last executing test programs:

1.589365406s ago: executing program 1 (id=923):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000006c0)=""/262, 0x1a, 0x106, 0x9}, 0x28) (async, rerun: 64)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) (rerun: 64)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)="8a226ff432407a7f5fd09590d734f785e12e57ce9fed3f9561ba1e4a0300eb6368ed559a10f4aa9b855c103d7005528200b0ca260e9d927cdabe9927e7cef066b84132f297f28a2c2bc20b69c0f562f09fd7801bc835864cfc4998a8ee010005d03b599b9c91c0f2bab4eca220d97131f0d31f9b08988d3b0e9764ca38d811720088875d60b156d9ec241c5902f155e518e79559b9a9ab42e2202e6c", 0x9c}], 0x2) (async, rerun: 32)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 32)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xbc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) (async)
pipe(&(0x7f0000000c00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, 0x0) (async)
r4 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000002380)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474df6a51671e412928f46546af1e1536816e100ed8a93b0a9053db57d60973369f58551c3091cb8d0e625f50843d76aa5fa8d3b87", 0x55}, {0x0}], 0x3}, 0x40004) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r6=>0x0})
sendmsg$can_raw(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x3, 0x0, 0x4, 0x0, "000000cef4a89800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) (async, rerun: 32)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x2, 0x3, 0x0, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x44004050}, 0x4000000) (async, rerun: 32)
sendmsg$802154_raw(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000c40)="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", 0x1000}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

1.588002974s ago: executing program 1 (id=924):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a01010000000000000000200000070900010073797a31000000000900030073797a320000000001"], 0x7c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x18)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'vxcan1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0xf)
r7 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r7, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x100}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) (async)
r8 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@getchain={0x2c, 0x66, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xffe0, 0x5}, {0x0, 0xfff1}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24}, 0x8001) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400800, 0x0) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f00000005c0)={0x4, [0x0, 0x6, 0x200, 0x0]}, 0xc) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000000020000004000000", @ANYRESOCT=r8, @ANYBLOB="3895e4920800b56bdccf64000000000000081124a743b72f1f197003b23c07370700000000000000245818c37c2175bda9384e99ba567c1b64ba", @ANYRES64=0x0], 0x20) (async)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xe2, 0x1, 0x3, 0xa7}]}, 0x10)

1.519556342s ago: executing program 1 (id=926):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xe544c000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000"], 0x0, 0x18, 0x0, 0x2}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "972379f9e7dc740d", "7fc1fc9366298414bc59af21b45e3473", "9f86d65b", "02f05c775331787f"}, 0x28)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000540)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0xc, 0x8d}, @mpls={[], @ipv6=@tcp={0xc, 0x6, "5d42e6", 0x3b8, 0x6, 0x0, @private0, @private2, {[@hopopts={0x11, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x65}, @enc_lim, @ra={0x5, 0x2, 0x4647}]}, @routing={0x2c, 0x2, 0x2, 0x8, 0x0, [@private2]}, @routing={0x6c, 0x6, 0x2, 0x8b, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @ipv4={'\x00', '\xff\xff', @loopback}]}, @hopopts={0x0, 0x7, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x8, 0x9, [0xbe, 0x3, 0x0, 0x8000000000000001, 0x2]}}, @enc_lim={0x4, 0x1, 0x32}, @pad1]}, @dstopts={0xc, 0x1a, '\x00', [@calipso={0x7, 0x10, {0x4, 0x2, 0x6, 0x8, [0x77e1]}}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0xcbc6}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x80, "7b3f11305d818f00b2a820b465e92eb3091948f9e2a7d3e4a70886eaf6c65e37b5a6c9d16fbef62c4bbe0af77f8636ff7398efaf71be509a6ffbffe4c6746e8898ace9ce957061c480c6349fd16cc59f093b918b8d41f7fe1d62f4e4e66ee41593eb6df72f420312635f1affba95613b9c3b1485cc613fbe0870a5c5c391da00"}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x226, [0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0]}}]}, @routing={0x1, 0x12, 0x1, 0x8, 0x0, [@private0, @local, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback, @empty, @remote, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3f}, @private2]}, @hopopts={0x3a, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x3, [0x7]}}, @pad1, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x84}]}, @routing={0x3a, 0x0, 0x0, 0x9}, @routing={0x33, 0x6, 0x0, 0x1, 0x0, [@remote, @local, @private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x16, 0x350a761dc4f54c56, 0x5, 0x0, 0x2, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x11, "bdd2edbc5ce5d476a3023d163dc8e5"}, @sack={0x5, 0x16, [0x200, 0x200, 0x4, 0x7, 0xffff]}, @mptcp=@add_addr={0x1e, 0xc, 0x0, 0xc, 0xf, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, ';k'}, @window={0x3, 0x3, 0x8}, @nop]}}, {"6677bccf099a0a07b0231f0c7f0952a9b60ab946a7cd91052c07077cd0966007f5f001648111457f8d6cc3259a8eb5334f9f0873312adcaf6c79c1118ed8f50acced895b7df2782823be9e7fde7b52925961b360b8b82afd57083ce0a0a7c04c63279d1bec345cc700545824e1387aeea2f81d0a8bef777fe936399d7a698115f23ab9417a99fa05cc583d07dbc60a1622aa418194bfa1c3322537339f2c74562e97892d0b5321b24aec414d94950c98f0c59f7c7889a49ff691514c8e127d52"}}}}}}, 0x3ee)
socket$unix(0x1, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept4(r4, 0x0, 0x0, 0x800)
socket$nl_route(0x10, 0x3, 0x0)

1.360349471s ago: executing program 1 (id=929):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = gettid()
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.358775965s ago: executing program 0 (id=930):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x4, 0x8}, @sack_perm, @window={0x3, 0x3, 0x4}, @sack_perm, @window={0x3, 0x678, 0x7ff}, @mss, @mss={0x2, 0x4}], 0x7) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000600)=r2, 0x4)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = getpid()
syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x5, 0x1, 0xb, 0x1, 0x3, 0x0, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB="7305a3868de5e2d72510eb706a7c53d263f53af285a4de03e3b988ac02d27a8acd1d214c810820f6169603eac10000"], 0x3c}}, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r5) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2039}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x100004, 0x620104, 0xb, 0x1}, 0x50) (async)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r9, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async)
bind$ax25(r9, &(0x7f0000000480)={{0x3, @null, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async)
getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000880), &(0x7f0000000740)=0x4) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8, 0x4}, 0x38) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000098e1ffdaee26c3a3756cac00b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r11, 0x0, 0xffffffff}, 0x18)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48)

1.356048235s ago: executing program 1 (id=931):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x5, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000084f6983839000000000000000c0000000000000000000000000000000000000000008000", @ANYRES32=0x0], 0x30}], 0x1, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)}, 0x0)
unshare(0x28040680)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xcf2c2865f52f4422}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x24004001)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket(0x26, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r7, @ANYBLOB="8304c4fe05000013b83210a3a1656e000100677265001c00028008000600ac1414bb06000e000100000006000f00b76f9700"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
select(0x40, &(0x7f0000000000)={0x400000000, 0x5, 0x2, 0x82, 0x80, 0xd0ef, 0xe5d5, 0x9}, 0x0, &(0x7f0000000140)={0x69f, 0xfffffffffffffffa, 0x3ff, 0x2, 0x7ff, 0x100, 0x80000000000101, 0x8000}, &(0x7f0000000200))
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x41)
socket$inet6(0xa, 0x2, 0x0)

1.100228368s ago: executing program 0 (id=932):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', <r0=>0x0, 0x8000, 0x1, 0x2, 0x3, {{0xd, 0x4, 0x1, 0x4, 0x34, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@timestamp_prespec={0x44, 0x1c, 0x64, 0x3, 0xf, [{@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@loopback, 0x80000000}]}, @noop]}}}}}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0xfffffffffffffe96, 0x0, 0x1, 0x0, 0x0, 0x4c045}, 0x30004020)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf250700000005002f000000000005002d000100000008003a0001000000060028000000000008000300", @ANYRES32=r0, @ANYBLOB="05002d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async)
pipe(&(0x7f00000045c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x32, 0xffffffffffffffff, 0x2000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040051) (async)
r4 = socket$l2tp(0x2, 0x2, 0x73)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="f5c1a85e24484d3cb0b3bd5f25d980daa01e8f6f10fbdd949de526a7dee3a9", @ANYRES16=r5, @ANYBLOB="0100"], 0x24}, 0x1, 0x0, 0x0, 0x2c008899}, 0x4000010) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800b00010067726574617000"], 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
sendto$l2tp(r4, &(0x7f00000016c0)="b3", 0x1, 0x4000, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100, 0x1}, 0x10) (async)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x8000, 0x5, 0x8000, 0x3, 0xfffffffe}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="ce9ada", 0x3}], 0x1, 0x1) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, 0x0, 0x0) (async)
accept4(r6, 0x0, 0x0, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00082abd7000ffdbdf25540000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000100000a000600ffffffffffff00000a000600ffffffffffff00000bf9c8bd4b567a42a47e6d4ffef16e2221da7493b4198df9a1fcf5fef46a3888d00556a85cd896c7878697986570ea57f575be65aea1e31755f00ff77ad515fda8eb614ee75bf3"], 0x74}, 0x1, 0x0, 0x0, 0x15}, 0x40000) (async)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback={0x0, 0xffff888101827518}, 0x0, 0x40}})
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff})
connect$unix(r9, 0x0, 0x0)

1.088536433s ago: executing program 0 (id=933):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa0600000000000000"], 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
unshare(0x24020400)
r2 = epoll_create(0xc)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, 0x0, 0x2d, 0x0, @val=@uprobe_multi={&(0x7f0000000080)='./file0\x00', &(0x7f0000000500)=[0x4], &(0x7f0000000540)=[0x1], 0x81, 0x1, 0x1, 0xffffffffffffffff}}, 0x40)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000400)={<r6=>r5})
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cgroup.stat\x00', 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)=@o_path={&(0x7f0000000440)='./file0\x00', r7, 0x4000, r5}, 0x18)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000001c0)={<r8=>r0})
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4)
sendmmsg$inet6(r9, &(0x7f0000006b80)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0xfff, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2f2}}], 0x1, 0x0)
recvfrom$inet6(r9, 0x0, 0x0, 0x12003, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573164d39ad8e0267632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r10 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={<r11=>0x0, 0x9}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000380)={r11, 0x6b, "6548c414810ab876b731ad8056165bd3bc1732eb86aeb8e6ac28ccfb4b3e28f18ad72010374c3102b45aa44ed5d3cba3bb57bde61bb89c3f4408993a66e305d3c57c968eed21766ec8238559eb51794722dc267da292cfbd8fca0dfdfb5c7384c7b5daf53625f47d6a96ca"}, &(0x7f0000000300)=0x73)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
r12 = socket$inet6(0xa, 0x3, 0x103)
setsockopt$inet6_int(r12, 0x29, 0x43, 0x0, 0x0)

479.283994ms ago: executing program 1 (id=940):
socket(0x2a, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x420000, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r5, 0x0)
r6 = accept(r5, 0x0, 0x0)
sendto$inet6(r6, &(0x7f00000003c0)="7c76b42919", 0x5, 0x11, 0x0, 0x0)
accept$alg(r6, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@gettfilter={0x54, 0x2e, 0x10, 0x1070bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xa, 0x5}, {0x2, 0x4}, {0x10, 0x9}}, [{0x8, 0xb, 0xb1f6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@newqdisc={0x160, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0x2, 0xb}, {0x3, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x1b, 0x3}}, @qdisc_kind_options=@q_cbq={{0x8}, {0xf4, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x8001, 0x3, 0x2, 0x9}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x40da, 0x9, 0x1}}, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x79, 0x7, 0x401}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x2, 0xb51, 0x23, 0xfffffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x0, 0x1000, 0x9, 0x51}}, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x5b8d, 0x8, 0x2, 0x12d584a7}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf, '\x00', 0x200, 0x5, 0x1, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x1, 0x94, 0x8, 0xfffffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3, 0x9, 0x20a7, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x9, 0x9, 0xfffffffe, 0xe}}]}}, @qdisc_kind_options=@q_gred={{0x9}, {0x24, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x5bf7c1b}, @TCA_GRED_MAX_P={0x8, 0x4, 0x401}, @TCA_GRED_DPS={0x10, 0x3, {0x3, 0x5, 0x1, 0x7}}]}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x160}}, 0x4008000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x5, 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

330.059859ms ago: executing program 2 (id=941):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r5, 0x0)
openat$cgroup_freezer_state(r5, &(0x7f0000000180), 0x2, 0x0) (async)
close(r4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xca4, 0x400, 0x4b, 0x5c75, 0x800, 0xc, 0x1, 0xffffffff, 0x400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0x0, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc031}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

208.858008ms ago: executing program 2 (id=942):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r5=>0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)

207.918395ms ago: executing program 0 (id=943):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
socket(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r6 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
readv(r6, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880)
recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRESOCT=r6, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

140.054584ms ago: executing program 0 (id=944):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$pptp(0x18, 0x1, 0x2)
close(0x3)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x40}}, 0x0)

138.196267ms ago: executing program 2 (id=945):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000011c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x4}, 0x1c) (async, rerun: 32)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
listen(r5, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
unshare(0x20000400)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x11)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r9=>0x0}) (rerun: 32)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) (async, rerun: 32)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)
listen(r12, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r13, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

137.825721ms ago: executing program 0 (id=946):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
unshare(0x6a040080)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xb, 0x323b, 0x3a}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0x7, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
unshare(0x32050100)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380), 0xe)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r7, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0)
shutdown(r7, 0x0)
recvfrom(r7, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, &(0x7f0000000180))
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'})

137.21307ms ago: executing program 2 (id=947):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f00000003c0)=0x7, 0x4) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x0, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x3, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000020000000000000d0000000000005f"], 0x0, 0x34}, 0x28) (async)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)

60.29755ms ago: executing program 2 (id=948):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={<r4=>0x0, 0xdc, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e23, 0x0, @mcast2, 0xd465}, @in6={0xa, 0x4e22, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e21, 0x5000, @empty, 0x3}, @in={0x2, 0x4e20, @private=0xa010102}, @in6={0xa, 0x4e22, 0xbe, @dev={0xfe, 0x80, '\x00', 0x30}, 0xfff}]}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0x100}, &(0x7f0000000280)=0x8)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

