][T13017] Mem-Info:
[  284.440456][ T6651] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.446745][T13017] active_anon:5163 inactive_anon:0 isolated_anon:0
[  284.446745][T13017]  active_file:1179 inactive_file:38274 isolated_file:0
[  284.446745][T13017]  unevictable:1768 dirty:75 writeback:0
[  284.446745][T13017]  slab_reclaimable:9975 slab_unreclaimable:77705
[  284.446745][T13017]  mapped:18337 shmem:2439 pagetables:921
[  284.446745][T13017]  sec_pagetables:0 bounce:0
[  284.446745][T13017]  kernel_misc_reclaimable:0
[  284.446745][T13017]  free:265461 free_pcp:19373 free_cma:0
[  284.447697][ T6651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.448624][T13017] Node 0 active_anon:11884kB inactive_anon:0kB active_file:3480kB inactive_file:19440kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33388kB dirty:280kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5528kB pagetables:1864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  284.548219][T13017] Node 1 active_anon:8768kB inactive_anon:0kB active_file:1236kB inactive_file:133656kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39960kB dirty:20kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7892kB pagetables:1820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  284.557895][T13017] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  284.566832][T13017] lowmem_reserve[]: 0 812 812 812 812
[  284.568531][T13017] Node 0 DMA32 free:345368kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11884kB inactive_anon:0kB active_file:3480kB inactive_file:19440kB unevictable:3536kB writepending:280kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:43940kB local_pcp:17952kB free_cma:0kB
[  284.577880][T13017] lowmem_reserve[]: 0 0 0 0 0
[  284.579371][T13017] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  284.588643][T13017] lowmem_reserve[]: 0 0 854 854 854
[  284.590298][T13017] Node 1 Normal free:242368kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8768kB inactive_anon:0kB active_file:1236kB inactive_file:133656kB unevictable:3536kB writepending:20kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:33576kB local_pcp:14172kB free_cma:0kB
[  284.599735][T13017] lowmem_reserve[]: 0 0 0 0 0
[  284.601374][T13017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  284.605706][T13017] Node 0 DMA32: 4*4kB (ME) 19*8kB (ME) 15*16kB (ME) 360*32kB (UE) 132*64kB (U) 25*128kB (UM) 13*256kB (UE) 16*512kB (UM) 17*1024kB (UME) 7*2048kB (UME) 68*4096kB (UM) = 345368kB
[  284.611068][T13017] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  284.615998][T13017] Node 1 Normal: 248*4kB (ME) 108*8kB (ME) 176*16kB (UME) 90*32kB (ME) 57*64kB (UM) 160*128kB (UM) 81*256kB (UME) 35*512kB (UME) 18*1024kB (UME) 11*2048kB (UME) 32*4096kB (UM) = 242368kB
[  284.621562][T13017] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  284.624533][T13017] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  284.627207][T13017] 41892 total pagecache pages
[  284.628630][T13017] 0 pages in swap cache
[  284.629907][T13017] Free swap  = 124996kB
[  284.631194][T13017] Total swap = 124996kB
[  284.632484][T13017] 786301 pages RAM
[  284.633732][T13017] 0 pages HighMem/MovableOnly
[  284.635165][T13017] 241078 pages reserved
[  284.636447][T13017] 0 pages cma reserved
[  284.739235][T13034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2170'.
[  284.746606][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'.
[  284.777261][T13039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2171'.
[  284.784875][T12938] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.820675][T12938] veth0_vlan: entered promiscuous mode
[  284.830406][T12938] veth1_vlan: entered promiscuous mode
[  284.851066][T12938] veth0_macvtap: entered promiscuous mode
[  284.860932][T12938] veth1_macvtap: entered promiscuous mode
[  284.871071][T12938] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.880695][T12938] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.887953][T12938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.890651][T12938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.896497][T12938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.899135][T12938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.982353][ T6651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.989735][ T6651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.015092][ T6651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.018224][ T6651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.755407][T13051] netlink: 'syz.0.2175': attribute type 4 has an invalid length.
[  286.104618][T13077] geneve3: entered promiscuous mode
[  286.519222][T13103] netlink: 'syz.0.2194': attribute type 10 has an invalid length.
