last executing test programs:

1.966538s ago: executing program 0 (id=2785):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r1=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="040000000100000000000000000000000000000000000000000000001ce339569bd62fca968cc8b5139effc77758e0a7f5be934a47e6083e235c3992c9f98425e8296bbc78bc1cf767d43a359a"], 0x50)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r9, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)

1.069931397s ago: executing program 0 (id=2800):
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x168c, 0x30, 0x51b, 0x0, 0x8000000, {}, [{0x4}, {0x1d8, 0x1, [@m_gact={0x1d4, 0x9, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x13b, 0x0, 0x6, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2c6, 0x4, 0x10000000, 0x7, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x0, 0x7c83, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x5, 0x20000000, 0xffff, 0xfffffffb}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff9, 0x8, 0xffffffffffffffff, 0x7ff, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x8, 0x7, 0x200, 0xb}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c7e, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xd29, 0x83d83b81633ecb77}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c1f, 0x8}}]}, {0xf1, 0x6, "0d02c5d690f58432b6228288d5e16dee70b66a9dcb44ecde6f30adc5f84df0e4e292d47cf68849cfd42d42d8bf598897e662721d5b45d1d9e20ec49a928e26cc4b9c5896d8cad87fa219e83f9a4e15475d56a12132b5ebbed7a94ae3666317065280111608300f60df8863912af7183ab1e4c002c1a6582664621f7902a98af567d628eac620871fda679821b0b62c3ee78b04dd815803a7728eea17016204d5ca8525b5e2b4536313d93c4ac2b07f84ec7eb5c21cdb0c7b38cc65ebd80c618abe7e9e3432b9810598c17f81b101733ed580a46f87dedb209b4079b0584b51116a0cbd9c821bf7192fe3973116"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0xd0, 0x1, [@m_ife={0xcc, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xa}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x67}, @TCA_IFE_SMAC={0xa, 0x4, @random="edf2072907bd"}]}, {0x81, 0x6, "9060f12f66a4401bf06afa0839192a48baa79bd2f89b515c2251c7cc8c5839e94b8a4901ffa9b5babc097bc71ca020ee7e65d3d4ebc35f1961b5ad3b0ecd07082e8176a2861cf85cc7f9041b1f3c4968d1dc93f81d38dd08db9fa14ad7bee5d43742bfd03ee55836037e570e0cb56a82d3562f9c4d573f22dcd16b0ea2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x408, 0x1, [@m_sample={0xfc, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x7dac5abb, 0x8, 0x0, 0x1000}}]}, {0xb6, 0x6, "86b05f35530c39d5d1f76c935da5a6b1c2b83238bc3140e298df7b748a7a8d30a5c80ea45995351d3ae96905da93ed7cab1a043b49abc5b8767e6ef4f43d3535a023211c8ac1ee0bb5a918513c9567964900c0f77a525086da2f6cdbd67b9f3e038bdda909f4607a77164c3646081fa5eb3b98bcffa960962efbcd13fa1cf4c235479b1e035ed7987d193aea9a3e6b93f499774b95ba2549eb3d943fe155ee8945645ee0729ee0619b0d08145d4f18e67a02"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0xf4, 0x0, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x401, 0x8, 0x40, 0x48000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xac}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xc82a, 0x5, 0x10000000, 0x1ff}, 0x1}}]}, {0x64, 0x6, "895a1d49aa8b02650953604ec689affb30b70e0127f0f71f2a34b83a38e52c2f50d4382ea6924019eb3385eb9b8de4bb6603a3cea370d3343f93e9970faa92c12b7a81928c5fc66ee2f3d8bd697a9c273d449b3624510a33a56d1df7c724683f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x188, 0x18, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff1, 0x222, 0x2, 0x10, 0xb}, @empty, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xe3, 0x7, 0x6, 0x4}, @broadcast, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xc61f, 0x8, 0x9}, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xffffff00, 0x1}}]}, {0xe8, 