0s ago: executing program 2 (id=949):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r3 = socket(0xa, 0x3, 0x3)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x29}, 0x8)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) (async)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x18)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
write$cgroup_int(r8, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28892' (ED25519) to the list of known hosts.
syzkaller login: [   40.608448][ T5782] cgroup: Unknown subsys name 'net'
[   40.691802][ T5782] cgroup: Unknown subsys name 'cpuset'
[   40.695299][ T5782] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.247148][ T5782] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.903784][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.906810][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.910052][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.913815][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.916292][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.929455][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.941617][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.944635][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.947548][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.950927][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.954540][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.957861][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.961618][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.965072][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.996167][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.051516][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   46.126284][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.129272][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.131543][ T5848] bridge_slave_0: entered allmulticast mode
[   46.133890][ T5848] bridge_slave_0: entered promiscuous mode
[   46.141049][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.143978][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.146886][ T5848] bridge_slave_1: entered allmulticast mode
[   46.150612][ T5848] bridge_slave_1: entered promiscuous mode
[   46.172067][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.177008][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.195564][ T5848] team0: Port device team_slave_0 added
[   46.199877][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   46.206419][ T5848] team0: Port device team_slave_1 added
[   46.249258][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.251878][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.261776][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.270089][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.272872][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.283350][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.301859][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   46.318251][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.320979][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.323245][ T5851] bridge_slave_0: entered allmulticast mode
[   46.325752][ T5851] bridge_slave_0: entered promiscuous mode
[   46.346736][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.349801][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.352591][ T5851] bridge_slave_1: entered allmulticast mode
[   46.355228][ T5851] bridge_slave_1: entered promiscuous mode
[   46.360634][ T5848] hsr_slave_0: entered promiscuous mode
[   46.362817][ T5848] hsr_slave_1: entered promiscuous mode
[   46.395855][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.411324][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.414251][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.416473][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.419027][ T5853] bridge_slave_0: entered allmulticast mode
[   46.421944][ T5853] bridge_slave_0: entered promiscuous mode
[   46.432316][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.435204][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.437764][ T5853] bridge_slave_1: entered allmulticast mode
[   46.441406][ T5853] bridge_slave_1: entered promiscuous mode
[   46.468131][ T5851] team0: Port device team_slave_0 added
[   46.471612][ T5851] team0: Port device team_slave_1 added
[   46.481758][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.488081][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.496229][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.498751][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.507127][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.523110][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.525711][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.535499][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.566651][ T5853] team0: Port device team_slave_0 added
[   46.572550][ T5851] hsr_slave_0: entered promiscuous mode
[   46.574635][ T5851] hsr_slave_1: entered promiscuous mode
[   46.576663][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   46.578913][ T5851] Cannot create hsr debugfs directory
[   46.582650][ T5853] team0: Port device team_slave_1 added
[   46.603715][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.606027][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.615026][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.624100][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.626340][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.634841][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.677803][ T5853] hsr_slave_0: entered promiscuous mode
[   46.680729][ T5853] hsr_slave_1: entered promiscuous mode
[   46.683294][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   46.685449][ T5853] Cannot create hsr debugfs directory
[   46.689575][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.694765][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.701530][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.718412][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.765753][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.768411][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.771311][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.773898][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.828564][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.833821][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.838278][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.850292][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.879775][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.888788][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.891612][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.893955][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.896112][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.900114][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.908636][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.913155][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.922888][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.947124][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.950896][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.955933][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.960374][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.972438][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   46.984712][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.987578][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.996958][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.999859][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.025202][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.052032][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   47.064276][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.066831][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.083731][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.090371][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.093170][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.118021][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   47.141544][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.143844][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.154151][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.157013][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.183736][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.197136][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.251138][ T5848] veth0_vlan: entered promiscuous mode
[   47.264169][ T5848] veth1_vlan: entered promiscuous mode
[   47.271727][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.304889][ T5848] veth0_macvtap: entered promiscuous mode
[   47.325168][ T5848] veth1_macvtap: entered promiscuous mode
[   47.333399][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.345873][ T5851] veth0_vlan: entered promiscuous mode
[   47.355009][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.368112][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.376575][ T5851] veth1_vlan: entered promiscuous mode
[   47.383349][ T5899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.390101][ T5899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.394544][ T5899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.397617][ T5899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.406332][ T5853] veth0_vlan: entered promiscuous mode
[   47.421832][ T5853] veth1_vlan: entered promiscuous mode
[   47.444585][ T5851] veth0_macvtap: entered promiscuous mode
[   47.448219][ T5851] veth1_macvtap: entered promiscuous mode
[   47.467120][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.467256][ T5853] veth0_macvtap: entered promiscuous mode
[   47.473979][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.475160][ T5853] veth1_macvtap: entered promiscuous mode
[   47.485001][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.497443][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.510797][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.511903][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.516974][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.517016][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.523666][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.529462][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.532612][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.537596][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.549400][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.559003][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.570528][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.572421][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.580060][ T5879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.627704][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.633608][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.671824][  T876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.674841][  T876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.703934][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.712841][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.725112][  T876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.728327][  T876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.819174][ T5922] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.855102][ T5922] bridge_slave_0: left allmulticast mode
[   47.858624][ T5922] bridge_slave_0: left promiscuous mode
[   47.862837][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.876071][ T5922] bridge_slave_1: left allmulticast mode
[   47.880376][ T5922] bridge_slave_1: left promiscuous mode
[   47.882681][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.891714][ T5922] bond0: (slave bond_slave_0): Releasing backup interface
[   47.897142][ T5922] bond0: (slave bond_slave_1): Releasing backup interface
[   47.911171][ T5922] team0: Port device team_slave_0 removed
[   47.915050][ T5922] team0: Port device team_slave_1 removed
[   47.917233][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.920752][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.925808][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.929183][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.938882][ T5852] Bluetooth: hci0: command tx timeout
[   47.944268][ T5931] batman_adv: batadv0: Adding interface: ipvlan2
[   47.947449][ T5933] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   47.951630][ T5931] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.969762][ T5933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   47.974487][ T5922] Zero length message leads to an empty skb
[   47.978170][ T5933] netlink: 'syz.0.6': attribute type 10 has an invalid length.
[   47.983097][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   47.987369][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   47.992903][ T5931] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   48.018766][ T5852] Bluetooth: hci2: command tx timeout
[   48.021127][ T5852] Bluetooth: hci1: command tx timeout
[   48.021254][ T5933] veth0_vlan: left promiscuous mode
[   48.026583][ T5933] veth0_vlan: entered promiscuous mode
[   48.040032][ T5933] team0: Device veth0_vlan failed to register rx_handler
[   48.220595][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'.
[   48.302094][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'.
[   48.314280][ T5966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14'.
[   48.317121][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'.
[   48.325218][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'.
[   48.429865][ T5968] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15'.
[   48.453086][ T5971] pim6reg: entered allmulticast mode
[   48.456999][ T5971] pim6reg: left allmulticast mode
[   48.531515][ T5976] bond0: entered promiscuous mode
[   48.533620][ T5976] bond_slave_0: entered promiscuous mode
[   48.538966][ T5976] bond_slave_1: entered promiscuous mode
[   48.541857][ T5976] batadv0: entered promiscuous mode
[   48.544935][ T5976] 8021q: adding VLAN 0 to HW filter on device hsr1
[   48.578098][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'.
[   48.688046][ T5983] 8021q: adding VLAN 0 to HW filter on device bond1
[   48.752106][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'.
[   48.755538][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'.
[   48.761823][ T5997] netlink: 200 bytes leftover after parsing attributes in process `syz.2.24'.
[   48.782838][ T6000] syzkaller0: entered promiscuous mode
[   48.784887][ T6000] syzkaller0: entered allmulticast mode
[   48.799842][ T5999] tipc: Started in network mode
[   48.808662][ T5999] tipc: Node identity e246eaefb288, cluster identity 4711
[   48.812392][ T5999] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.830163][ T5999] tipc: Resetting bearer <eth:syzkaller0>
[   48.842701][ T5999] tipc: Disabling bearer <eth:syzkaller0>
[   48.915213][ T6008] netlink: 'syz.1.27': attribute type 5 has an invalid length.
[   49.281607][ T6020] dvmrp4: entered allmulticast mode
[   49.328702][ T6019] nbd0: detected capacity change from 0 to 549764202496
[   49.332931][   T55] block nbd0: Receive control failed (result -104)
[   49.352675][ T6023] batadv_slave_0: entered promiscuous mode
[   49.355768][ T6023] batadv_slave_0: left promiscuous mode
[   49.465594][ T6030] tipc: Started in network mode
[   49.467377][ T6030] tipc: Node identity fa999f8ae595, cluster identity 4711
[   49.471117][ T6030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.475305][ T6030] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET)
[   49.478448][ T6030] syzkaller0: entered promiscuous mode
[   49.481013][ T6030] syzkaller0: entered allmulticast mode
[   49.485884][ T6029] tipc: Resetting bearer <eth:syzkaller0>
[   49.490954][ T6029] tipc: Disabling bearer <eth:syzkaller0>
[   49.779742][ T6038] netlink: 'syz.2.33': attribute type 13 has an invalid length.
[   49.782720][ T6038] netlink: 'syz.2.33': attribute type 17 has an invalid length.
[   49.816363][ T6038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   49.960916][ T6041] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   49.965280][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.968346][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.017743][ T6050] tipc: Started in network mode
[   50.021373][ T6050] tipc: Node identity 3e7b2e8e6cbb, cluster identity 4711
[   50.023742][ T6050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.027119][ T6050] syzkaller0: entered promiscuous mode
[   50.028607][ T5860] Bluetooth: hci0: command tx timeout
[   50.029265][ T6050] syzkaller0: entered allmulticast mode
[   50.045787][ T6050] tipc: Resetting bearer <eth:syzkaller0>
[   50.109306][ T5852] Bluetooth: hci2: command tx timeout
[   50.110496][ T5860] Bluetooth: hci1: command tx timeout