[  286.523430][T13103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.526615][T13103] batadv0: entered promiscuous mode
[  286.794230][ T5863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.977610][T13109] xt_socket: unknown flags 0xfc
[  287.081868][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  287.088044][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  287.090860][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  287.095011][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  287.098166][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  287.305571][T13114] chnl_net:caif_netlink_parms(): no params data found
[  287.355752][T13114] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.358024][T13114] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.360522][T13114] bridge_slave_0: entered allmulticast mode
[  287.363576][T13114] bridge_slave_0: entered promiscuous mode
[  287.366782][T13114] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.368976][T13114] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.371189][T13114] bridge_slave_1: entered allmulticast mode
[  287.374302][T13114] bridge_slave_1: entered promiscuous mode
[  287.394625][T13114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  287.399079][T13114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.423171][T13114] team0: Port device team_slave_0 added
[  287.427754][T13114] team0: Port device team_slave_1 added
[  287.449346][T13114] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.451462][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.459526][T13114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.464190][T13114] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.466274][T13114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.477263][T13114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.512138][T13114] hsr_slave_0: entered promiscuous mode
[  287.515219][T13114] hsr_slave_1: entered promiscuous mode
[  287.518403][T13114] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  287.520865][T13114] Cannot create hsr debugfs directory
[  287.689941][T13138] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  287.990703][T13161] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  288.007231][T13153] @: renamed from vlan0
[  288.015100][T13153] dvmrp0: entered allmulticast mode
[  288.156544][ T5863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.225661][ T5863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.246723][T13180] netlink: 'syz.0.2215': attribute type 1 has an invalid length.
[  288.291294][ T5863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.441012][ T5863] bridge_slave_1: left allmulticast mode
[  288.442955][ T5863] bridge_slave_1: left promiscuous mode
[  288.446085][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.458811][ T5863] bridge_slave_0: left allmulticast mode
[  288.460700][ T5863] bridge_slave_0: left promiscuous mode
[  288.462553][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.755847][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.760450][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.765720][ T5863] bond0 (unregistering): Released all slaves
[  288.890701][T13195] netlink: 'syz.0.2217': attribute type 1 has an invalid length.
[  288.920950][T13195] 8021q: adding VLAN 0 to HW filter on device bond8
[  288.926427][T13195] __nla_validate_parse: 19 callbacks suppressed
[  288.926436][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'.
[  288.932756][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'.
[  289.153855][   T54] Bluetooth: hci0: command tx timeout
[  289.171903][ T5863] hsr_slave_0: left promiscuous mode
[  289.183168][ T5863] hsr_slave_1: left promiscuous mode
[  289.187367][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.189823][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.192587][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.195288][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.211328][ T5863] veth1_macvtap: left promiscuous mode
[  289.221802][ T5863] veth0_macvtap: left promiscuous mode
[  289.223880][ T5863] veth1_vlan: left promiscuous mode
[  289.225950][ T5863] veth0_vlan: left promiscuous mode
[  289.597889][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  289.635631][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  289.863849][T13222] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2220'.
[  290.001257][T13114] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  290.035337][T13114] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  290.057222][T13114] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  290.066394][T13114] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  290.082334][T13237] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  290.161308][T13251] netlink: 'syz.0.2225': attribute type 1 has an invalid length.
[  290.166605][T13251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2225'.
[  290.169958][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  290.172813][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  290.176380][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2225'.
[  290.222806][T13255] Bluetooth: MGMT ver 1.23
[  290.226523][T13114] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.260531][T13114] 8021q: adding VLAN 0 to HW filter on device team0
[  290.281061][ T4630] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.283433][ T4630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.300797][ T4630] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.303043][ T4630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.311191][T13262] netlink: 'syz.0.2228': attribute type 10 has an invalid length.
[  290.320745][T13262] dummy0: entered promiscuous mode
[  290.333937][T13262] team0: Port device dummy0 added
[  290.504960][T13114] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.559978][T13114] veth0_vlan: entered promiscuous mode
[  290.566303][T13114] veth1_vlan: entered promiscuous mode
[  290.616638][T13114] veth0_macvtap: entered promiscuous mode
[  290.641416][T13114] veth1_macvtap: entered promiscuous mode
[  290.660506][T13114] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.676093][T13114] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.691932][T13114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.700417][T13114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.703058][T13114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.706217][T13114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.808344][ T6651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.810793][ T6651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.834929][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.837385][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.135475][T13316] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2245'.
[  291.210497][T13322] nbd: must specify a device to reconfigure
[  291.373033][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2250'.
[  291.586584][T13338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2252'.
[  292.030871][T13347] netlink: 'syz.2.2256': attribute type 2 has an invalid length.
[  292.035618][T13347] netlink: 'syz.2.2256': attribute type 8 has an invalid length.
[  292.216414][T13358] netlink: 'syz.2.2259': attribute type 1 has an invalid length.
[  292.218897][T13358] netlink: 'syz.2.2259': attribute type 4 has an invalid length.
[  292.435459][T13377] netlink: 'syz.2.2266': attribute type 1 has an invalid length.
[  292.589822][T13385] syzkaller1: entered promiscuous mode
[  292.591513][T13385] syzkaller1: entered allmulticast mode
[  292.608287][T13380] batman_adv: batadv0: Adding interface: ip6gretap3
[  292.610983][T13380] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.622527][T13380] batman_adv: batadv0: Interface activated: ip6gretap3
[  292.751016][ T5863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.136207][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  293.139993][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  293.142863][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  293.151054][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  293.154452][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  293.219399][T13400] bond0: Device is already in use.