0x6, "e64dca71a4b4377963d4ba9d6f66131e71ed70d9084d4cdb9627395c3b586b27c9ec81e48da5b3e056f4547ea04010150e89d613356f6a356fe10c047612a528fcf76254b534e43dedfbcd524cd747a08a12bafd6c035e0c83d27f73a74b6cf4b81b61466eb80ac9264f18b52aa5b664f8e1fd93fc390055b8b6658267420d47190399f52cc1fc92defb3a6b34adb1508c5afa964e28d34a737f918e1663ec463e53931e0df1d6901e07eb6ff483bcf4dcbe55366dc90fd1685fe5015e111cccf60ddde65846cb6a73ffacc2f0b1e370e8c9606bb5dbadb022a966e2f86bc9827ff97863"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x8c, 0x8, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2ef}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x46, 0x6, "f7ead94fce73beca877e196c0e697f660677c2811250e5ecf23f15ecc572760cffdbc2f7e62cbdd8963a2a64bf8c937ef1e053a84501d4bcae97cabfecea69399ffc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0xfc4, 0x1, [@m_pedit={0xf38, 0x0, 0x0, 0x0, {{0xa}, {0xec4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x4, 0x9, 0x8, 0x40000000, 0x8}, 0x8, 0x9, [{0x3, 0x8, 0x9, 0x1000, 0x80, 0x2}, {0x2, 0x8, 0x9, 0x5, 0x7f, 0x3d5}, {0x2, 0x5, 0x2, 0x10000, 0x10, 0x8}]}, [{0x9, 0x7, 0x4, 0x5, 0x4, 0x4}, {0x4df7b4cf, 0x6, 0x9, 0x0, 0x7, 0x7}, {0x3ff, 0x6fd9, 0x8, 0xd, 0x2, 0x9}, {0x6, 0x3, 0x400, 0x6, 0x401, 0xab0}, {0x9, 0x2, 0xf0, 0x9, 0x7, 0x3}, {0x1010000, 0x9, 0x7, 0x8, 0x9, 0x20e8}, {0x8, 0x10000, 0xd640, 0x80000001, 0x2, 0x5}, {0x3ff, 0x5, 0x5, 0xc83, 0x22c91c4d, 0xbe}, {0x831a, 0x1, 0x3, 0x0, 0xf, 0x4ccf}, {0x8f, 0x7fff, 0x5, 0x7, 0x8, 0x800}, {0x59cf, 0x4, 0x7, 0x8ba00000, 0x5, 0x8}, {0x7, 0x7ff, 0x5, 0x61, 0x6, 0xec34}, {0x18d, 0xfffffffd, 0x7193, 0x5, 0xe, 0x80000000}, {0x0, 0x4fd, 0xc40, 0x972e, 0x94e, 0x5}, {0x3, 0xe, 0x80000000, 0x9, 0xa, 0xaf}, {0x4, 0x9, 0x8, 0xffffffff, 0x8, 0x3}, {0xc9, 0x80000000, 0x2, 0x8, 0x4, 0x9}, {0x101, 0xff, 0x80000000, 0x2, 0x3, 0xc61}, {0x7, 0x99, 0x0, 0x8, 0xb90, 0x5}, {0x3, 0x3, 0x0, 0x200, 0x1, 0x401}, {0x5, 0x6, 0x101, 0xfffffffe, 0x101, 0x80000001}, {0xa, 0x2, 0xfffff34d, 0x400, 0xffa, 0x9}, {0x4, 0xfffffc00, 0x1, 0x6, 0x705, 0x8000}, {0x10000, 0x7f58ba08, 0x7, 0x9, 0xffffffc0, 0x2}, {0x8, 0x51ef, 0x0, 0xfffffc01, 0xfffffff7, 0x9}, {0xab, 0x6, 0x5, 0x6, 0x0, 0x3}, {0x7, 0x6, 0xfffff959, 0x2, 0x6, 0x3}, {0x3e05, 0xf66, 0xd, 0x3, 0x5, 0x7fffffff}, {0x6, 0x800, 0x8, 0x29e, 0x3, 0x401}, {0x60000, 0x2, 0xba2, 0xfb, 0xfffffff7, 0x34}, {0x6, 0x8, 0x2, 0x1, 0x2, 0x8b}, {0x3, 0x6, 0x26, 0x4, 0x246, 0x2}, {0x80000001, 0x3, 0x7, 0x8, 0x8, 0x1}, {0x7, 0x800, 0x5, 0x7550, 0x3, 0x9f}, {0x4ff, 0xee4, 0xffffffff, 0x6a130db5, 0x1, 0x4}, {0x100, 0x79101c6b, 0x5, 0x8, 0x800, 0x2}, {0x80000000, 0x7, 0x5, 0x7, 0x9, 0xfffffff8}, {0x40, 0xd, 0x9, 0x6, 0x1dce, 0x80000001}, {0x0, 0x8, 0xfffffffc, 0x4, 0x5, 0xa}, {0xb, 0x1, 0x6, 0x10, 0x6, 0x69}, {0xfd8, 0x80, 0x4, 0x5, 0x100, 0x8}, {0x1, 0x7, 0xe7, 0x1, 0x6, 0x2}, {0x0, 0xff, 0xff, 0x5d9, 0x800, 0x7}, {0x7, 0x5a, 0x8, 0xffff0001, 0x3, 0x6}, {0x40, 0x4f6, 0x80, 0x0, 0xf926, 0x4}, {0xfffff5f3, 0x8829, 0xd, 0x7fffffff, 0x6, 0x7}, {0xffffffc0, 0x1, 0x0, 0x3, 0x5, 0x100}, {0x5, 0x9, 0x7, 0xd28, 0x6, 0x9}, {0x8, 0x0, 0x564ebac8, 0x168, 0x81, 0x7}, {0x0, 0x2097, 0x1, 0x1, 0xfffffff9, 0x200}, {0x3, 0x9, 0x9, 0x5f, 0x80000001, 0x7ff}, {0x1, 0x10000, 0x9, 0x4, 0x7fff, 0x9}, {0x1ff, 0x7d93f777, 0xc000000, 0x5, 0x2d6, 0x7}, {0x5, 0x1c000, 0x5, 0x54974d7, 0x2af5, 0x6}, {0x7fffffff, 0xd51d, 0x2bc, 0x1000, 0x2, 0xa8c}, {0x9, 0x8, 0xfffffffd, 0x8000, 0x0, 0x227}, {0x7, 0x7, 0x5, 0x6, 0x400000, 0x2b}, {0x7, 0x100, 0x4, 0xfffffff6, 0x6, 0x3}, {0xad, 0x6, 0x3, 0x81, 0x0, 0x1}, {0x7ff, 0xc496, 0x9, 0xffff63a7, 0x2, 0x5}, {0x8, 0x2, 0x9, 0x3, 0x9475, 0x7}, {0x5, 0x6, 0x0, 0x8, 0x100, 0x7f}, {0x17d872f2, 0x7, 0x7, 0x40, 0x10001, 0x6}, {0xffff, 0xfe7, 0x2, 0x7, 0x7, 0x9}, {0x4, 0x0, 0x0, 0x1, 0xb0ab, 0x9}, {0x5, 0x8, 0x0, 0x8, 0x7, 0x4}, {0x6, 0x61b3, 0xfff0, 0x1, 0x10000000, 