[   50.316719][ T6054] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   50.390907][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.393539][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.421473][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.426656][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.464241][ T5693] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.467115][ T5693] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.470089][ T5693] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.473302][ T5693] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.549496][ T6049] tipc: Resetting bearer <eth:syzkaller0>
[   50.553872][ T6049] tipc: Disabling bearer <eth:syzkaller0>
[   50.625461][ T6057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.631420][ T6057] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20001
[   50.656492][ T6059] bridge0: port 3(syz_tun) entered blocking state
[   50.660229][ T6059] bridge0: port 3(syz_tun) entered disabled state
[   50.663077][ T6059] syz_tun: entered allmulticast mode
[   50.666020][ T6059] syz_tun: entered promiscuous mode
[   50.692798][ T6061] macsec1: entered promiscuous mode
[   50.695034][ T6061] macsec1: entered allmulticast mode
[   50.714685][ T6064] netlink: 'syz.2.41': attribute type 1 has an invalid length.
[   50.772084][ T6071] netlink: 'syz.2.43': attribute type 1 has an invalid length.
[   50.897556][ T6073] batman_adv: batadv0: Adding interface: ip6gretap1
[   50.900603][ T6073] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.911032][ T6073] batman_adv: batadv0: Interface activated: ip6gretap1
[   51.241978][ T6086] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   51.267867][ T6091] netlink: 'syz.1.48': attribute type 10 has an invalid length.
[   51.275191][ T6091] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   51.318261][ T6103] bridge1: entered promiscuous mode
[   51.322832][ T6103] bridge1: entered allmulticast mode
[   51.326173][ T6104] netlink: 'syz.1.49': attribute type 4 has an invalid length.
[   51.396844][ T6112] openvswitch: netlink: IP tunnel dst address not specified
[   51.432130][ T6115] 0: renamed from hsr0 (while UP)
[   51.435605][ T6115] 0: entered allmulticast mode
[   51.437554][ T6115] hsr_slave_0: entered allmulticast mode
[   51.443983][ T6115] hsr_slave_1: entered allmulticast mode
[   51.447628][ T6115] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   51.670937][ T6140] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   51.686189][ T6141] bond0: (slave wlan1): Releasing backup interface
[   51.698203][ T6141] netlink: 'syz.1.57': attribute type 10 has an invalid length.
[   51.698220][ T6140] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   51.706031][ T6140] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.711846][ T6140] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   52.098621][ T5860] Bluetooth: hci0: command tx timeout
[   52.178727][ T5860] Bluetooth: hci2: command tx timeout
[   52.188664][ T5860] Bluetooth: hci1: command tx timeout
[   52.389907][ T6163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.399158][ T6163] syzkaller0: entered promiscuous mode
[   52.403811][ T6163] syzkaller0: entered allmulticast mode
[   52.502514][    T9] cfg80211: failed to load regulatory.db
[   53.212290][ T6162] tipc: Resetting bearer <eth:syzkaller0>
[   53.216052][ T6162] tipc: Disabling bearer <eth:syzkaller0>
[   53.300947][ T6201] Bluetooth: MGMT ver 1.23
[   53.302170][ T6203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.305797][ T6201] __nla_validate_parse: 13 callbacks suppressed
[   53.305805][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'.
[   53.308160][ T6203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'.
[   53.311564][ T6201] bridge_slave_1: left allmulticast mode
[   53.315643][ T6201] bridge_slave_1: left promiscuous mode
[   53.317746][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.324803][ T6201] bridge_slave_0: left allmulticast mode
[   53.327577][ T6201] bridge_slave_0: left promiscuous mode
[   53.330959][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.481972][ T6210] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   53.487675][ T6210] bond0: (slave bond_slave_0): Releasing backup interface
[   53.497524][ T6210] bond0: (slave bond_slave_1): Releasing backup interface
[   53.503224][ T6210] team0: Port device team_slave_0 removed
[   53.506433][ T6210] team0: Port device team_slave_1 removed
[   53.511101][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.519981][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.527120][ T6210] batman_adv: batadv0: Removing interface: ipvlan2
[   53.640232][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'.
[   53.647886][ T6225] syz_tun: left allmulticast mode
[   53.650587][ T6225] syz_tun: left promiscuous mode
[   53.655255][ T6225] bridge0: port 3(syz_tun) entered disabled state
[   53.675054][ T6225] bridge_slave_0: left allmulticast mode
[   53.676911][ T6225] bridge_slave_0: left promiscuous mode
[   53.679422][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.686800][ T6225] bridge_slave_1: left allmulticast mode
[   53.690357][ T6225] bridge_slave_1: left promiscuous mode
[   53.693411][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.704974][ T6232] netlink: 116 bytes leftover after parsing attributes in process `syz.0.78'.
[   53.708967][ T6225] bond0: (slave bond_slave_0): Releasing backup interface
[   53.711938][ T6225] bond_slave_0: left promiscuous mode
[   53.713819][ T6234] netlink: 32 bytes leftover after parsing attributes in process `syz.1.79'.
[   53.713831][ T6235] rdma_op ffff88811a7ed1f0 conn xmit_rdma 0000000000000000
[   53.725974][ T6225] bond0: (slave bond_slave_1): Releasing backup interface
[   53.733646][ T6225] bond_slave_1: left promiscuous mode
[   53.735565][ T6235] validate_nla: 2 callbacks suppressed
[   53.735602][ T6235] netlink: 'syz.2.74': attribute type 10 has an invalid length.
[   53.744593][ T6225] team0: Port device team_slave_0 removed
[   53.750731][ T6225] team0: Port device team_slave_1 removed
[   53.753126][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.755949][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.760357][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.762692][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.769739][ T6225] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   53.772513][ T6225] batman_adv: batadv0: Removing interface: ip6gretap1
[   53.794025][ T6235] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   53.797332][ T6235] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   53.951407][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'.
[   54.051973][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'.
[   54.055060][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.83'.
[   54.061738][ T6248] netlink: 'syz.0.83': attribute type 17 has an invalid length.
[   54.066141][ T6248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   54.178743][ T5860] Bluetooth: hci0: command tx timeout
[   54.213469][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'.
[   54.258829][ T5860] Bluetooth: hci2: command tx timeout
[   54.260952][ T5852] Bluetooth: hci1: command tx timeout
[   54.364267][ T6254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.86'.
[   54.376445][ T6254] smc: net device bond0 applied user defined pnetid SYZ2
[   54.392090][ T6254] smc: removing net device bond0 with user defined pnetid SYZ2
[   54.395679][ T6254] bond0 (unregistering): Released all slaves
[   54.644635][ T6268] netlink: 'syz.0.90': attribute type 1 has an invalid length.
[   54.674082][ T6268] smc: adding net device bond0 with user defined pnetid SYZ2
[   54.679431][ T6271] !: renamed from dummy0 (while UP)
[   54.710730][ T6268] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   54.739982][ T5879] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   54.748880][ T6268] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.798925][ T6280] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   54.848877][ T5879] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   54.968056][ T6306] netlink: 'syz.1.103': attribute type 1 has an invalid length.
[   54.984034][ T6306] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   55.016904][ T6310] netlink: 'syz.1.105': attribute type 10 has an invalid length.
[   55.043709][ T6313] macvlan2: entered allmulticast mode
[   55.045538][ T6313] veth1_vlan: entered allmulticast mode
[   55.048332][ T6313] veth1_vlan: left allmulticast mode
[   55.167255][ T6329] netlink: 'syz.2.110': attribute type 1 has an invalid length.
[   55.207104][ T6334] IPv6: sit1: Disabled Multicast RS
[   55.211540][ T6334] sit1: entered allmulticast mode
[   55.227596][ T6329] 8021q: adding VLAN 0 to HW filter on device bond3
[   55.231038][ T6329] bond2: (slave bond3): making interface the new active one
[   55.233637][ T6329] bond2: (slave bond3): Enslaving as an active interface with an up link
[   55.248714][ T6329] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   55.253481][ T6329] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   55.380483][ T6349] netlink: 'syz.0.118': attribute type 4 has an invalid length.
[   55.401570][ T6355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.406119][ T6355] syzkaller0: entered promiscuous mode
[   55.415380][ T6355] syzkaller0: entered allmulticast mode
[   55.478215][ T6354] tipc: Resetting bearer <eth:syzkaller0>
[   55.487851][ T6354] tipc: Disabling bearer <eth:syzkaller0>
[   55.582321][ T6374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.632419][ T6374] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   55.634816][ T6374] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   55.642284][ T6374] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   55.701536][ T6377] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   55.704538][ T6377] team0: Device ipvlan2 is already an upper device of the team interface
[   55.737163][ T6379] netlink: 'syz.2.126': attribute type 6 has an invalid length.
[   55.747276][ T6379] netlink: 'syz.2.126': attribute type 12 has an invalid length.
[   55.817861][ T6387] netlink: 'syz.2.130': attribute type 1 has an invalid length.
[   55.849808][ T6389] 8021q: VLANs not supported on gre0
[   55.907543][ T6387] veth3: entered promiscuous mode
[   55.923186][ T6401] netem: incorrect ge model size
[   55.926017][ T6401] netem: change failed
[   55.940848][ T5879] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   55.945425][ T5879] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   55.950535][ T5879] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   55.964356][ T5879] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.971449][ T6386] delete_channel: no stack
[   56.096618][ T6416] bond0: (slave wlan1): Releasing backup interface
[   56.106054][ T6416] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   56.125816][ T6416] bond2: (slave bond3): Releasing backup interface
[   56.187643][ T6416] syz.2.139 (6416) used greatest stack depth: 20080 bytes left
[   56.194756][ T6425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.205609][ T6425] syzkaller0: entered promiscuous mode
[   56.207334][ T6425] syzkaller0: entered allmulticast mode
[   56.235136][ T6425] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   56.247672][ T6425] tipc: Resetting bearer <eth:syzkaller0>
[   56.252902][ T6422] tipc: Resetting bearer <eth:syzkaller0>
[   56.257350][ T6422] tipc: Disabling bearer <eth:syzkaller0>
[   56.262085][ T6435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.264494][ T6435] syzkaller0: entered promiscuous mode
[   56.266593][ T6435] syzkaller0: entered allmulticast mode
[   56.272297][ T6435] tipc: Resetting bearer <eth:syzkaller0>
[   56.275181][ T6434] tipc: Resetting bearer <eth:syzkaller0>
[   56.278523][ T6434] tipc: Disabling bearer <eth:syzkaller0>
[   56.334873][ T6438] bridge: RTM_NEWNEIGH with invalid ether address
[   56.529890][ T6453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.532286][ T6453] syzkaller0: entered promiscuous mode
[   56.534101][ T6453] syzkaller0: entered allmulticast mode
[   56.540566][ T6453] tipc: Resetting bearer <eth:syzkaller0>
[   56.543085][ T6452] tipc: Resetting bearer <eth:syzkaller0>
[   56.546248][ T6452] tipc: Disabling bearer <eth:syzkaller0>
[   56.716253][ T6459] bond0: (slave ip6gretap1): Removing an active aggregator
[   56.721095][ T6459] bond0: (slave ip6gretap1): Releasing backup interface
[   56.760391][ T6462] batman_adv: batadv0: Adding interface: dummy0
[   56.762498][ T6462] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.770566][ T6462] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   56.780539][ T6462] batman_adv: batadv0: Adding interface: ip6gretap2
[   56.782824][ T6462] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.790625][ T6462] batman_adv: batadv0: Interface activated: ip6gretap2
[   56.887751][ T6465] batman_adv: batadv0: Removing interface: dummy0
[   56.893977][ T6465] team0: Port device dummy0 added
[   56.902897][ T6465] team0: Port device dummy0 removed
[   57.435882][ T6479] pimreg: entered allmulticast mode
[   57.726716][ T6500] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.733995][ T6504] bridge_slave_0: default FDB implementation only supports local addresses
[   57.737839][ T6503] bridge_slave_0: entered promiscuous mode
[   57.742645][ T6500] vlan2: entered promiscuous mode
[   57.744711][ T6500] bond1: entered promiscuous mode
[   57.746677][ T6500] vlan2: entered allmulticast mode
[   57.748377][ T6500] bond1: entered allmulticast mode
[   57.757731][ T6500] bond1: (slave gretap1): making interface the new active one
[   57.760177][ T6500] gretap1: entered promiscuous mode
[   57.762052][ T6500] gretap1: entered allmulticast mode
[   57.764366][ T6500] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   57.770114][ T6500] syz.1.167 (6500) used greatest stack depth: 18384 bytes left
[   57.821742][ T6502] bridge_slave_0: left promiscuous mode
[   57.896540][ T6518] unsupported nla_type 58
[   58.122250][ T6539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.125907][ T6539] syzkaller0: entered promiscuous mode
[   58.128088][ T6539] syzkaller0: entered allmulticast mode
[   58.160405][ T6538] tipc: Resetting bearer <eth:syzkaller0>
[   58.166528][ T6538] tipc: Disabling bearer <eth:syzkaller0>
[   58.299797][ T6548] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   58.340357][ T6562] __nla_validate_parse: 65 callbacks suppressed
[   58.340374][ T6562] netlink: 14 bytes leftover after parsing attributes in process `syz.0.181'.
[   58.390279][ T6565] netlink: 52 bytes leftover after parsing attributes in process `syz.2.183'.
[   58.393746][ T6565] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'.
[   58.397234][ T6565] 8021q: adding VLAN 0 to HW filter on device bond4
[   58.406122][ T6561] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.518095][ T6585] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   58.539152][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'.
[   58.547444][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'.
[   58.593371][ T6595] gretap0: refused to change device tx_queue_len
[   58.595620][ T6595] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   58.621893][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'.
[   58.673109][ T6600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.191'.
[   58.678047][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'.
[   58.684080][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'.
[   58.726267][ T6605] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   58.883127][ T6618] erspan0: entered promiscuous mode
[   58.891440][ T6618] 8021q: adding VLAN 0 to HW filter on device team0
[   58.917371][ T6618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.927663][ T6619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.978293][ T6621] nbd: must specify an index to disconnect
[   58.981848][ T6621] validate_nla: 19 callbacks suppressed
[   58.981870][ T6621] netlink: 'syz.2.197': attribute type 1 has an invalid length.
[   58.986074][ T6621] netlink: 'syz.2.197': attribute type 3 has an invalid length.
[   58.989217][ T6621] netlink: 'syz.2.197': attribute type 1 has an invalid length.
[   58.991933][ T6621] netlink: 204 bytes leftover after parsing attributes in process `syz.2.197'.
[   58.995360][ T6621] NCSI netlink: No device for ifindex 0
[   59.062550][ T6629] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   59.125533][ T6639] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.185588][ T6639] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.236787][ T6639] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.300151][ T6639] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.347157][ T5879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.356304][ T5879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.363701][ T5879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.366728][ T5879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.403995][ T6659] netlink: 'syz.2.201': attribute type 6 has an invalid length.
[   59.414246][ T6658] netlink: 'syz.2.201': attribute type 12 has an invalid length.
[   59.596778][ T6675] netlink: 'syz.1.204': attribute type 9 has an invalid length.