[  293.222157][T13401] bond0: Device is already in use.
[  293.365046][T13405] netlink: 'syz.0.2276': attribute type 11 has an invalid length.
[  293.384154][T13407] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.462859][T13407] tipc: Resetting bearer <eth:syzkaller0>
[  293.490235][T13395] chnl_net:caif_netlink_parms(): no params data found
[  293.578036][T13395] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.580441][T13395] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.582702][T13395] bridge_slave_0: entered allmulticast mode
[  293.586355][T13395] bridge_slave_0: entered promiscuous mode
[  293.589623][T13395] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.591908][T13395] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.594469][T13395] bridge_slave_1: entered allmulticast mode
[  293.597159][T13395] bridge_slave_1: entered promiscuous mode
[  293.639094][T13395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.647453][T13395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.681771][T13395] team0: Port device team_slave_0 added
[  293.690066][T13395] team0: Port device team_slave_1 added
[  293.714687][T13395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.717007][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.726919][T13395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.731613][T13395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.734440][T13395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.743074][T13395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.790437][T13395] hsr_slave_0: entered promiscuous mode
[  293.795401][T13395] hsr_slave_1: entered promiscuous mode
[  293.798824][T13395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  293.802268][T13395] Cannot create hsr debugfs directory
[  293.890364][T13425] syzkaller0: left promiscuous mode
[  293.892150][T13425] syzkaller0: left allmulticast mode
[  294.271598][T13454] xt_l2tp: v2 sid > 0xffff: 4294901760
[  294.457138][ T5863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.477833][T13462] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  294.478194][T13461] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  294.521522][ T5863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.595106][ T5863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.735022][ T5863] bridge_slave_1: left allmulticast mode
[  294.737347][ T5863] bridge_slave_1: left promiscuous mode
[  294.739796][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.761943][ T5863] bridge_slave_0: left allmulticast mode
[  294.765931][ T5863] bridge_slave_0: left promiscuous mode
[  294.768328][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.853732][T13472] __nla_validate_parse: 7 callbacks suppressed
[  294.853764][T13472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2294'.
[  294.965600][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2295'.
[  295.162583][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.170109][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.174305][ T5863] bond0 (unregistering): Released all slaves
[  295.221079][T13476] bond9: entered promiscuous mode
[  295.223943][T13476] 8021q: adding VLAN 0 to HW filter on device bond9
[  295.240172][ T5841] Bluetooth: hci0: command tx timeout
[  295.379918][T13476] bond9 (unregistering): Released all slaves
[  295.590934][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2296'.
[  295.598975][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2296'.
[  295.822183][T13493] ieee802154 phy0 wpan0: encryption failed: -22
[  295.899451][ T5863] hsr_slave_0: left promiscuous mode
[  295.905212][ T5863] hsr_slave_1: left promiscuous mode
[  295.912807][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.916936][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.924343][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.927322][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.971229][ T5863] veth1_macvtap: left promiscuous mode
[  295.983788][ T5863] veth0_macvtap: left promiscuous mode
[  295.985970][ T5863] veth1_vlan: left promiscuous mode
[  295.987777][ T5863] veth0_vlan: left promiscuous mode
[  296.587279][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  296.639619][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  297.317859][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'.
[  297.318270][ T5841] Bluetooth: hci0: command tx timeout
[  297.449658][T13395] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  297.461485][T13395] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  297.491365][T13395] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  297.519468][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'.
[  297.545014][T13395] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  297.590823][T13534] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.658667][T13534] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.712458][T13534] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.732175][T13395] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.760827][T13395] 8021q: adding VLAN 0 to HW filter on device team0
[  297.769053][ T4630] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.771857][ T4630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.780084][T13534] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.797003][T13550] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  297.800853][T13550] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  297.810914][T13550] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  297.812465][ T4630] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.814243][T13550] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  297.816383][ T4630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.819251][T13550] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  297.831116][T13550] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  297.837946][T13550] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  297.841921][T13550] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  297.862135][T13550] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  297.868395][T13550] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  297.888901][T13534] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.918547][T13534] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.956426][T13534] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.969981][T13534] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.127470][T13395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.176556][T13395] veth0_vlan: entered promiscuous mode
[  298.194018][T13395] veth1_vlan: entered promiscuous mode
[  298.233765][T13395] veth0_macvtap: entered promiscuous mode
[  298.246120][T13395] veth1_macvtap: entered promiscuous mode
[  298.281472][T13395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.289876][T13395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.298586][T13395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.302000][T13395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.311740][T13395] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.316273][T13395] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.433882][T13577] x_tables: ip_tables: ah match: only valid for protocol 51
[  298.434625][T13578] x_tables: ip_tables: ah match: only valid for protocol 51
[  298.448399][ T6651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.453294][ T6651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.494361][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.497566][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.383594][   T54] Bluetooth: hci0: command tx timeout
[  299.448636][T13632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2332'.