0x953}, {0x3, 0x0, 0x5, 0x40, 0x8, 0x733}, {0x10001, 0xfff, 0x10, 0x3, 0x0, 0x1000}, {0x80, 0x7ff, 0x74, 0x4, 0x9, 0xe9}, {0xd27, 0x8, 0x3ff, 0x9, 0x12c, 0xfffffff7}, {0x40, 0x4, 0x6, 0x0, 0x5, 0x401}, {0x7fff, 0x401, 0x3b9f, 0x6, 0x9, 0x5}, {0x6, 0x400, 0x8, 0xab7, 0x5d343fe4}, {0xc, 0xfb, 0x55ec0b1f, 0x7, 0xd, 0x80}, {0x7, 0x401, 0xbaf, 0xca, 0x2, 0x4}, {0xd, 0x4, 0xffff, 0x80, 0x4, 0x4816}, {0x6, 0x9, 0xd, 0x401, 0x1000, 0x40000}, {0x101, 0x0, 0xb38, 0x7, 0x2}, {0x80000000, 0x2, 0x0, 0x9, 0x5, 0x800}, {0x1172, 0x7, 0xa43, 0xfa, 0x0, 0x1}, {0xa, 0x8, 0x51a, 0x9, 0x6ae3, 0x1}, {0xa2, 0xfe, 0x5, 0x7d, 0xc1, 0xa}, {0xffff10b8, 0x0, 0x3, 0x5, 0x5424e1fd, 0x7}, {0x4, 0x5, 0x0, 0x2, 0x4, 0x401}, {0x81, 0x0, 0x9, 0x2, 0x10, 0x5c82}, {0xc, 0x7fff, 0x4eff, 0x2, 0xc, 0x9}, {0x5, 0x4, 0x3ff, 0x7ff, 0x4, 0x452}, {0x6f, 0xbf4a, 0x7f, 0x8, 0xd, 0xffffffff}, {0x3, 0x9, 0x7, 0x647f, 0x800, 0x8}, {0x3, 0x3, 0x41ab, 0x6aa, 0x2, 0x27}, {0x6, 0x200, 0x7fff, 0xa3, 0x5, 0x3}, {0xb, 0xc899edc, 0x8, 0x2c, 0x8, 0x4}, {0x3, 0x0, 0x9b, 0xa, 0x8, 0x9}, {0x1, 0xb47, 0x9, 0x1, 0x9379, 0x1000}, {0xa, 0x6, 0x7, 0xffff8798, 0x2, 0xfffffffb}, {0x9, 0xe7, 0x0, 0x1c, 0xfffffffd, 0x9}, {0x5, 0x9f, 0x8275, 0x7fffffff, 0x5, 0x80000000}, {0x1, 0x5, 0x3, 0x4, 0x400000, 0x9}, {0x10001, 0x9, 0x80000000, 0xf80f, 0x21d7, 0x88}, {0x1, 0x7, 0xbc2, 0x100, 0x8000, 0x80}, {0x6, 0x1c46, 0x401, 0xc, 0x4, 0x7}, {0x401, 0x8, 0x0, 0x4, 0x81, 0xc}, {0x7f, 0x1, 0x20000, 0x4, 0x0, 0x2}, {0x1, 0xc7c, 0x4, 0x8001, 0x6}, {0x30a, 0x6, 0x5, 0x7, 0x7d5f, 0x653}, {0x6, 0x6, 0x4, 0x5, 0x5, 0x8f2}, {0x10001, 0x2, 0x1, 0x0, 0xff, 0x93a}, {0x8, 0x10001, 0x3, 0x10, 0x6, 0x80}, {0x10000, 0x0, 0x6, 0x8846, 0x9, 0xf}, {0x0, 0x6, 0x7, 0x1000, 0x4, 0x8}, {0x80, 0x7, 0xbeb, 0x3, 0x7, 0x8}, {0xa2, 0x80000001, 0x7, 0xba, 0xffffffff, 0x60000000}, {0x8, 0x4, 0x4, 0x7f, 0xa3, 0x8}, {0x9, 0xf, 0x3, 0x1, 0x200, 0x7}, {0x5, 0x2, 0x9, 0x2, 0xbbf, 0x7}, {0x7, 0x0, 0x6, 0x3ff, 0x3, 0x4}, {0x9, 0xb32, 0x3, 0xa5, 0x6, 0x7}, {0x90b, 0x6a, 0x2, 0xfff, 0x0, 0x200}, {0x7, 0x5, 0x1, 0x8, 0x7, 0x6}, {0x7db5, 0x40, 0x80000001, 0x3, 0x6, 0x8}, {0x0, 0x80, 0x101, 0x4, 0x2, 0xe5}, {0x0, 0x7, 0x3bf, 0x10000, 0xb, 0x8}, {0xd, 0x0, 0x59ab, 0x6ba, 0x2, 0xff}, {0x2, 0x100, 0x6, 0x6, 0x6, 0x5}, {0x6, 0x101, 0x9, 0x0, 0x7, 0xffffffff}, {0x0, 0x0, 0x2, 0x2, 0x4, 0xfffffff7}, {0xc1, 0x4, 0x8, 0x6, 0x0, 0xffffffff}], [{0x4}, {0x4}, {0x3}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x5}, {}, {0x3}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xbc578d9c84697236}, {0x5}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0xe28a37b7ed5dfd8c, 0x1}, {0x2}, {0x2}, {0x6}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {}, {}, {0x5, 0x1}, {0x2}, {0x2}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4c, 0x6, "8d48601e77d2f5966115a066e76631dba1ea919004d2761748c14b8954b9f1c1a420128d340c84f8969c2645bde42424092ffeccb9a6449064b2018e64ceec99c963612a2cd89621"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x88, 0x7, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x10}, @TCA_MPLS_TTL={0x5, 0x7, 0x9f}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x43, 0x6, "c194ddda6dc2272182b5e163811a380af6cb3921247a40add09f1fa73de5db33b146c781c18bb73744b9ccf8d394dafb558b9c4141a1cc6d24946dcf520b50"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x168c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffe70, &(0x7f0000000580)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8985b0808aa78", 0x14}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00'})
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)='|=', 0x2}], 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05e6000000000000000f0600000008000300", @ANYRES32=r6, @ANYBLOB="0800050009000000"], 0x24}, 0x1, 0x0, 0x900000000000000}, 0x0)