[   59.617553][ T6675] 8021q: adding VLAN 0 to HW filter on device bond2
[   59.626798][ T6675] macsec1: entered promiscuous mode
[   59.629174][ T6675] bond2: entered promiscuous mode
[   59.631546][ T6675] macsec1: entered allmulticast mode
[   59.633959][ T6675] bond2: entered allmulticast mode
[   59.637399][ T6675] bond2: left allmulticast mode
[   59.641379][ T6675] bond2: left promiscuous mode
[   59.713644][ T6688] bond0: Master is either lo or non-ether device
[   59.748034][ T6692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.806234][ T6699] mac80211_hwsim hwsim5 ;: renamed from wlan0
[   60.063535][ T6720] batman_adv: batadv0: Interface deactivated: ip6gretap2
[   60.065862][ T6720] batman_adv: batadv0: Removing interface: ip6gretap2
[   60.073326][ T6720] netlink: 'syz.0.214': attribute type 10 has an invalid length.
[   60.076099][ T6720] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   60.081288][ T6720] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   60.084441][ T6720] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   60.700223][ T6723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.722869][ T6723] syzkaller0: entered promiscuous mode
[   60.725177][ T6723] syzkaller0: entered allmulticast mode
[   60.760449][ T6723] syzkaller0: mtu less than device minimum
[   60.763182][ T6722] tipc: Resetting bearer <eth:syzkaller0>
[   60.769112][ T6722] tipc: Disabling bearer <eth:syzkaller0>
[   60.917649][ T6727] dvmrp8: entered allmulticast mode
[   60.926165][ T6726] dvmrp8: left allmulticast mode
[   60.996464][ T6741] netlink: 'syz.1.220': attribute type 58 has an invalid length.
[   61.048034][ T6745] vlan3: entered allmulticast mode
[   61.051507][ T6745] bridge_slave_0: entered allmulticast mode
[   61.138391][ T6755] gretap0: entered promiscuous mode
[   61.142109][ T6749] syzkaller1: entered promiscuous mode
[   61.144431][ T6749] syzkaller1: entered allmulticast mode
[   61.150640][ T6755] netlink: 'syz.0.225': attribute type 30 has an invalid length.
[   61.153379][ T6749] veth2: entered promiscuous mode
[   61.155529][ T6749] veth2: entered allmulticast mode
[   61.369559][ T6764] netlink: 'syz.1.227': attribute type 11 has an invalid length.
[   61.531436][ T6779] netlink: 'syz.0.232': attribute type 1 has an invalid length.
[   61.573268][ T5693] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   61.576083][ T5693] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.579856][ T5693] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.582727][ T5693] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.452124][ T6815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.457432][ T5879] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   62.461684][ T5879] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.464733][ T5879] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   62.467614][ T5879] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.488763][ T5879] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   62.491604][ T5879] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.495140][ T5879] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   62.498120][ T5879] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.555606][ T6818] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   63.195564][ T6831] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.262042][ T6831] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.312583][ T6831] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.361664][ T6831] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.542103][ T6840] veth0_macvtap: left promiscuous mode
[   63.544972][ T6840] team0: Device veth0_macvtap failed to register rx_handler
[   63.772917][ T6848] __nla_validate_parse: 19 callbacks suppressed
[   63.772935][ T6848] netlink: 100 bytes leftover after parsing attributes in process `syz.0.251'.
[   63.781586][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'.
[   63.785474][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'.
[   63.957527][ T6861] netlink: 44 bytes leftover after parsing attributes in process `syz.1.255'.
[   64.139502][ T6880] validate_nla: 10 callbacks suppressed
[   64.139520][ T6880] netlink: 'syz.0.259': attribute type 4 has an invalid length.
[   64.160016][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.260'.
[   64.178276][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'.
[   64.257682][ T6892] netlink: 'syz.1.262': attribute type 13 has an invalid length.
[   64.375315][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'.
[   64.378318][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.265'.
[   64.413595][ T6904] syzkaller1: entered promiscuous mode
[   64.415861][ T6904] syzkaller1: entered allmulticast mode
[   64.451365][ T6905] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.612293][ T5899] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.619197][ T5899] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.627025][ T5899] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.633105][ T5693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.681266][ T6915] bond6: entered promiscuous mode
[   64.683187][ T6915] 8021q: adding VLAN 0 to HW filter on device bond6
[   64.715906][ T6923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'.
[   64.830900][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   64.854329][ T6934] netlink: 'syz.2.273': attribute type 12 has an invalid length.
[   64.934375][ T6937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.948920][ T6937] syzkaller0: entered promiscuous mode
[   64.952279][ T6937] syzkaller0: entered allmulticast mode
[   64.957274][ T6937] tipc: Resetting bearer <eth:syzkaller0>
[   64.964720][ T6937] tipc: Disabling bearer <eth:syzkaller0>
[   65.060071][ T6953] netlink: 'syz.2.277': attribute type 10 has an invalid length.
[   65.062934][ T6953] syz_tun: entered promiscuous mode
[   65.069012][ T6953] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   65.086420][ T6954] netlink: 'syz.1.278': attribute type 13 has an invalid length.
[   65.088969][ T6954] netlink: 'syz.1.278': attribute type 17 has an invalid length.
[   65.130381][ T6954] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.133408][ T6954] 8021q: adding VLAN 0 to HW filter on device team0
[   65.137456][ T6954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.326437][ T6966] tap0: tun_chr_ioctl cmd 1074025677
[   65.328406][ T6966] tap0: linktype set to 776
[   65.379285][ T6971] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   65.953641][ T6988] netlink: 'syz.2.286': attribute type 5 has an invalid length.
[   66.005448][ T6992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.009804][ T6992] syzkaller0: entered promiscuous mode
[   66.014232][ T6992] syzkaller0: entered allmulticast mode
[   66.024267][ T6992] tipc: Resetting bearer <eth:syzkaller0>
[   66.052020][ T6991] tipc: Resetting bearer <eth:syzkaller0>
[   66.056317][ T6991] tipc: Disabling bearer <eth:syzkaller0>
[   66.216813][ T7011] netlink: 'syz.1.292': attribute type 2 has an invalid length.
[   66.227063][ T7011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.268274][ T7014] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   66.488829][ T7029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.534810][ T7032] netlink: 'syz.0.297': attribute type 7 has an invalid length.
[   66.697656][ T7039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.701354][ T7039] syzkaller0: entered promiscuous mode
[   66.704168][ T7039] syzkaller0: entered allmulticast mode
[   66.748676][ T7038] tipc: Resetting bearer <eth:syzkaller0>
[   66.756024][ T7038] tipc: Disabling bearer <eth:syzkaller0>
[   66.847151][ T7043] netlink: 'syz.0.301': attribute type 10 has an invalid length.
[   66.901509][ T7051] veth1: entered promiscuous mode
[   66.903367][ T7051] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   67.047182][ T7058] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   67.050520][ T7058] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   67.083381][ T7058] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   67.092782][ T7058] bond3: entered promiscuous mode
[   67.094863][ T7058] bond3: entered allmulticast mode
[   67.097141][ T7058] 8021q: adding VLAN 0 to HW filter on device bond3
[   67.486446][ T7072] bond4 (unregistering): Released all slaves
[   67.655309][ T7085] ipvlan2: entered promiscuous mode
[   67.657424][ T7085] bridge0: port 1(ipvlan2) entered blocking state
[   67.661213][ T7085] bridge0: port 1(ipvlan2) entered disabled state
[   67.663438][ T7085] ipvlan2: entered allmulticast mode
[   67.665159][ T7085] gretap0: entered allmulticast mode
[   67.667369][ T7085] ipvlan2: left allmulticast mode
[   67.669709][ T7085] gretap0: left allmulticast mode
[   68.040465][ T7100] batman_adv: batadv0: Adding interface: ip6gretap1
[   68.043299][ T7100] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.053885][ T7100] batman_adv: batadv0: Interface activated: ip6gretap1
[   68.116244][ T7103] bond0: (slave wlan1): Releasing backup interface
[   68.123533][ T7103] bond0: Destroying bond
[   68.128174][ T7103] bond0 (unregistering): Released all slaves
[   68.458822][ T7129] hsr_slave_0: left promiscuous mode
[   68.462945][ T7129] hsr_slave_1: left promiscuous mode
[   68.481831][ T7135] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.522347][ T7141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.525091][ T7141] syzkaller0: entered promiscuous mode
[   68.527390][ T7141] syzkaller0: entered allmulticast mode
[   68.533213][ T7141] tipc: Resetting bearer <eth:syzkaller0>
[   68.535831][ T7140] tipc: Resetting bearer <eth:syzkaller0>
[   68.543751][ T7140] tipc: Disabling bearer <eth:syzkaller0>
[   68.572595][ T7143] bond4: entered promiscuous mode
[   68.759511][ T7157] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4.
[   68.826183][ T7157] __nla_validate_parse: 33 callbacks suppressed
[   68.826203][ T7157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'.
[   68.834042][ T7157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'.
[   69.474124][ T7182] syzkaller0: entered promiscuous mode
[   69.476321][ T7182] syzkaller0: entered allmulticast mode
[   69.591249][ T7187] sctp: [Deprecated]: syz.0.338 (pid 7187) Use of struct sctp_assoc_value in delayed_ack socket option.
[   69.591249][ T7187] Use struct sctp_sack_info instead
[   69.765718][ T7196] bridge4: entered promiscuous mode
[   69.768165][ T7196] bridge4: entered allmulticast mode
[   69.772226][ T7196] team0: Port device bridge4 added
[   69.791329][ T7200] validate_nla: 4 callbacks suppressed
[   69.791339][ T7200] netlink: 'syz.2.342': attribute type 10 has an invalid length.
[   69.805283][ T7200] netlink: 'syz.2.342': attribute type 10 has an invalid length.
[   69.811155][ T7200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.342'.
[   69.813890][ T7200] batadv0: entered allmulticast mode
[   69.827839][ T7200] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   70.025508][ T7227] netlink: 240 bytes leftover after parsing attributes in process `syz.0.344'.
[   70.102601][ T7235] vlan3: entered promiscuous mode
[   70.104415][ T7235] vlan3: entered allmulticast mode
[   70.106230][ T7235] hsr_slave_1: entered allmulticast mode
[   70.158149][ T7248] netlink: zone id is out of range
[   70.162899][ T7248] netlink: zone id is out of range
[   70.165220][ T7248] netlink: zone id is out of range
[   70.167446][ T7248] netlink: zone id is out of range
[   70.170938][ T7248] netlink: zone id is out of range
[   70.174716][ T7248] netlink: zone id is out of range
[   70.176532][ T7248] netlink: zone id is out of range
[   70.181932][ T7248] netlink: zone id is out of range
[   70.184163][ T7248] netlink: zone id is out of range
[   70.189669][ T7248] netlink: zone id is out of range
[   70.191681][ T7248] bridge0: port 1(macsec0) entered blocking state
[   70.194379][ T7248] bridge0: port 1(macsec0) entered disabled state
[   70.197036][ T7248] macsec0: entered allmulticast mode
[   70.200250][ T7248] macsec0: entered promiscuous mode
[   70.257992][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'.
[   70.262809][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'.
[   70.277992][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'.
[   70.287543][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'.
[   70.332416][ T7276] netlink: 'syz.2.358': attribute type 1 has an invalid length.
[   70.361241][ T7276] bond8: (slave gretap1): making interface the new active one
[   70.363913][ T7276] bond8: (slave gretap1): Enslaving as an active interface with an up link
[   70.434347][ T7285] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.552227][ T7285] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.591664][ T7285] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.627791][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'.
[   70.665962][ T7285] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.683589][ T7296] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[   70.747767][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[   70.766381][ T5879] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.774540][ T5879] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.781580][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.788371][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.927250][ T7316] netlink: 'syz.0.369': attribute type 1 has an invalid length.
[   70.978692][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[   71.005537][ T7325] netlink: 'syz.0.372': attribute type 10 has an invalid length.
[   71.154994][ T7337] syzkaller1: entered promiscuous mode
[   71.157242][ T7337] syzkaller1: entered allmulticast mode
[   71.239106][ T7346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   71.242042][ T7346] IPv6: NLM_F_CREATE should be set when creating new route
[   71.244823][ T7346] IPv6: NLM_F_CREATE should be set when creating new route
[   71.247606][ T7346] IPv6: NLM_F_CREATE should be set when creating new route
[   71.254742][ T7346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   71.290005][ T7348] bridge6: port 1(veth5) entered blocking state
[   71.292155][ T7348] bridge6: port 1(veth5) entered disabled state
[   71.294168][ T7348] veth5: entered allmulticast mode
[   71.302815][ T7348] veth5: entered promiscuous mode
[   71.307723][ T7350] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   71.335490][ T7348] bridge6: port 2(veth0_to_bond) entered blocking state
[   71.338623][ T7348] bridge6: port 2(veth0_to_bond) entered disabled state
[   71.341371][ T7348] veth0_to_bond: entered allmulticast mode
[   71.344284][ T7348] veth0_to_bond: entered promiscuous mode
[   71.350528][ T7348] vlan4: entered allmulticast mode
[   71.352489][ T7348] veth1: entered allmulticast mode
[   71.354536][ T7348] bridge6: port 3(vlan4) entered blocking state
[   71.357014][ T7348] bridge6: port 3(vlan4) entered disabled state
[   71.360267][ T7348] vlan4: entered promiscuous mode
[   71.364891][ T7361] geneve2: entered promiscuous mode
[   71.367600][ T5693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   71.377951][ T5693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   71.388736][ T5899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   71.395268][ T5899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   71.410722][ T7365] netlink: 'syz.2.384': attribute type 58 has an invalid length.
[   71.499236][ T7373] gretap0: entered promiscuous mode
[   71.501658][ T7373] batadv_slave_1: entered promiscuous mode
[   71.857931][ T7395] can: request_module (can-proto-0) failed.
[   71.938209][ T7408] netlink: 'syz.2.395': attribute type 1 has an invalid length.
[   71.953573][ T7408] 8021q: adding VLAN 0 to HW filter on device bond9
[   71.963388][ T7408] 8021q: adding VLAN 0 to HW filter on device bond9
[   71.965852][ T7408] bond9: (slave vcan1): The slave device specified does not support setting the MAC address
[   71.970181][ T7408] bond9: (slave vcan1): Error -95 calling set_mac_address
[   72.164468][ T7414] ip6gre1: entered promiscuous mode
[   72.174876][ T7414] netlink: 'syz.2.397': attribute type 1 has an invalid length.
[   72.256917][ T7423] netlink: 'syz.0.401': attribute type 1 has an invalid length.
[   72.468210][ T7435] 8021q: adding VLAN 0 to HW filter on device bond4
[   72.510946][ T7443] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.525046][ T7440] netlink: 'syz.0.405': attribute type 1 has an invalid length.
[   72.575102][ T7443] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.652616][ T7443] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.675790][ T7463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.679335][ T7463] syzkaller0: entered promiscuous mode
[   72.681078][ T7463] syzkaller0: entered allmulticast mode
[   72.754099][ T7443] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.773830][ T7463] tipc: Resetting bearer <eth:syzkaller0>
[   72.783919][ T7463] tipc: Disabling bearer <eth:syzkaller0>
[   72.846269][ T5879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.852518][ T5879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.857039][ T7468] IPv6: sit1: Disabled Multicast RS