[  299.452224][T13632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2332'.
[  299.459611][T13632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2332'.
[  299.467862][T13632] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2332'.
[  299.712048][T13640] wg1: entered allmulticast mode
[  299.993489][T13658] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2340'.
[  300.093452][T13666] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  300.104705][T13666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2342'.
[  300.108466][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'.
[  300.114795][T13666] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2342'.
[  300.245304][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2346'.
[  300.248823][T13678] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  300.251655][T13678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.261139][T13680] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  300.276074][T13680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2347'.
[  300.430275][T13689] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2350'.
[  300.680545][T13701] tipc: Resetting bearer <eth:team0>
[  300.830436][T13701] tipc: Disabling bearer <eth:team0>
[  300.834555][T13701] batadv1: left promiscuous mode
[  300.850858][T13701] team0 (unregistering): Port device batadv1 removed
[  300.853940][T13701] dummy0: left promiscuous mode
[  300.876831][T13701] team0 (unregistering): Port device dummy0 removed
[  301.040089][T13705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2355'.
[  301.045053][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'.
[  301.241071][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.244863][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.466795][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2362'.
[  301.531207][T13729] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  301.541070][T13730] dummy0: left allmulticast mode
[  301.544472][T13730] bridge0: port 1(dummy0) entered disabled state
[  301.722428][T13736] netlink: 'syz.0.2367': attribute type 11 has an invalid length.
[  301.984601][T13759] bridge_slave_0: entered promiscuous mode
[  302.290829][T13772] xt_CT: No such helper "snmp"
[  302.524753][T13786] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  302.654337][T13806] syzkaller0: Caught tx_queue_len zero misconfig
[  303.126907][T13853] validate_nla: 59 callbacks suppressed
[  303.126923][T13853] netlink: 'syz.2.2406': attribute type 3 has an invalid length.
[  303.131055][T13853] netlink: 'syz.2.2406': attribute type 2 has an invalid length.
[  303.137887][T13853] netlink: 'syz.2.2406': attribute type 2 has an invalid length.
[  303.145067][T13856] netlink: 'syz.2.2406': attribute type 3 has an invalid length.
[  303.147578][T13856] netlink: 'syz.2.2406': attribute type 2 has an invalid length.
[  303.150472][T13856] netlink: 'syz.2.2406': attribute type 2 has an invalid length.
[  303.279600][T13864] SET target dimension over the limit!
[  303.468730][T13868] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  304.215916][T13894] sit4: entered promiscuous mode
[  304.252524][T13902] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  304.266440][T13899] netlink: 'syz.0.2423': attribute type 14 has an invalid length.
[  304.269545][T13899] netlink: 'syz.0.2423': attribute type 13 has an invalid length.
[  304.373137][T13907] netlink: 'syz.0.2425': attribute type 1 has an invalid length.
[  304.378514][T13907] netlink: 'syz.0.2425': attribute type 11 has an invalid length.
[  304.641298][T13932] IPVS: rr: FWM 3 0x00000003 - no destination available
[  305.030459][T13954] __nla_validate_parse: 35 callbacks suppressed
[  305.030472][T13954] netlink: 508 bytes leftover after parsing attributes in process `syz.0.2441'.
[  306.159382][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2450'.
[  306.595210][T13990] : entered promiscuous mode
[  306.825328][T14001] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  306.911479][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2459'.
[  306.957801][T14008] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  306.960817][T14008] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  307.620007][T14041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2471'.
[  307.625751][T14041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2471'.
[  307.629136][T14041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2471'.
[  307.798687][T14049] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.2475'.
[  309.858034][T14092] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2490'.
[  309.939158][T14099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2492'.
[  310.015862][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2494'.
[  310.119521][T14115] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2498'.
[  310.127497][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'.
[  310.258832][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2502'.
[  310.337112][T14136] xt_hashlimit: size too large, truncated to 1048576
[  310.609501][T14145] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2506'.
[  310.650046][T14147] validate_nla: 7 callbacks suppressed
[  310.650063][T14147] netlink: 'syz.0.2507': attribute type 1 has an invalid length.
[  310.655516][T14147] netlink: 'syz.0.2507': attribute type 1 has an invalid length.
[  310.662243][T14147] netlink: 'syz.0.2507': attribute type 1 has an invalid length.
[  310.665614][T14147] netlink: 'syz.0.2507': attribute type 1 has an invalid length.
[  310.816023][T14163] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  311.120191][T14177] batadv_slave_0: entered promiscuous mode
[  311.180121][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'.
[  311.254770][T14187] pim6reg: entered allmulticast mode
[  311.308162][T14194] netlink: 'syz.2.2522': attribute type 10 has an invalid length.