890.412827ms ago: executing program 1 (id=2804):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000058657d01ff020000000000000000000000000001"], 0xfdef)

699.473873ms ago: executing program 1 (id=2805):
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r3 = socket$kcm(0x2, 0xa, 0x2) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ASSERT(r4, 0x29, 0xcf, &(0x7f00000002c0)=0x1, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000010000000000000", @ANYRES32=<r8=>r7, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32, @ANYBLOB="08000300"], 0x34}}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000002c000000060a010400000000000000000100000008000b4000000000040004800900010073797a3000000000140000001100010000000000000000000700000a0dd22f66bda89a99049d1b15f909d79ff1c27de5002ff877fb50d332685eaca9ff3b7fe70558729cb0bbca8d3e03c0b78289eb1516e7fa292dd120eb82bb02f122ef703336e148b9cf"], 0xa0}}, 0x1) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xce6796ac0c9d1ed8}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f000000ec40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="03000000000000004f000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async)
write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) (async)
recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x10008014) (async)
socket(0x2, 0x80805, 0x0) (async)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r8, @ANYRES32=r11, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

696.315046ms ago: executing program 2 (id=2806):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
close(r3)
connect$netrom(r2, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002)

579.890027ms ago: executing program 1 (id=2807):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0xffffffe0, 0x8}, 0x100, './file0\x00'})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000200)={0x8, 0x0, 0x2, 0x881}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000700)={'syztnl1\x00', <r2=>0x0, 0x7800, 0x20, 0xa048, 0x0, {{0x30, 0x4, 0x0, 0x5, 0xc0, 0x66, 0x0, 0x6b, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x98, [@loopback]}, @end, @timestamp={0x44, 0x24, 0x37, 0x0, 0x6, [0xfff, 0x183, 0x4, 0x7, 0x0, 0x1, 0x5, 0xc9]}, @noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x32, 0x0, [{0x1, 0x9, "55f17ae90ddfe3"}, {0x2, 0x5, 'eDt'}, {0x6c5a04bc1aa77532, 0xb, "e3016ecb040d9ea837"}, {0x2, 0x3, "d2"}, {0x2, 0x10, "3df739b4e00459e353c8a9a81885"}]}, @noop, @timestamp_addr={0x44, 0x34, 0x4f, 0x1, 0xf, [{@local, 0x3}, {@remote, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc4a}, {@empty, 0xffff0000}, {@remote, 0xd5}, {@empty}]}, @timestamp={0x44, 0x14, 0xb1, 0x0, 0x9, [0x2, 0x7, 0x0, 0xfff]}]}}}}})
sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000280)="d2e5e05c0fb3a1a0db08c1f2797bd7a92f6f2e8c2826fb615302dbe09f8b1c16e4bd941ead96e37694f373bc2c93fa56b884c78ffecea4f7dd63e9e7db0a5dc640", 0x41}, {&(0x7f0000000300)="f3ce74f77594e78a9cbffe6ed8f1c0216e6faa1d92c0e27eaf70f3f675816d54df1b3f3b6e1690000881244465e4ccbfd8a79c68d9c11d26858310bda38ab498107cfbc6888bcedb97adeb019a2dc27a05fc362609e2b4a328f880a8415ba8035ce2f6ed3bd6a97b1addb0e571e8", 0x6e}, {&(0x7f0000000380)="5ff21f96478ebe5a71d18c15d7f46f68d3a35599742a61b86c2d49856a4157a6959be07c701cb70ab048fbc5605d77b13c37ae8c3a6e7f1563b1174fdd1fc62613abaa78db21ef0fdef14d5f8881b35e8e54581f5d934f8ce57c98a25a7c7fc321c85681c06c6c20f618dedff6073e016843d611484bf4ca6d43f379b1c6fc104a39f7692715fb6aff600be341734008063059513be56bcff51fcdb1ada33b99a6a20635256d66e52aaf233055175722fe76ddd8", 0xb4}, {&(0x7f0000000440)="187f9d9acdfc58a951eaf579332f13f891cbcf88980d53a496c92c45fc2cb317213451e2d657", 0x26}, {&(0x7f0000000480)="9d332e02fb326902ae2540a9f6ba1cab425e7571f8844737482c0d44dc991099c640cb35e79d85a81406b19d894195c72cebcf32fbab6f82c9c0cb051e1232d7a64746d5c1626519efb01a9f9448770b5eb15fd7ea7b18694c96ec4cbcc12f068686a4556db06e3d45a9faa670448790dc08c469aa05746e741fe986ee373849eb83fabd401e7d57b4603cf605a9aeb5e879a39f91b4c921d051645815eac019dfcf26e8f6ad8998bd4dbc2d4da46937249b0344d3651ae9b1073c145bc513d442781f7cd50dfab5a636f1b39209b2ef3b467d0ff617e6e2bcd3de92", 0xdc}, {&(0x7f0000000580)="7e1e60c9e0b41d20b135958257611b053f3560896ca6ec408b8c22870d5f9d51723bc10aa8e5148f227efb910cd5c6bc515195a9c2ea86ce29011cfd31691729", 