[   72.871264][ T5693] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.877948][ T5693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.409561][ T7481] veth0_to_bond: left allmulticast mode
[   73.411472][ T7481] veth0_to_bond: left promiscuous mode
[   73.413551][ T7481] bridge6: port 2(veth0_to_bond) entered disabled state
[   73.416883][ T7481] macsec0: left allmulticast mode
[   73.419495][ T7481] macsec0: left promiscuous mode
[   73.421220][ T7481] bridge0: port 1(macsec0) entered disabled state
[   73.430085][ T7481] team0: Port device bridge4 removed
[   73.433989][ T7481] veth5: left allmulticast mode
[   73.436044][ T7481] veth5: left promiscuous mode
[   73.438168][ T7481] bridge6: port 1(veth5) entered disabled state
[   73.444845][ T7481] vlan4: left promiscuous mode
[   73.447132][ T7481] bridge6: port 3(vlan4) entered disabled state
[   74.338641][ T7494] __nla_validate_parse: 25 callbacks suppressed
[   74.338669][ T7494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.418'.
[   74.349880][ T7494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.352514][ T7494] syzkaller0: entered promiscuous mode
[   74.354401][ T7494] syzkaller0: entered allmulticast mode
[   74.359481][ T7494] tipc: Resetting bearer <eth:syzkaller0>
[   74.365053][ T7493] tipc: Resetting bearer <eth:syzkaller0>
[   74.370597][ T7493] tipc: Disabling bearer <eth:syzkaller0>
[   74.530160][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'.
[   74.585908][ T7509] pim6reg: entered allmulticast mode
[   74.588598][ T7509] pim6reg: left allmulticast mode
[   74.645123][ T7508] netlink: 288 bytes leftover after parsing attributes in process `syz.0.421'.
[   74.705655][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[   74.717281][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.422'.
[   74.720875][ T7512] veth0_vlan: left promiscuous mode
[   74.722929][ T7512] veth0_vlan: entered promiscuous mode
[   74.724839][ T7512] veth0_vlan: entered allmulticast mode
[   74.728290][ T7512] bridge0: port 1(veth0_vlan) entered blocking state
[   74.732503][ T7512] bridge0: port 1(veth0_vlan) entered disabled state
[   75.682291][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'.
[   75.685599][ T7532] validate_nla: 4 callbacks suppressed
[   75.685608][ T7532] netlink: 'syz.1.427': attribute type 5 has an invalid length.
[   75.691626][ T7532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.427'.
[   75.701896][ T7532] geneve3: entered promiscuous mode
[   75.704016][ T7532] geneve3: entered allmulticast mode
[   75.707248][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   75.712024][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   75.715208][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   75.718427][ T5879] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   75.751484][ T7534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.428'.
[   75.776252][ T7536] sctp: [Deprecated]: syz.1.429 (pid 7536) Use of int in max_burst socket option.
[   75.776252][ T7536] Use struct sctp_assoc_value instead
[   75.784397][ T7536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.429'.
[   75.802922][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'.
[   76.093055][ T7556] netlink: 'syz.1.433': attribute type 1 has an invalid length.
[   76.106656][ T7556] 8021q: adding VLAN 0 to HW filter on device bond5
[   76.124982][ T7552] bond5: (slave veth5): Enslaving as an active interface with a down link
[   76.132724][ T7553] 8021q: adding VLAN 0 to HW filter on device batadv2
[   76.135005][ T7553] bond5: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   76.238280][ T7560] netlink: 'syz.1.434': attribute type 1 has an invalid length.
[   76.372310][ T7571] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>MvE?y^
[   76.468111][ T7580] netlink: 'syz.1.439': attribute type 2 has an invalid length.
[   76.492930][ T7580] net_ratelimit: 13 callbacks suppressed
[   76.492955][ T7580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   76.693950][ T7610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.696611][ T7610] syzkaller0: entered promiscuous mode
[   76.700095][ T7610] syzkaller0: entered allmulticast mode
[   76.711561][ T7610] tipc: Resetting bearer <eth:syzkaller0>
[   76.715815][ T7608] tipc: Resetting bearer <eth:syzkaller0>
[   76.719353][ T7608] tipc: Disabling bearer <eth:syzkaller0>
[   76.803435][ T7622] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   76.832709][ T7624] lo speed is unknown, defaulting to 1000
[   76.834783][ T7624] lo speed is unknown, defaulting to 1000
[   76.836904][ T7624] lo speed is unknown, defaulting to 1000
[   76.842519][ T7624] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.847698][ T7624] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   76.859691][ T7624] lo speed is unknown, defaulting to 1000
[   76.863043][ T7624] lo speed is unknown, defaulting to 1000
[   76.867350][ T7624] lo speed is unknown, defaulting to 1000
[   76.875252][ T7624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.879162][ T7624] tipc: Resetting bearer <eth:syzkaller0>
[   76.883511][ T7623] tipc: Disabling bearer <eth:syzkaller0>
[   76.923353][ T7631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.944031][ T7633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.946450][ T7633] syzkaller0: entered promiscuous mode
[   76.948203][ T7633] syzkaller0: entered allmulticast mode
[   76.953050][ T7633] netlink: 'syz.0.453': attribute type 18 has an invalid length.
[   76.956293][ T7633] netlink: 'syz.0.453': attribute type 18 has an invalid length.
[   76.967885][ T7632] tipc: Resetting bearer <eth:syzkaller0>
[   76.974980][ T7632] tipc: Disabling bearer <eth:syzkaller0>
[   78.221277][ T7685] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   78.226406][ T5879] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.230119][ T5879] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.237647][ T5879] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.246226][ T5879] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   78.277170][ T7690] netlink: 'syz.2.470': attribute type 10 has an invalid length.
[   78.280783][ T7690] bond0: (slave wlan1): Opening slave failed
[   78.297151][ T7690] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   78.330085][ T7692] tipc: New replicast peer: 255.255.255.255
[   78.332600][    C0] Illegal XDP return value 16128 on prog  (id 197) dev gre0, expect packet loss!
[   78.335836][ T7692] tipc: Enabled bearer <udp:syz2>, priority 10
[   78.371359][ T7697] netlink: 'syz.2.472': attribute type 1 has an invalid length.
[   78.671082][ T7721] _Z`Ԁ@S!: entered promiscuous mode
[   78.714525][ T7724] netlink: 'syz.2.479': attribute type 4 has an invalid length.
[   78.721757][ T7724] netlink: 'syz.2.479': attribute type 4 has an invalid length.
[   78.818138][ T7734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.822602][ T7734] syzkaller0: entered promiscuous mode
[   78.824569][ T7734] syzkaller0: entered allmulticast mode
[   78.835856][ T7734] tipc: Resetting bearer <eth:syzkaller0>
[   78.844343][ T7733] tipc: Resetting bearer <eth:syzkaller0>
[   78.850732][ T7733] tipc: Disabling bearer <eth:syzkaller0>
[   78.928216][ T7736] lo speed is unknown, defaulting to 1000
[   79.052584][ T7738] syzkaller1: entered promiscuous mode
[   79.054846][ T7738] syzkaller1: entered allmulticast mode
[   79.125374][ T7742] Unsupported ieee802154 address type: 0
[   79.200105][ T7746] bridge0: entered promiscuous mode
[   79.202256][ T7746] vlan6: entered promiscuous mode
[   79.205160][ T7746] bridge0: port 1(vlan6) entered blocking state
[   79.207915][ T7746] bridge0: port 1(vlan6) entered disabled state
[   79.212583][ T7746] vlan6: entered allmulticast mode
[   79.214814][ T7746] bridge0: entered allmulticast mode
[   79.218023][ T7746] vlan6: left allmulticast mode
[   79.220783][ T7746] bridge0: left allmulticast mode
[   79.271448][ T7747] team0: Port device sit1 added
[   79.380870][   T11] block nbd0: Possible stuck request ffff888020130000: control (read@0,4096B). Runtime 30 seconds
[   79.516915][ T7754] __nla_validate_parse: 29 callbacks suppressed
[   79.516960][ T7754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.489'.
[   79.527193][ T7754] IPv6: sit2: Disabled Multicast RS
[   79.530062][ T7754] sit2: entered allmulticast mode
[   79.577971][ T7762] pim6reg1: entered promiscuous mode
[   79.581347][ T7762] pim6reg1: entered allmulticast mode
[   79.590605][ T7764] pim6reg1: entered promiscuous mode
[   79.592331][ T7764] pim6reg1: entered allmulticast mode
[   79.640983][ T7766] syzkaller1: entered promiscuous mode
[   79.642775][ T7766] syzkaller1: entered allmulticast mode
[   79.868622][    T9] tipc: Node number set to 1388326542
[   79.972791][ T7773] 8021q: VLANs not supported on gre0
[   79.997237][ T7775] _Z`Ԁ@S: entered promiscuous mode
[   80.118596][ T7779] lo speed is unknown, defaulting to 1000
[   80.445399][ T7794] syzkaller1: entered promiscuous mode
[   80.447209][ T7794] syzkaller1: entered allmulticast mode
[   80.555640][ T7799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.572048][ T7802] bond0: (slave syz_tun): Releasing backup interface
[   80.576735][ T7802] syz_tun: left promiscuous mode
[   80.607629][ T7802] bond8: (slave gretap1): Releasing active interface
[   80.639181][ T7802] team0: Port device sit1 removed
[   80.651821][ T7807] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   80.682638][ T7807] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   80.686318][ T7807] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   80.690645][ T7807] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   80.705935][ T7811] validate_nla: 4 callbacks suppressed
[   80.705945][ T7811] netlink: 'syz.1.505': attribute type 3 has an invalid length.
[   80.726703][ T7815] lo speed is unknown, defaulting to 1000
[   81.482019][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[   81.577823][ T7828] 0: left allmulticast mode
[   81.580824][ T7828] hsr_slave_0: left allmulticast mode
[   81.582716][ T7828] hsr_slave_1: left allmulticast mode
[   81.585085][ T7828] veth0_vlan: left allmulticast mode
[   81.589635][ T7828] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[   81.592174][ T7828] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   81.595544][ T7828] vlan2: left promiscuous mode
[   81.597207][ T7828] bond1: left promiscuous mode
[   81.599320][ T7828] gretap1: left promiscuous mode
[   81.601610][ T7828] vlan2: left allmulticast mode
[   81.603901][ T7828] bond1: left allmulticast mode
[   81.605633][ T7828] gretap1: left allmulticast mode
[   81.608148][ T7828] veth2: left promiscuous mode
[   81.610059][ T7828] veth2: left allmulticast mode
[   81.613909][ T7828] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   81.621107][ T7828] geneve2: left promiscuous mode
[   81.626072][ T7828] geneve3: left promiscuous mode
[   81.627947][ T7828] geneve3: left allmulticast mode
[   81.633645][ T5693] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[   81.637222][ T5693] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[   81.641120][ T5693] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[   81.645472][ T5693] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[   81.650348][ T5693] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[   81.653918][ T5693] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[   81.657629][ T5693] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[   81.661494][ T5693] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[   82.362425][ T7858] netlink: 'syz.0.513': attribute type 1 has an invalid length.
[   82.424645][ T7865] netlink: 'syz.2.514': attribute type 11 has an invalid length.
[   82.443925][ T7867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.446252][ T7867] syzkaller0: entered promiscuous mode
[   82.447942][ T7867] syzkaller0: entered allmulticast mode
[   82.454396][ T7867] tipc: Resetting bearer <eth:syzkaller0>
[   82.465502][ T7870] tipc: Resetting bearer <eth:syzkaller0>
[   82.472837][ T7870] tipc: Disabling bearer <eth:syzkaller0>
[   82.515979][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'.
[   82.522947][ T7877] geneve2: entered promiscuous mode
[   82.524876][ T7877] geneve2: entered allmulticast mode
[   82.534028][ T7877] lo speed is unknown, defaulting to 1000
[   82.536322][ T7877] lo speed is unknown, defaulting to 1000
[   82.538959][ T7877] lo speed is unknown, defaulting to 1000
[   82.621853][ T7877] infiniband syz0: set active
[   82.624649][ T7877] infiniband syz0: added lo
[   82.626794][    T9] lo speed is unknown, defaulting to 1000
[   82.660627][ T7877] RDS/IB: syz0: added
[   82.662431][ T7877] smc: adding ib device syz0 with port count 1
[   82.665537][ T7877] smc:    ib device syz0 port 1 has pnetid 
[   82.669361][ T5901] lo speed is unknown, defaulting to 1000
[   82.672057][ T7877] lo speed is unknown, defaulting to 1000
[   82.681562][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'.
[   82.686790][ T7889] netlink: 'syz.0.522': attribute type 29 has an invalid length.
[   82.697385][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'.
[   82.707819][ T7896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.712019][ T7896] batadv0: entered promiscuous mode
[   82.714277][ T7896] batadv0: entered allmulticast mode
[   82.717930][ T7896] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.723936][ T7896] tipc: Resetting bearer <eth:syzkaller0>
[   82.730378][ T7895] tipc: Disabling bearer <eth:syzkaller0>
[   82.749960][ T7898] syzkaller1: entered promiscuous mode
[   82.751863][ T7898] syzkaller1: entered allmulticast mode
[   82.762401][ T7877] lo speed is unknown, defaulting to 1000
[   82.815981][ T7877] lo speed is unknown, defaulting to 1000
[   82.976794][ T7912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.981462][ T7912] syzkaller0: entered promiscuous mode
[   82.983621][ T7912] syzkaller0: entered allmulticast mode
[   83.067516][ T7928] veth3: entered allmulticast mode
[   83.147374][ T7938] netlink: 'syz.2.531': attribute type 11 has an invalid length.
[   83.265799][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'.
[   83.686968][ T7996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.691190][ T7996] syzkaller0: entered promiscuous mode
[   83.693224][ T7996] syzkaller0: entered allmulticast mode
[   83.699739][ T7903] tipc: Resetting bearer <eth:syzkaller0>
[   83.711215][ T7903] tipc: Disabling bearer <eth:syzkaller0>
[   83.720749][ T7996] tipc: Resetting bearer <eth:syzkaller0>
[   83.733852][ T7996] tipc: Resetting bearer <eth:syzkaller0>
[   83.737300][ T7996] tipc: Disabling bearer <eth:syzkaller0>
[   83.915779][ T8025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.926848][ T8025] syzkaller0: entered promiscuous mode
[   83.928984][ T8025] syzkaller0: entered allmulticast mode
[   83.936158][ T8026] batadv0: left promiscuous mode
[   83.938193][ T8026] batadv0: left allmulticast mode
[   83.945717][ T8025] tipc: Resetting bearer <eth:syzkaller0>
[   83.961077][ T8020] tipc: Resetting bearer <eth:syzkaller0>
[   83.966300][ T8020] tipc: Disabling bearer <eth:syzkaller0>
[   84.025545][ T8039] IPv6: sit3: Disabled Multicast RS
[   84.047886][ T8044] netlink: 'syz.0.545': attribute type 5 has an invalid length.
[   84.063163][ T8045] 8021q: adding VLAN 0 to HW filter on device team0
[   84.067012][ T8045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.273563][ T8049] lo speed is unknown, defaulting to 1000
[   84.276045][ T8049] lo speed is unknown, defaulting to 1000
[   84.428027][ T8054] siw: device registration error -23
[   84.482590][ T8056] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.647188][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'.
[   84.700436][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'.
[   84.766139][ T8071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.769287][ T8071] syzkaller0: entered promiscuous mode
[   84.771231][ T8071] syzkaller0: entered allmulticast mode
[   84.775497][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'.
[   84.783589][ T8071] tipc: Resetting bearer <eth:syzkaller0>
[   84.787065][ T8070] tipc: Resetting bearer <eth:syzkaller0>
[   84.792803][ T8070] tipc: Disabling bearer <eth:syzkaller0>
[   84.913810][ T8078] netlink: 'syz.2.557': attribute type 10 has an invalid length.
[   84.917046][ T8078] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   84.922153][ T8078] bond0: (slave wlan1): Opening slave failed
[   84.960650][ T8082] netlink: 27 bytes leftover after parsing attributes in process `syz.0.559'.
[   85.077669][ T8092] lo speed is unknown, defaulting to 1000
[   85.082221][ T8092] lo speed is unknown, defaulting to 1000
[   85.113990][ T8100] netlink: 'syz.2.564': attribute type 10 has an invalid length.
[   85.119764][ T5886] IPVS: starting estimator thread 0...
[   85.125663][ T8100] team0: Port device 0! added
[   85.131937][ T8100] netlink: 'syz.2.564': attribute type 10 has an invalid length.
[   85.145091][ T8100] team0: Port device 0! removed
[   85.151226][ T8100] !: entered promiscuous mode