[  311.317740][T14195] netlink: 'syz.2.2522': attribute type 10 has an invalid length.
[  311.360978][T14197] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2523'.
[  311.365595][T14197] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  311.567904][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'.
[  312.356464][T14217] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2529'.
[  312.452153][T14221] netlink: 'syz.2.2531': attribute type 2 has an invalid length.
[  312.588034][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2533'.
[  312.646734][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'.
[  312.954267][   T56] block nbd1: Receive control failed (result -104)
[  313.241072][T14268] pimreg: entered allmulticast mode
[  313.259109][T14268] pimreg: left allmulticast mode
[  313.446154][T14277] sctp: [Deprecated]: syz.0.2547 (pid 14277) Use of struct sctp_assoc_value in delayed_ack socket option.
[  313.446154][T14277] Use struct sctp_sack_info instead
[  313.601249][T14280] ieee802154 phy0 wpan0: encryption failed: -90
[  313.649882][T14282] ip6erspan0: entered allmulticast mode
[  314.217316][T14300] IPVS: Error joining to the multicast group
[  314.350790][T14306] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  314.514838][T14321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  314.521347][T14321] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  314.596591][T14328] bond10: entered promiscuous mode
[  314.599024][T14328] 8021q: adding VLAN 0 to HW filter on device bond10
[  314.948223][T14362] netlink: 'syz.0.2573': attribute type 5 has an invalid length.
[  314.983671][T12633] ": No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  315.878822][T14384] __nla_validate_parse: 11 callbacks suppressed
[  315.878839][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'.
[  315.897663][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'.
[  315.979447][T14393] netlink: 'syz.0.2581': attribute type 11 has an invalid length.
[  315.982467][T14393] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2581'.
[  316.095949][T14405] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  316.625810][T14432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2589'.
[  316.634602][T14432] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2589'.
[  316.826899][T14445] netlink: 'syz.2.2593': attribute type 21 has an invalid length.
[  316.829559][T14445] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2593'.
[  316.832366][T14445] netlink: 'syz.2.2593': attribute type 4 has an invalid length.
[  316.836132][T14445] netlink: 'syz.2.2593': attribute type 5 has an invalid length.
[  316.838505][T14445] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2593'.
[  316.909870][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.945366][T14450] bond0: Master is either lo or non-ether device
[  316.983858][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[  317.217305][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2595'.
[  317.220520][T14454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2595'.
[  317.314470][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'.
[  317.381181][T14459] macsec3: entered promiscuous mode
[  317.391019][T14459] macsec3: entered allmulticast mode
[  317.392891][T14459] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  317.458648][T14464] ieee802154 phy0 wpan0: encryption failed: -22
[  317.557345][T14472] netlink: 'syz.0.2600': attribute type 1 has an invalid length.
[  317.586317][T14472] 8021q: adding VLAN 0 to HW filter on device bond9
[  317.606073][T14472] veth7: entered promiscuous mode
[  317.611391][T14472] bond9: (slave veth7): Enslaving as an active interface with a down link
[  317.621284][T14472] bond3: (slave erspan0): Releasing active interface
[  317.629687][T14472] bond9: (slave erspan0): making interface the new active one
[  317.634039][T14472] erspan0: entered promiscuous mode
[  317.636440][T14472] bond9: (slave erspan0): Enslaving as an active interface with an up link
[  317.815836][T14483] netlink: 'syz.0.2603': attribute type 11 has an invalid length.
[  317.853707][T14483] netlink: 'syz.0.2603': attribute type 10 has an invalid length.
[  317.923716][T14489] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  317.933287][T14489] openvswitch: netlink: Duplicate key (type 0).
[  318.016862][T14493] netlink: 'syz.0.2607': attribute type 10 has an invalid length.
[  318.188049][T14504] netlink: 'syz.2.2611': attribute type 39 has an invalid length.
[  318.457405][T14530] netlink: 'syz.2.2617': attribute type 32 has an invalid length.
[  318.692877][T14546] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  318.769954][T14551] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  319.141597][T14580] xt_HMARK: proto mask must be zero with L3 mode
[  319.898707][T14628] bridge10: the hash_elasticity option has been deprecated and is always 16
[  319.960719][T14630] netlink: 'syz.0.2644': attribute type 1 has an invalid length.