0x40}, {&(0x7f00000005c0)="f135547733b72b3ea18fb131782bd801aee2c5e8a607cd596c9669491a3d6494c5914f2131f392866456b9b623afd26ccfd1a49cf91205f14a47620f4e744184bb418b8da311eaf5d847f4c01d12fc74c17bffe9cb4bee2b1ae3376ff8e682", 0x5f}, {&(0x7f0000000640)="f7695fe53f0035c07a5e9f", 0xb}], 0x8, &(0x7f0000000840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x27}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_retopts={{0x24, 0x0, 0x7, {[@end, @ssrr={0x89, 0x13, 0xa, [@multicast1, @multicast2, @multicast2, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4ed}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x72, 0x1, 0x2, [{@broadcast, 0x2}, {@multicast2}, {@remote, 0xcdc}]}]}}}], 0xf0}}], 0x1, 0x4000)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8)
accept4$tipc(r3, &(0x7f00000009c0)=@id, &(0x7f0000000a00)=0x10, 0x800)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf0c7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040880}, 0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000bc0)={0x4, [<r5=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000c00)=0x14)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000c40)={r5, @in6={{0xa, 0x4e21, 0x1000, @loopback, 0x100}}, 0x5, 0x6, 0x7, 0xfff, 0x53, 0xfffffffc, 0xf7}, &(0x7f0000000d00)=0x9c)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000d80)=<r6=>0x0)
sendmsg$nl_generic(r3, &(0x7f0000000fc0)={&(0x7f0000000d40), 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x1ac, 0x1e, 0x202, 0x70bd2c, 0x25dfdbff, {0x4}, [@nested={0x10, 0x48, 0x0, 0x1, [@typed={0x8, 0x12d, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x1}]}, @generic="09c7187397065225ea7f44cef6602a64b8ff341e2394399d7e11ed874c5940ed896845bd6442fc564c80b4fd8d79d2bf6a97136b657defa158abe8e02d78641f628d363910a1e8a2051da3f516c72025fdc154bdd046ed19ab90e87cd9fd339d5bfa928b3acff5852b76154a8c2056bd3caf9274af2a8b02e710cac05ac0dd41daac8a39a9a8fe71760e16ca86125ecaa428a826208cb7484baa00d8aaea29639bf5d5d83fd443b5e3c36334288d542a71dc082abe5d4afcb47765a764e4c0a10c67cf7513fe0d4c5c93427de8f5a2e14109dee49ac77bbebc4a05ebdbda57153d78f37ff6b7d3a6365bdf217dfb", @typed={0x4, 0x29}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x80}, @generic="3fdcfeb938cd7d567e158b54bfba4c768fb18a2549031b2483d7411f6d4e04af7e49f4a5f724792e438b8b50b7255d507b54f2911b6fdfafab4f07f093507d1e982dedf7f1f488e82c43404d29c7b94c942fa7f0bdbae4fbad508979131e6e1651390b34c0ecf7a90203313cedb1d385e57f6f035efdaf8ab581", @generic="9b521dbb4d228c84d0be6cacbc302e"]}, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendto$packet(r3, &(0x7f0000001000)="52b721e52586c8dc5228e72b8bfc726e306c498c6e66ac032bcd24e1aff7d0083ea77e3e9c71cbf9aa5aa686055ffb0ba71a54cb08d37c0738d6b796aa70dc156d4ec20e731a98f1050a568273cd51acae5fe6fb6e0ff0e09780a2758b7c57", 0x5f, 0x4044004, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r3)
sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x6c, r7, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc011}, 0x4000880)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x4, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), r3)
sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008810}, 0x20000004)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001440)={r3}, 0x8)
ioctl$TUNSETTXFILTER(r10, 0x400454d1, &(0x7f0000001480)={0x0, 0x2, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]})
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000014c0)=0x80000000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000001540)={'batadv0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=@setlink={0x3c, 0x13, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, 0x1400, 0x50002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000001640)=""/17, &(0x7f0000001680)=0x11)
pselect6(0x40, &(0x7f00000016c0)={0x5, 0x9, 0x1, 0x0, 0x4, 0x2, 0x5, 0x8000000000000001}, &(0x7f0000001700)={0xc, 0x7, 0xffffffffffffff0d, 0x540000000, 0x7ff, 0xffffffffffffffa8, 0x0, 0x1}, &(0x7f0000001740)={0x287, 0x2, 0x4, 0x9c9a, 0x4, 0x8000000000000001, 0x2, 0x5}, &(0x7f0000001780)={0x0, 0x989680}, &(0x7f0000001800)={&(0x7f00000017c0)={[0x9]}, 0x8})

574.526831ms ago: executing program 1 (id=2808):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)=r4}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000000000030000", @ANYRES32=r2], 0x20}}, 0x0)