[   85.153545][ T8100] bond0: (slave 0!): Enslaving as an active interface with an up link
[   85.219678][ T8102] IPVS: using max 76 ests per chain, 182400 per kthread
[   85.263464][ T8109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.267244][ T8109] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20004
[   85.547504][ T8123] tipc: Enabled bearer <eth:gre0>, priority 10
[   85.625921][ T8130] netlink: 248 bytes leftover after parsing attributes in process `syz.0.573'.
[   85.654976][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'.
[   85.802417][ T8142] syzkaller0: entered promiscuous mode
[   85.804740][ T8142] syzkaller0: entered allmulticast mode
[   85.812236][ T8142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.817301][ T8142] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   85.823019][ T8142] tipc: Resetting bearer <eth:syzkaller0>
[   85.872726][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'.
[   85.961315][ T8148] netlink: 44 bytes leftover after parsing attributes in process `syz.0.577'.
[   86.072524][ T8151] 8021q: adding VLAN 0 to HW filter on device bond6
[   86.075355][ T8151] bond0: (slave bond6): Enslaving as a backup interface with a down link
[   86.191066][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'.
[   86.197391][ T8164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'.
[   86.371121][ T8178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.384461][ T8178] syzkaller0: entered promiscuous mode
[   86.386826][ T8178] syzkaller0: entered allmulticast mode
[   86.394819][ T8178] tipc: Resetting bearer <eth:syzkaller0>
[   86.401206][ T8177] tipc: Resetting bearer <eth:syzkaller0>
[   86.405040][ T8177] tipc: Disabling bearer <eth:syzkaller0>
[   86.457251][ T8184] syzkaller1: entered promiscuous mode
[   86.459399][ T8184] syzkaller1: entered allmulticast mode
[   86.464109][ T8184] netlink: 'syz.1.588': attribute type 6 has an invalid length.
[   86.565887][ T8189] lo speed is unknown, defaulting to 1000
[   86.569834][ T8189] lo speed is unknown, defaulting to 1000
[   86.653650][ T8206] vlan4: entered promiscuous mode
[   86.655605][ T8206] vlan4: entered allmulticast mode
[   86.657296][ T8206] hsr_slave_1: entered allmulticast mode
[   86.685972][ T8206] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   86.780743][ T8210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   86.939032][ T5886] tipc: Node number set to 1355737839
[   87.315259][ T8243] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[   87.339078][ T8243] bond10: (slave vti0): The slave device specified does not support setting the MAC address
[   87.343087][   T33] audit: type=1800 audit(1756320421.702:2): pid=8246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.604" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1241 res=0 errno=0
[   87.351843][ T8243] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   87.357197][ T8243] bond10: (slave vti0): making interface the new active one
[   87.360934][ T8243] bond10: (slave vti0): Enslaving as an active interface with an up link
[   87.364666][   T33] audit: type=1800 audit(1756320421.702:3): pid=8246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.604" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1241 res=0 errno=0
[   87.406644][ T8254] bridge4: entered promiscuous mode
[   87.416358][ T8254] bridge4: entered allmulticast mode
[   87.423707][ T8254] bridge4: mtu less than device minimum
[   87.643759][ T8273] netlink: 'syz.2.611': attribute type 1 has an invalid length.
[   87.661871][ T8274] tipc: Resetting bearer <eth:syzkaller0>
[   87.688833][ T8279] syz_tun: entered allmulticast mode
[   87.693893][ T8282] dvmrp8: entered allmulticast mode
[   87.697189][ T8276] syz_tun: left allmulticast mode
[   87.700065][ T8276] dvmrp8: left allmulticast mode
[   88.463338][ T8297] netlink: 'syz.0.616': attribute type 1 has an invalid length.
[   88.473707][ T8297] bond7: entered promiscuous mode
[   88.475683][ T8297] 8021q: adding VLAN 0 to HW filter on device bond7
[   88.482585][ T8297] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   88.486566][ T8298] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   88.490170][ T8302] netlink: 'syz.2.617': attribute type 10 has an invalid length.
[   88.507934][ T8302] veth0_macvtap: mtu less than device minimum
[   88.615434][ T8309] lo speed is unknown, defaulting to 1000
[   88.621767][ T8309] lo speed is unknown, defaulting to 1000
[   88.956791][ T8319] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   89.027746][ T8319] bond0 (unregistering): left promiscuous mode
[   89.031945][ T8319] !: left promiscuous mode
[   89.038233][ T8319] bond0 (unregistering): (slave 0!): Releasing backup interface
[   89.047735][ T8319] bond0 (unregistering): Released all slaves
[   89.218616][ T8334] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   89.320814][ T8337] hsr_slave_0: left promiscuous mode
[   89.484293][ T8348] lo speed is unknown, defaulting to 1000
[   89.490285][ T8348] lo speed is unknown, defaulting to 1000
[   89.885405][ T8387] bond1: (slave gretap1): Releasing active interface
[   89.888814][ T8387] batman_adv: batadv0: Removing interface: ip6gretap1
[   89.892121][ T8387] bond5: (slave veth5): Releasing active interface
[   89.927857][ T8389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.931865][ T8389] syzkaller0: entered promiscuous mode
[   89.934047][ T8389] syzkaller0: entered allmulticast mode
[   89.940039][ T8389] __nla_validate_parse: 15 callbacks suppressed
[   89.940055][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'.
[   89.953081][ T8389] tipc: Resetting bearer <eth:syzkaller0>
[   89.955623][ T8389] tipc: Resetting bearer <eth:syzkaller0>
[   89.961396][ T8388] tipc: Resetting bearer <eth:syzkaller0>
[   89.965992][ T8388] tipc: Disabling bearer <eth:syzkaller0>
[   90.843853][ T8428] pim6reg1: entered allmulticast mode
[   90.971730][ T8433] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[   90.981636][ T8433] 8021q: adding VLAN 0 to HW filter on device bond8
[   90.993345][ T8433] bond8: (slave veth9): Enslaving as an active interface with a down link
[   91.001345][ T8433] gretap2: entered promiscuous mode
[   91.004889][ T8433] bond8: (slave gretap2): making interface the new active one
[   91.008108][ T8433] bond8: (slave gretap2): Enslaving as an active interface with an up link
[   91.112474][ T8441] netlink: 108 bytes leftover after parsing attributes in process `syz.0.653'.
[   91.116342][ T8441] netlink: 108 bytes leftover after parsing attributes in process `syz.0.653'.
[   91.120916][ T8441] netlink: 48 bytes leftover after parsing attributes in process `syz.0.653'.
[   91.125130][ T8441] netlink: 108 bytes leftover after parsing attributes in process `syz.0.653'.
[   91.129331][ T8441] netlink: 108 bytes leftover after parsing attributes in process `syz.0.653'.
[   91.133129][ T8441] netlink: 48 bytes leftover after parsing attributes in process `syz.0.653'.
[   91.137323][ T8441] vlan0: entered promiscuous mode
[   91.201206][ T8448] netlink: 'syz.0.656': attribute type 10 has an invalid length.
[   91.210384][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'.
[   91.214435][ T8450] syzkaller1: entered promiscuous mode
[   91.216243][ T8450] syzkaller1: entered allmulticast mode
[   91.220617][ T8450] netlink: 'syz.1.655': attribute type 6 has an invalid length.
[   91.245106][ T8450] netlink: 'syz.1.655': attribute type 6 has an invalid length.
[   91.248065][ T8450] netlink: 60 bytes leftover after parsing attributes in process `syz.1.655'.
[   91.251297][ T8450] netlink: 56 bytes leftover after parsing attributes in process `syz.1.655'.
[   91.251916][ T8456] syz_tun: entered allmulticast mode
[   91.263267][ T8456] dvmrp8: entered allmulticast mode
[   91.266009][ T8454] netlink: 'syz.0.658': attribute type 6 has an invalid length.
[   91.270183][ T8450] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   91.274420][ T8450] gretap2: entered promiscuous mode
[   91.276544][ T8450] gretap2: entered allmulticast mode
[   91.289968][ T8455] syz_tun: left allmulticast mode
[   91.292243][ T8455] dvmrp8: left allmulticast mode
[   91.357585][ T8458] xt_HMARK: proto mask must be zero with L3 mode
[   91.479555][ T8462] lo: entered allmulticast mode
[   91.481714][ T8462] lo: left allmulticast mode
[   91.617613][ T8469] net veth1_virt_wifi : renamed from virt_wifi0
[   92.213252][ T8475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.216226][ T8475] syzkaller0: entered promiscuous mode
[   92.218446][ T8475] syzkaller0: entered allmulticast mode
[   92.226165][ T8475] tipc: Resetting bearer <eth:syzkaller0>
[   92.231498][ T8474] tipc: Resetting bearer <eth:syzkaller0>
[   92.235336][ T8474] tipc: Disabling bearer <eth:syzkaller0>
[   92.399610][ T8482] batadv1: entered promiscuous mode
[   92.401745][ T8482] batadv1: entered allmulticast mode
[   92.426354][ T8489] validate_nla: 1 callbacks suppressed
[   92.426374][ T8489] netlink: 'syz.1.669': attribute type 1 has an invalid length.
[   92.573574][ T8508] pim6reg: entered allmulticast mode
[   92.576682][ T8508] pim6reg: left allmulticast mode
[   92.836735][ T8530] netlink: 'syz.2.679': attribute type 13 has an invalid length.
[   92.868091][ T8530] netlink: 'syz.2.679': attribute type 17 has an invalid length.
[   93.048270][ T8536] netlink: 'syz.0.682': attribute type 1 has an invalid length.
[   93.080595][ T8530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.093926][  T791] lo speed is unknown, defaulting to 1000
[   93.102146][ T8532] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   93.124352][ T8536] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[   93.198427][ T8544] netlink: 'syz.0.684': attribute type 4 has an invalid length.
[   93.206673][ T8532] netlink: 'syz.1.681': attribute type 21 has an invalid length.
[   93.207150][ T8546] netlink: 'syz.2.683': attribute type 18 has an invalid length.
[   93.215923][ T8532] ipvlan2: entered promiscuous mode
[   93.220740][ T8532] bridge0: port 1(ipvlan2) entered blocking state
[   93.223459][ T8532] bridge0: port 1(ipvlan2) entered disabled state
[   93.226025][ T8532] ipvlan2: entered allmulticast mode
[   93.228093][ T8532] gretap0: entered allmulticast mode
[   93.232342][ T8532] ipvlan2: left allmulticast mode
[   93.235712][ T8532] gretap0: left allmulticast mode
[   93.245811][ T8546] netlink: 'syz.2.683': attribute type 18 has an invalid length.
[   93.248390][ T5693] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.252784][ T5693] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.256660][ T5693] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.260087][ T5693] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.314445][ T8552] syzkaller1: entered promiscuous mode
[   93.316760][ T8552] syzkaller1: entered allmulticast mode
[   93.501015][ T8574] netlink: 'syz.1.693': attribute type 2 has an invalid length.
[   93.610644][ T8595] netlink: 'syz.1.700': attribute type 1 has an invalid length.
[   93.826836][ T8614] openvswitch: netlink: Message has 24 unknown bytes.
[   93.829562][ T8614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.875923][ T8619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.878465][ T8619] syzkaller0: entered promiscuous mode
[   93.882131][ T8619] syzkaller0: entered allmulticast mode
[   93.885646][ T8619] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.891887][ T8619] tipc: Resetting bearer <eth:syzkaller0>
[   93.897454][ T8618] tipc: Resetting bearer <eth:syzkaller0>
[   93.901104][ T8618] tipc: Disabling bearer <eth:syzkaller0>
[   93.920446][ T8622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.923253][ T8622] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   93.925831][ T8622] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   93.931567][ T8622] tipc: Resetting bearer <eth:syzkaller0>
[   94.102856][ T8636] batadv0: left allmulticast mode
[   94.229331][ T8636] macsec1: left promiscuous mode
[   94.230939][ T8636] macsec1: left allmulticast mode
[   94.239405][ T8636] bridge1: left promiscuous mode
[   94.241035][ T8636] bridge1: left allmulticast mode
[   94.252249][ T8636] bond6: left promiscuous mode
[   94.258972][ T8636] vlan3: left promiscuous mode
[   94.260916][ T8636] hsr_slave_1: left promiscuous mode
[   94.263489][ T8636] vlan3: left allmulticast mode
[   94.265425][ T8636] hsr_slave_1: left allmulticast mode
[   94.282195][ T8636] ip6gre1: left promiscuous mode
[   94.291213][ T8636] sit2: left allmulticast mode
[   94.295086][ T8636] geneve2: left promiscuous mode
[   94.296722][ T8636] geneve2: left allmulticast mode
[   94.301667][ T8636] veth3: left allmulticast mode
[   94.305168][ T8636] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[   94.307459][ T8636] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[   94.317545][   T10] lo speed is unknown, defaulting to 1000
[   94.328929][   T10] syz0: Port: 1 Link DOWN
[   94.339537][ T5879] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.345093][ T5879] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.352123][ T5913] lo speed is unknown, defaulting to 1000
[   94.356517][ T5879] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.362674][ T5879] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.373593][ T5879] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.379642][ T5879] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.383131][ T5879] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   94.386318][ T5879] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.577540][ T8682] gretap0: left promiscuous mode
[   94.584249][ T8682] erspan0: left promiscuous mode
[   94.592539][ T8682] 8021q: adding VLAN 0 to HW filter on device team0
[   94.596306][ T8682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.601925][ T8649] lo speed is unknown, defaulting to 1000
[   94.604370][ T8649] syz1: Port: 1 Link ACTIVE
[   94.688024][ T8692] 8021q: adding VLAN 0 to HW filter on device bond9
[   94.693505][ T8693] bond9: option mode: unable to set because the bond device is up
[   94.741903][ T8697] smc: removing ib device syz0
[   95.027035][ T8707] __nla_validate_parse: 34 callbacks suppressed
[   95.027052][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'.
[   95.033277][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'.
[   95.368070][ T8728] pim6reg1: entered promiscuous mode
[   95.371374][ T8728] pim6reg1: entered allmulticast mode
[   95.539255][ T8741] netlink: 180 bytes leftover after parsing attributes in process `syz.0.734'.
[   95.548370][ T8742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.731'.
[   95.573827][ T8742] bond8 (unregistering): Released all slaves
[   95.736141][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'.
[   95.937589][ T8774] dvmrp1: entered allmulticast mode
[   95.942394][ T8774] dvmrp1: left allmulticast mode
[   96.053833][ T8777] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.743'.
[   96.135897][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.744'.
[   96.155512][ T8779] bridge11: port 1(veth11) entered blocking state
[   96.158157][ T8779] bridge11: port 1(veth11) entered disabled state
[   96.161797][ T8779] veth11: entered allmulticast mode
[   96.165216][ T8779] veth11: entered promiscuous mode
[   96.170092][ T8779] bridge11: port 2(veth0_to_bond) entered blocking state
[   96.172693][ T8779] bridge11: port 2(veth0_to_bond) entered disabled state
[   96.175437][ T8779] veth0_to_bond: entered allmulticast mode
[   96.178187][ T8779] veth0_to_bond: entered promiscuous mode
[   96.183194][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'.
[   96.277290][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'.
[   96.335131][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[   96.424572][ T8796] lo speed is unknown, defaulting to 1000
[   96.557491][ T8809] bond10: entered promiscuous mode
[   96.561351][ T8809] 8021q: adding VLAN 0 to HW filter on device bond10
[   96.574623][ T8809] 8021q: adding VLAN 0 to HW filter on device bond10
[   96.577665][ T8809] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[   96.584185][ T8809] bond10: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[   96.590336][ T8809] bond10: (slave vxcan1): making interface the new active one
[   96.593271][ T8809] vxcan1: entered promiscuous mode
[   96.595968][ T8809] bond10: (slave vxcan1): Enslaving as an active interface with an up link
[   96.846069][ T8818] batadv0 (unregistering): left promiscuous mode
[   96.865694][ T8824] Unsupported ieee802154 address type: 0
[   96.981277][ T8830] tap1: tun_chr_ioctl cmd 1074025677
[   96.984881][ T8830] tap1: linktype set to 0
[   96.986864][ T8831] tap1: tun_chr_ioctl cmd 1074025677
[   96.990295][ T8831] tap1: linktype set to 0
[   97.349846][ T5879] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.353393][ T5879] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.357244][ T5879] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.361020][ T5879] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.381980][ T8851] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   97.403372][ T8856] team0: entered promiscuous mode
[   97.406240][ T8856] 8021q: adding VLAN 0 to HW filter on device team0