[  320.003136][T14630] 8021q: adding VLAN 0 to HW filter on device bond10
[  320.027445][T14630] bond10: (slave gretap3): making interface the new active one
[  320.033378][T14630] 
[  320.034377][T14630] ============================================
[  320.036693][T14630] WARNING: possible recursive locking detected
[  320.038909][T14630] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  320.042507][T14630] --------------------------------------------
[  320.045045][T14630] syz.0.2644/14630 is trying to acquire lock:
[  320.046982][T14630] ffff88802083b158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  320.050373][T14630] 
[  320.050373][T14630] but task is already holding lock:
[  320.053060][T14630] ffff888036fc9158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  320.056398][T14630] 
[  320.056398][T14630] other info that might help us debug this:
[  320.058859][T14630]  Possible unsafe locking scenario:
[  320.058859][T14630] 
[  320.061203][T14630]        CPU0
[  320.062337][T14630]        ----
[  320.063472][T14630]   lock(&qdisc_xmit_lock_key#4);
[  320.065285][T14630]   lock(&qdisc_xmit_lock_key#4);
[  320.067162][T14630] 
[  320.067162][T14630]  *** DEADLOCK ***
[  320.067162][T14630] 
[  320.069701][T14630]  May be due to missing lock nesting notation
[  320.069701][T14630] 
[  320.072463][T14630] 9 locks held by syz.0.2644/14630:
[  320.074464][T14630]  #0: ffffffff8fa37fe0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  320.077637][T14630]  #1: ffffffff8f51c948 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  320.081021][T14630]  #2: ffffffff8e13eec0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  320.084819][T14630]  #3: ffff8880340b6258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  320.089507][T14630]  #4: ffff888036fc9158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  320.093293][T14630]  #5: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  320.096367][T14630]  #6: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  320.099151][T14630]  #7: ffffffff8e13eec0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  320.102333][T14630]  #8: ffff88802ed92258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  320.106618][T14630] 
[  320.106618][T14630] stack backtrace:
[  320.108516][T14630] CPU: 0 UID: 0 PID: 14630 Comm: syz.0.2644 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  320.108537][T14630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.108547][T14630] Call Trace:
[  320.108555][T14630]  <TASK>
[  320.108564][T14630]  dump_stack_lvl+0x189/0x250
[  320.108588][T14630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.108604][T14630]  ? __pfx__printk+0x10/0x10
[  320.108625][T14630]  ? print_lock_name+0xde/0x100
[  320.108644][T14630]  print_deadlock_bug+0x28b/0x2a0
[  320.108658][T14630]  validate_chain+0x1a3f/0x2140
[  320.108668][T14630]  ? validate_xmit_xfrm+0xbf/0x1130
[  320.108677][T14630]  ? is_bpf_text_address+0x26/0x2b0
[  320.108686][T14630]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  320.108697][T14630]  __lock_acquire+0xab9/0xd20
[  320.108708][T14630]  ? sch_direct_xmit+0x153/0x4b0
[  320.108743][T14630]  lock_acquire+0x120/0x360
[  320.108752][T14630]  ? sch_direct_xmit+0x153/0x4b0
[  320.108763][T14630]  _raw_spin_lock+0x2e/0x40
[  320.108778][T14630]  ? sch_direct_xmit+0x153/0x4b0
[  320.108787][T14630]  sch_direct_xmit+0x153/0x4b0
[  320.108797][T14630]  ? __pfx_sch_direct_xmit+0x10/0x10
[  320.108807][T14630]  __dev_queue_xmit+0x17b6/0x3a70
[  320.108819][T14630]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.108828][T14630]  ? __dev_queue_xmit+0x27e/0x3a70
[  320.108840][T14630]  ? arpt_do_table+0x1dc4/0x1fd0
[  320.108852][T14630]  ? __pfx___dev_queue_xmit+0x10/0x10
[  320.108865][T14630]  ? arpt_do_table+0x238/0x1fd0
[  320.108875][T14630]  ? __pfx_arpt_do_table+0x10/0x10
[  320.108889][T14630]  ? NF_HOOK+0x9e/0x3a0
[  320.108897][T14630]  NF_HOOK+0x310/0x3a0
[  320.108904][T14630]  ? __pfx_arp_xmit_finish+0x10/0x10
[  320.108911][T14630]  ? NF_HOOK+0x9e/0x3a0
[  320.108918][T14630]  ? __pfx_NF_HOOK+0x10/0x10
[  320.108930][T14630]  ? __pfx_arp_xmit_finish+0x10/0x10
[  320.108945][T14630]  arp_xmit+0x16c/0x270
[  320.108955][T14630]  ? arp_xmit+0x23/0x270
[  320.108966][T14630]  arp_solicit+0xc1d/0xe60
[  320.108980][T14630]  ? arp_solicit+0x11a/0xe60
[  320.108995][T14630]  ? __pfx_arp_solicit+0x10/0x10