574.131803ms ago: executing program 2 (id=2809):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r1 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan1\x00'})
close(0x3)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r5, 0x0)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>r6, 0x4, 0x6, 0x4, 0x2, 0x57, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_genetlink_get_family_id$nl80211(0x0, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x32, @remote, 0x4e22, 0x2, 'sh\x00', 0x15, 0x0, 0x27}, 0x2c)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}})

573.173308ms ago: executing program 0 (id=2810):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x25, 0x0, &(0x7f0000000900))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe)
r5 = socket(0x2000000000000021, 0x2, 0x2)
shutdown(r5, 0x2)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10)
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)
shutdown(r5, 0x2)
r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r1])

470.272233ms ago: executing program 0 (id=2811):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48) (async)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) (async)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001880)=@generic={&(0x7f0000001840)='./file0\x00'}, 0x18) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r5) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x11a8, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x1390, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r6, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20) (async)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_ext={0x1c, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x2, &(0x7f00000005c0)=""/2, 0x41100, 0x4, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000017c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x4, 0x7, 0xff, 0x3}, 0x10, 0xaf26, r1, 0x2, &(0x7f0000001940)=[0x1, r3, r4], &(0x7f0000001980)=[{0x3, 0x5, 0xa}, {0x3, 0x1, 0x1, 0x1}]}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 64)
r9 = socket(0x10, 0x803, 0x0) (rerun: 64)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18) (async)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r11, @ANYRES32=0x0, @ANYRES64=r11], 0x20) (async)
syz_emit_ethernet(0x27, &(0x7f0000002880)={@broadcast, @broadcast, @void, {@arp={0x806, @generic={0x339, 0x8847, 0x6, 0x5, 0x4, @empty, "3052ebf456", @broadcast}}}}, 0x0)

469.068772ms ago: executing program 2 (id=2812):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000817d01ff020000000000000000000000000001"], 0xfdef)

464.855441ms ago: executing program 1 (id=2813):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048802}, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0xa}, {}, {0xfff3}}}, 0x24}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'ip6tnl0\x00', &(0x7f0000000b80)={'syztnl1\x00', <r4=>0x0, 0x2f, 0x8, 0x7, 0x4, 0x17, @remote, @remote, 0x8, 0x80, 0x2, 0x3}})
sendmsg$nl_route(r0, &(0x7f0000000cc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@ipv4_getnetconf={0x34, 0x52, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_FORWARDING={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0xf9e1}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) (async, rerun: 64)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (rerun: 64)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r7}, &(0x7f0000000600), &(0x7f0000000980)=r6}, 0x20) (async, rerun: 64)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (rerun: 64)
getsockopt$ax25_int(r8, 0x101, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000380)={'sit0\x00', <r9=>0x0, 0x1, 0x7, 0x3, 0x2, {{0x27, 0x4, 0x1, 0x1c, 0x9c, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x17, 0x3, 0x7, [{@remote, 0x10001}, {@empty, 0x8}]}, @lsrr={0x83, 0x7, 0xd3, [@multicast1]}, @generic={0x0, 0x4, "bc9a"}, @ssrr={0x89, 0x13, 0x95, [@remote, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x41}]}, @generic={0x82, 0x3, 'V'}, @timestamp={0x44, 0x28, 0x98, 0x0, 0x3, [0x6, 0xfffffffb, 0x3ff, 0x10000, 0x0, 0x3, 0x4, 0xa9a23708, 0xb12]}, @timestamp={0x44, 0x20, 0x46, 0x0, 0xd, [0x2, 0xe3, 0x82eb, 0x4, 0x5, 0x2, 0x3]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) (async, rerun: 64)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r10, 0x0) (async, rerun: 64)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f52}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x0, 0x7, 0x2, 0x4, 0xfffffffffffffff8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000b40)='syzkaller\x00', 0x6, 0x7d, &(0x7f00000006c0)=""/125, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x9, 0x3, 0x3d}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x4, 0x5, 0xa, 0x2}, {0x4, 0x5, 0x9, 0xa}, {0x3, 0x2, 0x9, 0xb}], 0x10, 0x5}, 0x94) (rerun: 64)
pipe(&(0x7f00000000c0)={<r12=>0xffffffffffffffff})
ioctl$int_in(r12, 0x5452, &(0x7f0000000040)=0x9) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%-5lx  \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x22, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @alu={0x7, 0x1, 0x9, 0x1, 0xa, 0x2, 0x1}, @jmp={0x5, 0x1, 0x3, 0x7, 0x9, 0x80, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, 0x19, r10, 0x8, &(0x7f0000000480)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x8, 0x7fffffff, 0x8}, 0x10, 0x2401c, r11, 0x5, &(0x7f00000009c0)=[0xffffffffffffffff, r12, r13], &(0x7f0000000a00)=[{0x1, 0x3, 0x4, 0x6}, {0x1, 0x4, 0xc, 0x1}, {0x1, 0x2, 0x10, 0x8}, {0x2, 0x4, 0x0, 0x1}, {0x5, 0x3, 0x4, 0x7}], 0x10, 0x8dd}, 0x94)

372.456356ms ago: executing program 0 (id=2814):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000ff0000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000fdffffff000000000000000028bd7000000000004c001400636d61632861657329"], 0x1a0}}, 0x800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000000000)=0x8000, 0x4) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x51, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, ').)\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) (async)
sendmsg$nl_generic(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c00018006"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x0)