[   97.544960][ T8870] validate_nla: 8 callbacks suppressed
[   97.544970][ T8870] netlink: 'syz.2.770': attribute type 1 has an invalid length.
[   97.559891][ T8870] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.566025][ T8870] bond0: entered promiscuous mode
[   97.595957][ T8873] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.600748][ T8873] veth0: entered promiscuous mode
[   97.603000][ T8873] veth0: entered allmulticast mode
[   97.619764][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[   97.666843][ T8873] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.732712][ T8882] netlink: 'syz.2.773': attribute type 1 has an invalid length.
[   97.735734][ T8882] netlink: 'syz.2.773': attribute type 2 has an invalid length.
[   97.748738][ T8882] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   97.836503][ T8888] netlink: 'syz.0.776': attribute type 1 has an invalid length.
[   98.009638][ T8899] netlink: 'syz.1.778': attribute type 13 has an invalid length.
[   98.012842][ T8899] netlink: 'syz.1.778': attribute type 17 has an invalid length.
[   98.031083][ T8899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.053703][ T8899] lo speed is unknown, defaulting to 1000
[   98.701661][ T8913] netlink: 'syz.2.781': attribute type 10 has an invalid length.
[   98.703875][ T8912] netlink: 'syz.2.781': attribute type 10 has an invalid length.
[   98.763803][ T8922] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   98.772989][ T8921] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.815089][ T8924] netlink: 'syz.1.785': attribute type 4 has an invalid length.
[   98.819221][ T8925] netlink: 'syz.1.785': attribute type 4 has an invalid length.
[   98.843969][ T8926] team0: left promiscuous mode
[   98.847765][ T8926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.876288][ T8921] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.963109][ T8921] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.043597][ T8941] vlan4: left promiscuous mode
[   99.045350][ T8941] vlan4: left allmulticast mode
[   99.046871][ T8941] hsr_slave_1: left allmulticast mode
[   99.049629][ T8941] gretap2: left promiscuous mode
[   99.051249][ T8941] gretap2: left allmulticast mode
[   99.058306][ T8921] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.226145][ T8952] dvmrp8: entered allmulticast mode
[   99.275598][ T5879] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.287103][ T8957] 8021q: adding VLAN 0 to HW filter on device bond8
[   99.293677][ T8952] dvmrp8: left allmulticast mode
[   99.300875][ T5879] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.309188][ T5879] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.312361][ T5879] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.424367][ T8974] lo speed is unknown, defaulting to 1000
[   99.468831][ T5852] Bluetooth: hci0: command 0x0c20 tx timeout
[   99.538098][ T8983] gretap3: entered promiscuous mode
[   99.542633][ T8983] bond9: (slave gretap3): making interface the new active one
[   99.545515][ T8983] bond9: (slave gretap3): Enslaving as an active interface with an up link
[   99.632654][ T8987] syz_tun: entered allmulticast mode
[   99.635680][ T8988] dvmrp4: left allmulticast mode
[   99.684764][ T8988] syz_tun: left allmulticast mode
[   99.704901][ T8991] syzkaller0: entered promiscuous mode
[   99.706948][ T8991] syzkaller0: entered allmulticast mode
[   99.709052][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  100.043345][ T8995] __nla_validate_parse: 24 callbacks suppressed
[  100.043365][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'.
[  100.066286][ T9012] : renamed from vlan1
[  100.087178][ T9016] netlink: 152 bytes leftover after parsing attributes in process `syz.1.807'.
[  100.223918][ T9030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.808'.
[  100.276482][ T9034] bridge0: port 1(erspan0) entered blocking state
[  100.279769][ T9034] bridge0: port 1(erspan0) entered disabled state
[  100.282180][ T9034] erspan0: entered allmulticast mode
[  100.285726][ T9034] erspan0: entered promiscuous mode
[  100.395905][ T9045] erspan0: left allmulticast mode
[  100.397655][ T9045] erspan0: left promiscuous mode
[  100.410524][ T9045] bridge0: port 1(erspan0) entered disabled state
[  100.492301][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'.
[  100.551285][ T9062] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  100.796366][ T5899] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.802377][ T5899] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.807833][ T5899] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.814366][ T5899] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.959908][ T9098] syzkaller1: entered promiscuous mode
[  100.962075][ T9098] syzkaller1: entered allmulticast mode
[  101.003401][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'.
[  101.015691][ T9101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.815'.
[  101.051264][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'.
[  101.056658][ T9106] macvlan2: entered promiscuous mode
[  101.059960][ T9106] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  101.064759][ T9106] netlink: 52 bytes leftover after parsing attributes in process `syz.2.817'.
[  101.089148][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'.
[  101.092831][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'.
[  101.100996][ T9107] delete_channel: no stack
[  101.301310][ T9116] tap1: tun_chr_ioctl cmd 1074025677
[  101.303398][ T9116] tap1: linktype set to 780
[  101.482247][ T9134] 8021q: adding VLAN 0 to HW filter on device bond10
[  101.489826][ T9135] bond10: (slave bridge9): making interface the new active one
[  101.493847][ T9135] bond10: (slave bridge9): Enslaving as an active interface with an up link
[  101.507336][ T9134] bond10: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  101.723676][ T9139] lo speed is unknown, defaulting to 1000
[  101.814381][ T9171] gretap3: left promiscuous mode
[  101.871031][ T9181] bridge0: port 1(macvlan0) entered blocking state
[  101.877033][ T9181] bridge0: port 1(macvlan0) entered disabled state
[  101.884470][ T9181] macvlan0: entered allmulticast mode
[  101.886945][ T9181] bridge0: entered allmulticast mode
[  101.893966][ T9181] macvlan0: left allmulticast mode
[  101.896913][ T9181] bridge0: left allmulticast mode
[  101.977172][ T9198] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.067845][ T9210] can: request_module (can-proto-5) failed.
[  102.072583][ T9207] can: request_module (can-proto-5) failed.
[  102.344537][ T9244] team0: Port device 0! added
[  102.354805][ T9244] team0: Port device 0! removed
[  102.947197][ T9261] lo speed is unknown, defaulting to 1000
[  103.013375][ T9265] validate_nla: 20 callbacks suppressed
[  103.013388][ T9265] netlink: 'syz.0.850': attribute type 8 has an invalid length.
[  103.158432][ T9282] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.162209][ T9282] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  103.164828][ T9282] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  103.192485][ T9285] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  103.313370][ T9293] vxcan8: entered promiscuous mode
[  103.363163][ T9295] netlink: 'syz.1.859': attribute type 10 has an invalid length.
[  103.384952][ T9298] netlink: 'syz.1.860': attribute type 1 has an invalid length.
[  103.411549][ T9300] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  103.486436][ T9309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.501349][ T9309] syzkaller0: entered promiscuous mode
[  103.503357][ T9309] syzkaller0: entered allmulticast mode
[  103.511152][ T9309] tipc: Resetting bearer <eth:syzkaller0>
[  103.531960][ T9309] tipc: Disabling bearer <eth:syzkaller0>
[  103.663129][ T9314] wg1 speed is unknown, defaulting to 1000
[  103.665401][ T9314] wg1 speed is unknown, defaulting to 1000
[  103.667966][ T9314] wg1 speed is unknown, defaulting to 1000
[  103.676499][ T9314] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  103.690652][ T9314] wg1 speed is unknown, defaulting to 1000
[  103.695004][ T9314] wg1 speed is unknown, defaulting to 1000
[  103.697923][ T9314] wg1 speed is unknown, defaulting to 1000
[  103.908369][ T9316] netlink: 'syz.1.864': attribute type 1 has an invalid length.
[  103.911385][ T9316] netlink: 'syz.1.864': attribute type 1 has an invalid length.
[  104.177604][ T9338] geneve3: entered promiscuous mode
[  104.181478][ T5899] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  104.185832][ T5899] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  104.189334][ T5693] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  104.194608][ T5693] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  104.296943][ T9340] netlink: 'syz.2.870': attribute type 1 has an invalid length.
[  104.365890][ T9356] tipc: Resetting bearer <eth:gre0>
[  104.372262][ T9356] tipc: Resetting bearer <eth:gre0>
[  104.378967][ T9356] tipc: Resetting bearer <eth:syzkaller0>
[  104.381431][ T9356] tipc: Resetting bearer <eth:syzkaller0>
[  104.830199][ T5852] Bluetooth: hci2: link tx timeout
[  104.832180][ T5852] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.835339][ T5860] Bluetooth: hci2: link tx timeout
[  104.837389][ T5860] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.840621][ T5860] Bluetooth: hci2: link tx timeout
[  104.842659][ T5860] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.845664][ T5860] Bluetooth: hci2: link tx timeout
[  104.847727][ T5860] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  104.851048][ T5860] Bluetooth: hci2: link tx timeout
[  104.853393][ T5860] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  105.234505][ T9372] __nla_validate_parse: 24 callbacks suppressed
[  105.234525][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.877'.
[  105.275297][ T9372] bond12: entered promiscuous mode
[  105.277251][ T9372] 8021q: adding VLAN 0 to HW filter on device bond12
[  105.291191][ T9372] bond12 (unregistering): Released all slaves
[  105.423791][ T9379] netlink: 'syz.0.880': attribute type 1 has an invalid length.
[  105.426579][ T9379] netlink: 'syz.0.880': attribute type 1 has an invalid length.
[  105.485875][ T9379] netlink: 'syz.0.880': attribute type 1 has an invalid length.
[  105.495270][ T9379] 8021q: adding VLAN 0 to HW filter on device bond12
[  105.531219][ T9389] siw: device registration error -23
[  105.534795][ T9390] netlink: 3312 bytes leftover after parsing attributes in process `syz.0.883'.
[  105.541267][ T9389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.882'.
[  105.689337][ T9395] netlink: 'syz.2.885': attribute type 1 has an invalid length.
[  105.691985][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.885'.
[  105.723677][ T9397] bridge_slave_0: entered promiscuous mode
[  105.743558][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'.
[  105.751657][ T9399] syzkaller0: entered promiscuous mode
[  105.753376][ T9399] syzkaller0: entered allmulticast mode
[  105.839397][ T9407] bond12: entered promiscuous mode
[  105.841749][ T9407] 8021q: adding VLAN 0 to HW filter on device bond12
[  105.926867][ T9422] dvmrp1: tun_chr_ioctl cmd 1074025677
[  105.928923][ T9422] dvmrp1: linktype set to 769
[  105.955206][ T9423] netlink: 68 bytes leftover after parsing attributes in process `syz.2.892'.
[  106.056659][ T9438] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  106.065622][ T9439] tipc: Resetting bearer <eth:gre0>
[  106.067540][ T9439] tipc: Resetting bearer <eth:gre0>
[  106.083365][ T9439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.154970][ T9446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.157691][ T9446] syzkaller0: entered promiscuous mode
[  106.159942][ T9446] syzkaller0: entered allmulticast mode
[  106.164154][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'.
[  106.169441][ T9446] netlink: 52 bytes leftover after parsing attributes in process `syz.1.899'.
[  106.176113][ T9446] tipc: Resetting bearer <eth:syzkaller0>
[  106.179500][ T9445] tipc: Resetting bearer <eth:syzkaller0>
[  106.182987][ T9445] tipc: Disabling bearer <eth:syzkaller0>
[  106.366650][ T9457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.902'.
[  106.439859][ T9464] pim6reg1: entered allmulticast mode
[  106.446758][ T9464] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  106.521609][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'.
[  106.633784][ T9479] batadv_slave_0: entered promiscuous mode
[  106.640264][ T9478] batadv_slave_0: left promiscuous mode
[  106.694741][ T9482] tap0: tun_chr_ioctl cmd 1074025680
[  106.698050][ T9482] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  106.705790][ T9482] D: renamed from syzkaller0 (while UP)
[  106.708430][ T9482] tipc: Disabling bearer <eth:syzkaller0>
[  106.719936][ T9482] lo speed is unknown, defaulting to 1000
[  106.722931][ T9482] wg1 speed is unknown, defaulting to 1000
[  106.898620][ T5860] Bluetooth: hci2: command 0x0405 tx timeout
[  107.086791][ T9530] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.108285][ T9527] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  107.157781][ T9546] siw: device registration error -23
[  107.319918][ T9567] bond13: entered promiscuous mode
[  107.322256][ T9567] 8021q: adding VLAN 0 to HW filter on device bond13
[  107.331907][ T9567] 8021q: adding VLAN 0 to HW filter on device bond13
[  107.335501][ T9567] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address
[  107.338977][ T9567] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  107.344036][ T9567] bond13: (slave wireguard0): making interface the new active one
[  107.346494][ T9567] wireguard0: entered promiscuous mode
[  107.349032][ T9567] bond13: (slave wireguard0): Enslaving as an active interface with an up link
[  107.355385][ T9567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.357789][ T9567] IPv6: NLM_F_CREATE should be set when creating new route
[  107.360102][ T9567] IPv6: NLM_F_CREATE should be set when creating new route
[  107.363467][ T9567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.388652][ T9571] syzkaller0: mtu greater than device maximum
[  107.461648][ T9576] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  107.512957][ T9576] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  107.520654][ T9578] tipc: Resetting bearer <eth:gre0>
[  107.522783][ T9578] tipc: Resetting bearer <eth:gre0>
[  107.527650][ T9578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.571131][ T9576] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  107.611289][ T9576] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  107.661665][ T5693] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  107.669752][ T5693] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  107.676585][ T5693] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  107.684849][ T5693] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  108.373182][ T9612] syzkaller0: entered promiscuous mode
[  108.375095][ T9612] syzkaller0: entered allmulticast mode
[  108.404622][ T9610] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  108.436484][ T9613] syzkaller1: entered promiscuous mode
[  108.440140][ T9613] syzkaller1: entered allmulticast mode
[  108.734960][ T9637] lo speed is unknown, defaulting to 1000
[  108.738075][ T9637] wg1 speed is unknown, defaulting to 1000
[  108.756156][ T9644] validate_nla: 8 callbacks suppressed
[  108.756173][ T9644] netlink: 'syz.2.948': attribute type 1 has an invalid length.
[  108.803679][ T9637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.809044][ T9637] syzkaller0: entered promiscuous mode
[  108.812119][ T9637] syzkaller0: entered allmulticast mode
[  108.820478][ T9649] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.824259][ T9649] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.830433][ T9636] tipc: Resetting bearer <eth:syzkaller0>
[  108.835371][ T9636] tipc: Disabling bearer <eth:syzkaller0>
[  108.860984][ T9649] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.864121][ T9649] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.931164][ T9649] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.934819][ T9649] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.000786][ T9649] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.004112][ T9649] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.050863][ T5879] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.054204][ T5879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.061086][ T5879] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.064409][ T5879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.072336][ T5879] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.075726][ T5879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.085473][ T5693] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.089110][ T5693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.093268][ T9650] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.097128][ T9650] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.102027][ T5693] ==================================================================