[  320.109010][T14630]  ? __neigh_event_send+0xf08/0x1560
[  320.109025][T14630]  ? __pfx_arp_solicit+0x10/0x10
[  320.109046][T14630]  __neigh_event_send+0xf70/0x1560
[  320.109062][T14630]  neigh_resolve_output+0x198/0x750
[  320.109071][T14630]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  320.109082][T14630]  ip_finish_output2+0xd40/0x1160
[  320.109090][T14630]  ? ip_skb_dst_mtu+0x147/0xc50
[  320.109111][T14630]  ? ip_finish_output2+0x452/0x1160
[  320.109126][T14630]  ? __pfx_ip_finish_output2+0x10/0x10
[  320.109139][T14630]  ? ip_skb_dst_mtu+0x147/0xc50
[  320.109158][T14630]  ? ip_skb_dst_mtu+0x147/0xc50
[  320.109177][T14630]  ? ip_skb_dst_mtu+0x970/0xc50
[  320.109198][T14630]  ? __ip_finish_output+0x336/0x3f0
[  320.109211][T14630]  iptunnel_xmit+0x571/0xa00
[  320.109230][T14630]  ip_tunnel_xmit+0x1c3c/0x2380
[  320.109243][T14630]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  320.109250][T14630]  ? gre_build_header+0x3fd/0xa40
[  320.109263][T14630]  ? __pfx_gre_build_header+0x10/0x10
[  320.109276][T14630]  gre_tap_xmit+0x590/0x7a0
[  320.109287][T14630]  ? __pfx_gre_tap_xmit+0x10/0x10
[  320.109297][T14630]  ? __lock_acquire+0xab9/0xd20
[  320.109307][T14630]  dev_hard_start_xmit+0x2d7/0x830
[  320.109321][T14630]  sch_direct_xmit+0x241/0x4b0
[  320.109331][T14630]  ? __pfx_sch_direct_xmit+0x10/0x10
[  320.109339][T14630]  ? netlink_rcv_skb+0x208/0x470
[  320.109351][T14630]  __dev_queue_xmit+0x17b6/0x3a70
[  320.109364][T14630]  ? __dev_queue_xmit+0x27e/0x3a70
[  320.109377][T14630]  ? __pfx___dev_queue_xmit+0x10/0x10
[  320.109388][T14630]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  320.109398][T14630]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  320.109409][T14630]  ? __build_skb_around+0x257/0x3e0
[  320.109421][T14630]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  320.109430][T14630]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  320.109442][T14630]  ? alb_send_lp_vid+0x139/0x510
[  320.109451][T14630]  alb_send_lp_vid+0x324/0x510
[  320.109460][T14630]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  320.109468][T14630]  ? __pfx_alb_set_slave_mac_addr+0x10/0x10
[  320.109481][T14630]  alb_send_learning_packets+0x10d/0x2c0
[  320.109494][T14630]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  320.109508][T14630]  ? alb_swap_mac_addr+0x221/0x320
[  320.109514][T14630]  ? dev_addr_check+0x20/0x250
[  320.109525][T14630]  alb_fasten_mac_swap+0x665/0xfa0
[  320.109534][T14630]  bond_alb_handle_active_change+0xc10/0xec0
[  320.109542][T14630]  ? __pfx_bond_alb_handle_active_change+0x10/0x10
[  320.109557][T14630]  ? __local_bh_enable_ip+0x12d/0x1c0
[  320.109569][T14630]  bond_change_active_slave+0x1048/0x3770
[  320.109583][T14630]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  320.109595][T14630]  ? __pfx_bond_change_active_slave+0x10/0x10
[  320.109605][T14630]  ? __queue_work+0x103/0xfe0
[  320.109615][T14630]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  320.109624][T14630]  ? mod_delayed_work_on+0x128/0x200
[  320.109638][T14630]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.109652][T14630]  ? mod_delayed_work_on+0x1ac/0x200
[  320.109669][T14630]  ? netdev_change_features+0x8d/0xd0
[  320.109691][T14630]  bond_select_active_slave+0x8e2/0xd00
[  320.109744][T14630]  ? __pfx_bond_select_active_slave+0x10/0x10
[  320.109768][T14630]  ? __pfx_bond_set_carrier+0x10/0x10
[  320.109788][T14630]  ? netdev_is_rx_handler_busy+0x6e/0x140
[  320.109807][T14630]  ? __pfx_bond_handle_frame+0x10/0x10
[  320.109829][T14630]  bond_enslave+0x229c/0x3a20
[  320.109855][T14630]  ? __pfx_bond_enslave+0x10/0x10
[  320.109878][T14630]  ? __pfx___dev_notify_flags+0x10/0x10
[  320.109897][T14630]  ? mutex_is_locked+0x17/0x50
[  320.109914][T14630]  do_set_master+0x533/0x6d0
[  320.109926][T14630]  rtnl_newlink_create+0x677/0xb00
[  320.109938][T14630]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  320.109953][T14630]  ? rtnl_newlink+0x8db/0x1c70
[  320.109966][T14630]  ? __pfx___mutex_lock+0x10/0x10
[  320.109984][T14630]  ? ns_capable+0x8a/0xf0
[  320.109998][T14630]  rtnl_newlink+0x16d6/0x1c70
[  320.110010][T14630]  ? __pfx_rtnl_newlink+0x10/0x10
[  320.110019][T14630]  ? __lock_acquire+0xab9/0xd20
[  320.110037][T14630]  ? __lock_acquire+0xab9/0xd20
[  320.110056][T14630]  ? is_bpf_text_address+0x26/0x2b0