274.197866ms ago: executing program 0 (id=2815):
unshare(0x6a040000)
unshare(0x20200)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r1=>0x0})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x70)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x20}, 0x80)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000))
ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00})
ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r1, 0xe}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0", 0x2f)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
shutdown(r2, 0x1)

271.799123ms ago: executing program 2 (id=2816):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', <r1=>0x0, 0x29, 0x0, 0x7e, 0x6, 0x10, @mcast1, @loopback={0x0, 0xffff888101827518}, 0x40, 0x20, 0x5, 0x5}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0x28}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x10, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @map_fd]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000080), 0x4) (async)
setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000080), 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'virt_wifi0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000000"], 0x184}}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000000"], 0x184}}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200), 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200), 0x0)
r6 = socket$inet6(0xa, 0x3, 0x3c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="5fa1cc6475604fc77e0ce3f7125b35d9060da80bbb8d5985dfa34fdba59faf7671723318fffc7bb6e42dcac65ab15bdd30a6c8461cc5dc69178e1697e18cd2c6a0bb", 0x42}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="5fa1cc6475604fc77e0ce3f7125b35d9060da80bbb8d5985dfa34fdba59faf7671723318fffc7bb6e42dcac65ab15bdd30a6c8461cc5dc69178e1697e18cd2c6a0bb", 0x42}], 0x1)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c)
writev(r6, 0x0, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r8) (async)
close(r8)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)={0x4c, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, {0xb, 0xa3, 0x4, 0x9b, {0x4e20, 0x4e1f, [0x7, 0x0, 0x40000000, 0x7], [0xd, 0x4, 0x6, 0xbd6], 0x0, [0x4, 0x3]}, 0x4, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x40000880}, 0x2004c840)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r11=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r11], 0x20, 0x6044}, 0x6) (async)
sendmsg$inet_sctp(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r11], 0x20, 0x6044}, 0x6)