[  109.105289][ T5693] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  109.108288][ T5693] Read of size 8 at addr ffff88810c4af4b0 by task kworker/u8:2/5693
[  109.112558][ T5693] 
[  109.113575][ T5693] CPU: 1 UID: 0 PID: 5693 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  109.113591][ T5693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.113601][ T5693] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  109.113627][ T5693] Call Trace:
[  109.113648][ T5693]  <TASK>
[  109.113656][ T5693]  dump_stack_lvl+0x189/0x250
[  109.113672][ T5693]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.113680][ T5693]  ? lock_release+0x4b/0x3e0
[  109.113716][ T5693]  ? __virt_addr_valid+0x4a5/0x5c0
[  109.113727][ T5693]  print_report+0xca/0x240
[  109.113735][ T5693]  ? __mutex_lock+0x147/0x1350
[  109.113741][ T5693]  kasan_report+0x118/0x150
[  109.113753][ T5693]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.113763][ T5693]  ? __mutex_lock+0x147/0x1350
[  109.113772][ T5693]  __mutex_lock+0x147/0x1350
[  109.113779][ T5693]  ? __mutex_lock+0x5bb/0x1350
[  109.113787][ T5693]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  109.113799][ T5693]  ? __pfx___mutex_lock+0x10/0x10
[  109.113805][ T5693]  ? do_raw_spin_unlock+0x4d/0x240
[  109.113815][ T5693]  ? rcu_is_watching+0x15/0xb0
[  109.113825][ T5693]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  109.113837][ T5693]  ? process_scheduled_works+0x9ef/0x17b0
[  109.113844][ T5693]  ? process_scheduled_works+0x9ef/0x17b0
[  109.113852][ T5693]  process_scheduled_works+0xae1/0x17b0
[  109.113865][ T5693]  ? __pfx_process_scheduled_works+0x10/0x10
[  109.113875][ T5693]  worker_thread+0x8a0/0xda0
[  109.113884][ T5693]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.113894][ T5693]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.113904][ T5693]  ? __kthread_parkme+0x7b/0x200
[  109.113913][ T5693]  kthread+0x711/0x8a0
[  109.113923][ T5693]  ? __pfx_worker_thread+0x10/0x10
[  109.113930][ T5693]  ? __pfx_kthread+0x10/0x10
[  109.113938][ T5693]  ? rcu_is_watching+0x15/0xb0
[  109.113945][ T5693]  ? __pfx_kthread+0x10/0x10
[  109.113953][ T5693]  ret_from_fork+0x3fc/0x770
[  109.113962][ T5693]  ? __pfx_ret_from_fork+0x10/0x10
[  109.113970][ T5693]  ? __switch_to_asm+0x39/0x70
[  109.113979][ T5693]  ? __switch_to_asm+0x33/0x70
[  109.113987][ T5693]  ? __pfx_kthread+0x10/0x10
[  109.113996][ T5693]  ret_from_fork_asm+0x1a/0x30
[  109.114008][ T5693]  </TASK>
[  109.114011][ T5693] 
[  109.194326][ T5693] Allocated by task 9649:
[  109.195768][ T5693]  kasan_save_track+0x3e/0x80
[  109.197406][ T5693]  __kasan_kmalloc+0x93/0xb0
[  109.199026][ T5693]  __kmalloc_noprof+0x27a/0x4f0
[  109.200992][ T5693]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  109.203102][ T5693]  notifier_call_chain+0x1b6/0x3e0
[  109.204778][ T5693]  register_netdevice+0x1608/0x1ae0
[  109.206550][ T5693]  nsim_create+0xae8/0xf10
[  109.207966][ T5693]  __nsim_dev_port_add+0x6b6/0xb10
[  109.209562][ T5693]  nsim_dev_port_add_all+0x37/0xf0
[  109.211189][ T5693]  nsim_dev_reload_up+0x451/0x780
[  109.212831][ T5693]  devlink_reload+0x4ec/0x8d0
[  109.214383][ T5693]  devlink_nl_reload_doit+0xb35/0xd50
[  109.216202][ T5693]  genl_family_rcv_msg_doit+0x215/0x300
[  109.218139][ T5693]  genl_rcv_msg+0x60e/0x790
[  109.219582][ T5693]  netlink_rcv_skb+0x208/0x470
[  109.221163][ T5693]  genl_rcv+0x28/0x40
[  109.222415][ T5693]  netlink_unicast+0x82f/0x9e0
[  109.223971][ T5693]  netlink_sendmsg+0x805/0xb30
[  109.225469][ T5693]  __sock_sendmsg+0x21c/0x270
[  109.226944][ T5693]  ____sys_sendmsg+0x505/0x830
[  109.228431][ T5693]  ___sys_sendmsg+0x21f/0x2a0
[  109.229907][ T5693]  __x64_sys_sendmsg+0x19b/0x260
[  109.231455][ T5693]  do_syscall_64+0xfa/0x3b0
[  109.232890][ T5693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.234805][ T5693] 
[  109.235525][ T5693] Freed by task 9650:
[  109.236805][ T5693]  kasan_save_track+0x3e/0x80
[  109.238471][ T5693]  kasan_save_free_info+0x46/0x50
[  109.240237][ T5693]  __kasan_slab_free+0x5b/0x80
[  109.241728][ T5693]  kfree+0x18e/0x440
[  109.242945][ T5693]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  109.244818][ T5693]  notifier_call_chain+0x1b6/0x3e0
[  109.246350][ T5693]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  109.248277][ T5693]  unregister_netdevice_queue+0x33c/0x380
[  109.249953][ T5693]  nsim_destroy+0x1dd/0x670
[  109.251359][ T5693]  __nsim_dev_port_del+0x14d/0x1b0
[  109.252887][ T5693]  nsim_dev_reload_destroy+0x288/0x490
[  109.254489][ T5693]  nsim_dev_reload_down+0x8a/0xc0
[  109.256017][ T5693]  devlink_reload+0x1b6/0x8d0
[  109.257455][ T5693]  devlink_nl_reload_doit+0xb35/0xd50
[  109.259112][ T5693]  genl_family_rcv_msg_doit+0x215/0x300
[  109.260981][ T5693]  genl_rcv_msg+0x60e/0x790
[  109.262642][ T5693]  netlink_rcv_skb+0x208/0x470
[  109.264514][ T5693]  genl_rcv+0x28/0x40
[  109.265772][ T5693]  netlink_unicast+0x82f/0x9e0
[  109.267255][ T5693]  netlink_sendmsg+0x805/0xb30
[  109.268755][ T5693]  __sock_sendmsg+0x21c/0x270
[  109.270207][ T5693]  ____sys_sendmsg+0x505/0x830
[  109.271669][ T5693]  ___sys_sendmsg+0x21f/0x2a0
[  109.273120][ T5693]  __x64_sys_sendmsg+0x19b/0x260
[  109.274657][ T5693]  do_syscall_64+0xfa/0x3b0
[  109.276088][ T5693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.277942][ T5693] 
[  109.278746][ T5693] Last potentially related work creation:
[  109.280484][ T5693]  kasan_save_stack+0x3e/0x60
[  109.281956][ T5693]  kasan_record_aux_stack+0xbd/0xd0
[  109.283612][ T5693]  insert_work+0x3d/0x330
[  109.285111][ T5693]  __queue_work+0xbaf/0xfb0
[  109.286510][ T5693]  queue_work_on+0x181/0x270
[  109.287969][ T5693]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  109.289690][ T5693]  udp_tunnel_push_rx_port+0x180/0x200
[  109.291364][ T5693]  geneve_offload_rx_ports+0xd7/0x160
[  109.293025][ T5693]  geneve_netdevice_event+0x6a/0x80
[  109.294642][ T5693]  notifier_call_chain+0x1b6/0x3e0
[  109.296267][ T5693]  call_netdevice_notifiers+0x88/0xc0
[  109.298062][ T5693]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  109.300058][ T5693]  notifier_call_chain+0x1b6/0x3e0
[  109.301635][ T5693]  register_netdevice+0x1608/0x1ae0
[  109.303396][ T5693]  nsim_create+0xae8/0xf10
[  109.304998][ T5693]  __nsim_dev_port_add+0x6b6/0xb10
[  109.306666][ T5693]  nsim_dev_port_add_all+0x37/0xf0
[  109.308472][ T5693]  nsim_dev_reload_up+0x451/0x780
[  109.310011][ T5693]  devlink_reload+0x4ec/0x8d0
[  109.311530][ T5693]  devlink_nl_reload_doit+0xb35/0xd50
[  109.313303][ T5693]  genl_family_rcv_msg_doit+0x215/0x300
[  109.315090][ T5693]  genl_rcv_msg+0x60e/0x790
[  109.316482][ T5693]  netlink_rcv_skb+0x208/0x470
[  109.318117][ T5693]  genl_rcv+0x28/0x40
[  109.319407][ T5693]  netlink_unicast+0x82f/0x9e0
[  109.320959][ T5693]  netlink_sendmsg+0x805/0xb30
[  109.322478][ T5693]  __sock_sendmsg+0x21c/0x270
[  109.324057][ T5693]  ____sys_sendmsg+0x505/0x830
[  109.325608][ T5693]  ___sys_sendmsg+0x21f/0x2a0
[  109.327069][ T5693]  __x64_sys_sendmsg+0x19b/0x260
[  109.328869][ T5693]  do_syscall_64+0xfa/0x3b0
[  109.330346][ T5693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.332245][ T5693] 
[  109.333009][ T5693] Second to last potentially related work creation:
[  109.335102][ T5693]  kasan_save_stack+0x3e/0x60
[  109.336608][ T5693]  kasan_record_aux_stack+0xbd/0xd0
[  109.338320][ T5693]  insert_work+0x3d/0x330
[  109.339880][ T5693]  __queue_work+0xcd2/0xfb0
[  109.341551][ T5693]  queue_work_on+0x181/0x270
[  109.343330][ T5693]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  109.345485][ T5693]  udp_tunnel_push_rx_port+0x180/0x200
[  109.347566][ T5693]  vxlan_offload_rx_ports+0x139/0x200
[  109.349742][ T5693]  vxlan_netdevice_event+0x111/0x470
[  109.351938][ T5693]  notifier_call_chain+0x1b6/0x3e0
[  109.353952][ T5693]  call_netdevice_notifiers+0x88/0xc0
[  109.356074][ T5693]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  109.358501][ T5693]  notifier_call_chain+0x1b6/0x3e0
[  109.360488][ T5693]  register_netdevice+0x1608/0x1ae0
[  109.362487][ T5693]  nsim_create+0xae8/0xf10
[  109.364278][ T5693]  __nsim_dev_port_add+0x6b6/0xb10
[  109.366324][ T5693]  nsim_dev_port_add_all+0x37/0xf0
[  109.368337][ T5693]  nsim_dev_reload_up+0x451/0x780
[  109.370347][ T5693]  devlink_reload+0x4ec/0x8d0
[  109.372207][ T5693]  devlink_nl_reload_doit+0xb35/0xd50
[  109.374322][ T5693]  genl_family_rcv_msg_doit+0x215/0x300
[  109.376507][ T5693]  genl_rcv_msg+0x60e/0x790
[  109.378302][ T5693]  netlink_rcv_skb+0x208/0x470
[  109.380219][ T5693]  genl_rcv+0x28/0x40
[  109.381817][ T5693]  netlink_unicast+0x82f/0x9e0
[  109.383656][ T5693]  netlink_sendmsg+0x805/0xb30
[  109.385522][ T5693]  __sock_sendmsg+0x21c/0x270
[  109.387342][ T5693]  ____sys_sendmsg+0x505/0x830
[  109.389178][ T5693]  ___sys_sendmsg+0x21f/0x2a0
[  109.390616][ T5693]  __x64_sys_sendmsg+0x19b/0x260
[  109.392150][ T5693]  do_syscall_64+0xfa/0x3b0
[  109.393583][ T5693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.395463][ T5693] 
[  109.396212][ T5693] The buggy address belongs to the object at ffff88810c4af400
[  109.396212][ T5693]  which belongs to the cache kmalloc-256 of size 256
[  109.400489][ T5693] The buggy address is located 176 bytes inside of
[  109.400489][ T5693]  freed 256-byte region [ffff88810c4af400, ffff88810c4af500)
[  109.404744][ T5693] 
[  109.405473][ T5693] The buggy address belongs to the physical page:
[  109.407457][ T5693] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c4ae
[  109.410165][ T5693] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  109.412857][ T5693] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  109.415318][ T5693] page_type: f5(slab)
[  109.416568][ T5693] raw: 057ff00000000040 ffff88801a441b40 ffffea0004438a80 dead000000000003
[  109.419209][ T5693] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  109.421925][ T5693] head: 057ff00000000040 ffff88801a441b40 ffffea0004438a80 dead000000000003
[  109.424962][ T5693] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  109.428211][ T5693] head: 057ff00000000001 ffffea0004312b81 00000000ffffffff 00000000ffffffff
[  109.431474][ T5693] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  109.434641][ T5693] page dumped because: kasan: bad access detected
[  109.436703][ T5693] page_owner tracks the page as allocated
[  109.438442][ T5693] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5853, tgid 5853 (syz-executor), ts 46827915147, free_ts 46808827910
[  109.445258][ T5693]  post_alloc_hook+0x240/0x2a0
[  109.446838][ T5693]  get_page_from_freelist+0x21e4/0x22c0
[  109.448529][ T5693]  __alloc_frozen_pages_noprof+0x181/0x370
[  109.450386][ T5693]  alloc_pages_mpol+0x232/0x4a0
[  109.451929][ T5693]  allocate_slab+0x8a/0x370
[  109.453401][ T5693]  ___slab_alloc+0xbeb/0x1410
[  109.454923][ T5693]  __kmalloc_cache_noprof+0x296/0x3d0
[  109.456572][ T5693]  devl_region_create+0x14f/0x380
[  109.458152][ T5693]  nsim_drv_probe+0x614/0xba0
[  109.459154][   T11] block nbd0: Possible stuck request ffff888020130000: control (read@0,4096B). Runtime 60 seconds
[  109.459602][ T5693]  really_probe+0x26d/0x9e0
[  109.465597][ T5693]  __driver_probe_device+0x18c/0x2f0
[  109.467715][ T5693]  driver_probe_device+0x4f/0x430
[  109.469735][ T5693]  __device_attach_driver+0x2ce/0x530
[  109.471862][ T5693]  bus_for_each_drv+0x251/0x2e0
[  109.473753][ T5693]  __device_attach+0x2b8/0x400
[  109.475597][ T5693]  bus_probe_device+0x185/0x260
[  109.477576][ T5693] page last free pid 5853 tgid 5853 stack trace:
[  109.480107][ T5693]  __free_frozen_pages+0xbc4/0xd30
[  109.482152][ T5693]  __slab_free+0x303/0x3c0
[  109.483892][ T5693]  qlist_free_all+0x97/0x140
[  109.485738][ T5693]  kasan_quarantine_reduce+0x148/0x160
[  109.487881][ T5693]  __kasan_slab_alloc+0x22/0x80
[  109.489844][ T5693]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  109.492190][ T5693]  __alloc_skb+0x112/0x2d0
[  109.493990][ T5693]  netlink_sendmsg+0x5c6/0xb30
[  109.495903][ T5693]  __sock_sendmsg+0x21c/0x270
[  109.497778][ T5693]  __sys_sendto+0x3bd/0x520
[  109.499515][ T5693]  __x64_sys_sendto+0xde/0x100
[  109.501395][ T5693]  do_syscall_64+0xfa/0x3b0
[  109.503207][ T5693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.505491][ T5693] 
[  109.506451][ T5693] Memory state around the buggy address:
[  109.508644][ T5693]  ffff88810c4af380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  109.511847][ T5693]  ffff88810c4af400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  109.515015][ T5693] >ffff88810c4af480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  109.517579][ T5693]                                      ^
[  109.519710][ T5693]  ffff88810c4af500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  109.522738][ T5693]  ffff88810c4af580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  109.525843][ T5693] ==================================================================
[  109.533871][ T5693] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  109.536755][ T5693] CPU: 1 UID: 0 PID: 5693 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  109.540447][ T5693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.544303][ T5693] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  109.547122][ T5693] Call Trace:
[  109.548450][ T5693]  <TASK>
[  109.549632][ T5693]  dump_stack_lvl+0x99/0x250
[  109.551107][ T5693]  ? __asan_memcpy+0x40/0x70
[  109.552545][ T5693]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.554155][ T5693]  ? __pfx__printk+0x10/0x10
[  109.555527][ T5693]  vpanic+0x281/0x750
[  109.556729][ T5693]  ? preempt_schedule+0xae/0xc0
[  109.558249][ T5693]  ? __pfx_vpanic+0x10/0x10
[  109.559583][ T5693]  ? preempt_schedule_common+0x83/0xd0
[  109.561182][ T5693]  ? preempt_schedule+0xae/0xc0
[  109.562637][ T5693]  ? __pfx_preempt_schedule+0x10/0x10
[  109.564249][ T5693]  panic+0xb9/0xc0
[  109.565405][ T5693]  ? __pfx_panic+0x10/0x10
[  109.566781][ T5693]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  109.568487][ T5693]  ? __mutex_lock+0x147/0x1350
[  109.569965][ T5693]  check_panic_on_warn+0x89/0xb0
[  109.571524][ T5693]  ? __mutex_lock+0x147/0x1350
[  109.573111][ T5693]  end_report+0x78/0x160
[  109.574364][ T5693]  kasan_report+0x129/0x150
[  109.575739][ T5693]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.577465][ T5693]  ? __mutex_lock+0x147/0x1350
[  109.578855][ T5693]  __mutex_lock+0x147/0x1350
[  109.580234][ T5693]  ? __mutex_lock+0x5bb/0x1350
[  109.581667][ T5693]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  109.583582][ T5693]  ? __pfx___mutex_lock+0x10/0x10
[  109.585183][ T5693]  ? do_raw_spin_unlock+0x4d/0x240
[  109.586824][ T5693]  ? rcu_is_watching+0x15/0xb0
[  109.588618][ T5693]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  109.590791][ T5693]  ? process_scheduled_works+0x9ef/0x17b0
[  109.592425][ T5693]  ? process_scheduled_works+0x9ef/0x17b0
[  109.594408][ T5693]  process_scheduled_works+0xae1/0x17b0
[  109.596150][ T5693]  ? __pfx_process_scheduled_works+0x10/0x10
[  109.598078][ T5693]  worker_thread+0x8a0/0xda0
[  109.599517][ T5693]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.601548][ T5693]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.603484][ T5693]  ? __kthread_parkme+0x7b/0x200
[  109.605137][ T5693]  kthread+0x711/0x8a0
[  109.606416][ T5693]  ? __pfx_worker_thread+0x10/0x10
[  109.608396][ T5693]  ? __pfx_kthread+0x10/0x10
[  109.610239][ T5693]  ? rcu_is_watching+0x15/0xb0
[  109.612074][ T5693]  ? __pfx_kthread+0x10/0x10
[  109.613932][ T5693]  ret_from_fork+0x3fc/0x770
[  109.615706][ T5693]  ? __pfx_ret_from_fork+0x10/0x10
[  109.617731][ T5693]  ? __switch_to_asm+0x39/0x70
[  109.619494][ T5693]  ? __switch_to_asm+0x33/0x70
[  109.621003][ T5693]  ? __pfx_kthread+0x10/0x10
[  109.622513][ T5693]  ret_from_fork_asm+0x1a/0x30
[  109.624198][ T5693]  </TASK>
[  109.625884][ T5693] Kernel Offset: disabled
[  109.627292][ T5693] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:47:23  Registers:
info registers vcpu 0

CPU#0
RAX=a1ffede12aaf8d00 RBX=ffffffff819683b8 RCX=a1ffede12aaf8d00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38630 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79d3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9ef5a1308e CR3=0000000113c3e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003172 656c6c616b7a7973
XMM02=00007f890f987498 00007f890f987470 XMM03=00007f890f9874a8 00007f890f9874a0
XMM04=00007f89104ed100 00007f890f987460 XMM05=00007f890f987478 00007f890f9874c0
XMM06=00007f890f9874b8 00007f890f9874b0 XMM07=00007f890f9874a8 00007f890f9874a0
XMM08=0000000000000000 00007f890f812ee7 XMM09=0000000000000000 00007f890f812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33be460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df2670 RSP=ffffc90002dcf0d0
R8 =ffff88801f2f0237 R9 =1ffff11003e5e046 R10=dffffc0000000000 R11=ffffffff854f21f0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f2267 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f534f3a0fc8 CR3=00000001074ec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=000000000000ff00 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