[  320.110074][T14630]  ? is_bpf_text_address+0x292/0x2b0
[  320.110088][T14630]  ? is_bpf_text_address+0x26/0x2b0
[  320.110103][T14630]  ? kernel_text_address+0xa5/0xe0
[  320.110117][T14630]  ? __lock_acquire+0xab9/0xd20
[  320.110137][T14630]  ? __pfx_rtnl_newlink+0x10/0x10
[  320.110152][T14630]  rtnetlink_rcv_msg+0x7cf/0xb70
[  320.110168][T14630]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  320.110180][T14630]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  320.110199][T14630]  netlink_rcv_skb+0x208/0x470
[  320.110216][T14630]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  320.110231][T14630]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  320.110252][T14630]  ? netlink_deliver_tap+0x2e/0x1b0
[  320.110269][T14630]  ? netlink_deliver_tap+0x2e/0x1b0
[  320.110288][T14630]  netlink_unicast+0x75b/0x8d0
[  320.110304][T14630]  netlink_sendmsg+0x805/0xb30
[  320.110315][T14630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.110325][T14630]  ? aa_sock_msg_perm+0x94/0x160
[  320.110337][T14630]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  320.110345][T14630]  ? __pfx_netlink_sendmsg+0x10/0x10
[  320.110355][T14630]  __sock_sendmsg+0x21c/0x270
[  320.110363][T14630]  ____sys_sendmsg+0x505/0x830
[  320.110375][T14630]  ? __pfx_____sys_sendmsg+0x10/0x10
[  320.110387][T14630]  ? import_iovec+0x74/0xa0
[  320.110403][T14630]  ___sys_sendmsg+0x21f/0x2a0
[  320.110419][T14630]  ? __pfx____sys_sendmsg+0x10/0x10
[  320.110446][T14630]  ? __fget_files+0x2a/0x420
[  320.110463][T14630]  ? __fget_files+0x3a0/0x420
[  320.110485][T14630]  __x64_sys_sendmsg+0x19b/0x260
[  320.110501][T14630]  ? schedule+0x165/0x360
[  320.110521][T14630]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  320.110546][T14630]  ? do_syscall_64+0xbe/0x3b0
[  320.110561][T14630]  do_syscall_64+0xfa/0x3b0
[  320.110573][T14630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.110583][T14630]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  320.110594][T14630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.110602][T14630] RIP: 0033:0x7f8778f8e929
[  320.110611][T14630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.110619][T14630] RSP: 002b:00007f8776df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.110628][T14630] RAX: ffffffffffffffda RBX: 00007f87791b5fa0 RCX: 00007f8778f8e929
[  320.110635][T14630] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003
[  320.110641][T14630] RBP: 00007f8779010b39 R08: 0000000000000000 R09: 0000000000000000
[  320.110647][T14630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.110652][T14630] R13: 0000000000000000 R14: 00007f87791b5fa0 R15: 00007ffe594ae0d8
[  320.110663][T14630]  </TASK>
[  320.402831][T14630] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  320.419830][T14630] syz.0.2644 (14630) used greatest stack depth: 16040 bytes left
[  329.075894][   T13] erspan0: left promiscuous mode

VM DIAGNOSIS:
22:29:54  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006e RBX=000000000000006e RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000214f0 RDI=00000000000214f1 RBP=00000000000003f8 RSP=ffffc9000480c970
R8 =ffff8881076a8237 R9 =1ffff11020ed5046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7911 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8776df66c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003c1fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f681de11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc900029cfb78 RBX=ffffc900029c8000 RCX=0000000000000001 RDX=ffffc900029ceca8
RSI=dffffc0000000000 RDI=ffffc900029cec68 RBP=1ffff92000539d8d RSP=ffffc900029ceb40
R8 =ffffc900029cfb70 R9 =0000000000000000 R10=ffffc900029cecb8 R11=fffff52000539d99
R12=1ffff92000539d8e R13=1ffff92000539d8f R14=ffffc900029d0000 R15=ffffc900029cec68
RIP=ffffffff8172c126 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f681ecbb6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c28e84e CR3=0000000128c04000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000100080002000c 00000000646e6f62
XMM02=0500010008000200 0c00000000646e6f XMM03=620001000c001200 1c00000000000000
XMM04=00007f8779ced100 00007f8779185440 XMM05=00007f8779185458 00007f87791854a0
XMM06=00007f8779185498 00007f8779185490 XMM07=00007f8779185488 00007f8779185480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8779011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