208.367712ms ago: executing program 1 (id=2817):
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x168c, 0x30, 0x51b, 0x0, 0x8000000, {}, [{0x4}, {0x1d8, 0x1, [@m_gact={0x1d4, 0x9, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x13b, 0x0, 0x6, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2c6, 0x4, 0x10000000, 0x7, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x0, 0x7c83, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x5, 0x20000000, 0xffff, 0xfffffffb}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff9, 0x8, 0xffffffffffffffff, 0x7ff, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x8, 0x7, 0x200, 0xb}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c7e, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xd29, 0x83d83b81633ecb77}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c1f, 0x8}}]}, {0xf1, 0x6, "0d02c5d690f58432b6228288d5e16dee70b66a9dcb44ecde6f30adc5f84df0e4e292d47cf68849cfd42d42d8bf598897e662721d5b45d1d9e20ec49a928e26cc4b9c5896d8cad87fa219e83f9a4e15475d56a12132b5ebbed7a94ae3666317065280111608300f60df8863912af7183ab1e4c002c1a6582664621f7902a98af567d628eac620871fda679821b0b62c3ee78b04dd815803a7728eea17016204d5ca8525b5e2b4536313d93c4ac2b07f84ec7eb5c21cdb0c7b38cc65ebd80c618abe7e9e3432b9810598c17f81b101733ed580a46f87dedb209b4079b0584b51116a0cbd9c821bf7192fe3973116"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0xd0, 0x1, [@m_ife={0xcc, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xa}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x67}, @TCA_IFE_SMAC={0xa, 0x4, @random="edf2072907bd"}]}, {0x81, 0x6, "9060f12f66a4401bf06afa0839192a48baa79bd2f89b515c2251c7cc8c5839e94b8a4901ffa9b5babc097bc71ca020ee7e65d3d4ebc35f1961b5ad3b0ecd07082e8176a2861cf85cc7f9041b1f3c4968d1dc93f81d38dd08db9fa14ad7bee5d43742bfd03ee55836037e570e0cb56a82d3562f9c4d573f22dcd16b0ea2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x408, 0x1, [@m_sample={0xfc, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x7dac5abb, 0x8, 0x0, 0x1000}}]}, {0xb6, 0x6, "86b05f35530c39d5d1f76c935da5a6b1c2b83238bc3140e298df7b748a7a8d30a5c80ea45995351d3ae96905da93ed7cab1a043b49abc5b8767e6ef4f43d3535a023211c8ac1ee0bb5a918513c9567964900c0f77a525086da2f6cdbd67b9f3e038bdda909f4607a77164c3646081fa5eb3b98bcffa960962efbcd13fa1cf4c235479b1e035ed7987d193aea9a3e6b93f499774b95ba2549eb3d943fe155ee8945645ee0729ee0619b0d08145d4f18e67a02"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0xf4, 0x0, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x401, 0x8, 0x40, 0x48000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xac}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xc82a, 0x5, 0x10000000, 0x1ff}, 0x1}}]}, {0x64, 0x6, "895a1d49aa8b02650953604ec689affb30b70e0127f0f71f2a34b83a38e52c2f50d4382ea6924019eb3385eb9b8de4bb6603a3cea370d3343f93e9970faa92c12b7a81928c5fc66ee2f3d8bd697a9c273d449b3624510a33a56d1df7c724683f"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x188, 0x18, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff1, 0x222, 0x2, 0x10, 0xb}, @empty, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0xe3, 0x7, 0x6, 0x4}, @broadcast, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xc61f, 0x8, 0x9}, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xffffff00, 0x1}}]}, {0xe8, 0x6, "e64dca71a4b4377963d4ba9d6f66131e71ed70d9084d4cdb9627395c3b586b27c9ec81e48da5b3e056f4547ea04010150e89d613356f6a356fe10c047612a528fcf76254b534e43dedfbcd524cd747a08a12bafd6c035e0c83d27f73a74b6cf4b81b61466eb80ac9264f18b52aa5b664f8e1fd93fc390055b8b6658267420d47190399f52cc1fc92defb3a6b34adb1508c5afa964e28d34a737f918e1663ec463e53931e0df1d6901e07eb6ff483bcf4dcbe55366dc90fd1685fe5015e111cccf60ddde65846cb6a73ffacc2f0b1e370e8c9606bb5dbadb022a966e2f86bc9827ff97863"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x8c, 0x8, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2ef}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x46, 0x6, "f7ead94fce73beca877e196c0e697f660677c2811250e5ecf23f15ecc572760cffdbc2f7e62cbdd8963a2a64bf8c937ef1e053a84501d4bcae97cabfecea69399ffc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0xfc4, 0x1, [@m_pedit={0xf38, 0x0, 0x0, 0x0, {{0xa}, {0xec4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x4, 0x9, 0x8, 0x40000000, 0x8}, 0x8, 0x9, [{0x3, 0x8, 0x9, 0x1000, 0x80, 0x2}, {0x2, 0x8, 0x9, 0x5, 0x7f, 0x3d5}, {0x2, 0x5, 0x2, 0x10000, 0x10, 0x8}]}, [{0x9, 0x7, 0x4, 0x5, 0x4, 0x4}, {0x4df7b4cf, 0x6, 0x9, 0x0, 0x7, 0x7}, {0x3ff, 0x6fd9, 0x8, 0xd, 0x2, 0x9}, {0x6, 0x3, 0x400, 0x6, 0x401, 0xab0}, {0x9, 0x2, 0xf0, 0x9, 0x7, 0x3}, {0x1010000, 0x9, 0x7, 0x8, 0x9, 0x20e8}, {0x8, 0x10000, 0xd640, 0x80000001, 0x2, 0x5}, {0x3ff, 0x5, 0x5, 0xc83, 0x22c91c4d, 0xbe}, {0x831a, 0x1, 0x3, 0x0, 0xf, 0x4ccf}, {0x8f, 0x7fff, 0x5, 0x7, 0x8, 0x800}, {0x59cf, 0x4, 0x7, 0x8ba00000, 0x5, 0x8}, {0x7, 0x7ff, 0x5, 0x61, 0x6, 0xec34}, {0x18d, 0xfffffffd, 0x7193, 0x5, 0xe, 0x80000000}, {0x0, 0x4fd, 0xc40, 0x972e, 0x94e, 0x5}, {0x3, 0xe, 0x80000000, 0x9, 0xa, 0xaf}, {0x4, 0x9, 0x8, 0xffffffff, 0x8, 0x3}, {0xc9, 0x80000000, 0x2, 0x8, 0x4, 0x9}, {0x101, 0xff, 0x80000000, 0x2, 0x3, 0xc61}, {0x7, 0x99, 0x0, 0x8, 0xb90, 0x5}, {0x3, 0x3, 0x0, 0x200, 0x1, 0x401}, {0x5, 0x6, 0x101, 0xfffffffe, 0x101, 0x80000001}, {0xa, 0x2, 0xfffff34d, 0x400, 0xffa, 0x9}, {0x4, 0xfffffc00, 0x1, 0x6, 0x705, 0x8000}, {0x10000, 0x7f58ba08, 0x7, 0x9, 0xffffffc0, 0x2}, {0x8, 0x51ef, 0x0, 0xfffffc01, 0xfffffff7, 0x9}, {0xab, 0x6, 0x5, 0x6, 0x0, 0x3}, {0x7, 0x6, 0xfffff959, 0x2, 0x6, 0x3}, {0x3e05, 0xf66, 0xd, 0x3, 0x5, 0x7fffffff}, {0x6, 0x800, 0x8, 0x29e, 0x3, 0x401}, {0x60000, 0x2, 0xba2, 0xfb, 0xfffffff7, 0x34}, {0x6, 0x8, 0x2, 0x1, 0x2, 0x8b}, {0x3, 0x6, 0x26, 0x4, 0x246, 0x2}, {0x80000001, 0x3, 0x7, 0x8, 0x8, 0x1}, {0x7, 0x800, 0x5, 0x7550, 0x3, 0x9f}, {0x4ff, 0xee4, 0xffffffff, 0x6a130db5, 0x1, 0x4}, {0x100, 0x79101c6b, 0x5, 0x8, 0x800, 0x2}, {0x80000000, 0x7, 0x5, 0x7, 0x9, 0xfffffff8}, {0x40, 0xd, 0x9, 0x6, 0x1dce, 0x80000001}, {0x0, 0x8, 0xfffffffc, 0x4, 0x5, 0xa}, {0xb, 0x1, 0x6, 0x10, 0x6, 0x69}, {0xfd8, 0x80, 0x4, 0x5, 0x100, 0x8}, {0x1, 0x7, 0xe7, 0x1, 0x6, 0x2}, {0x0, 0xff, 0xff, 0x5d9, 0x800, 0x7}, {0x7, 0x5a, 0x8, 0xffff0001, 0x3, 0x6}, {0x40, 0x4f6, 0x80, 0x0, 0xf926, 0x4}, {0xfffff5f3, 0x8829, 0xd, 0x7fffffff, 0x6, 0x7}, {0xffffffc0, 0x1, 0x0, 0x3, 0x5, 0x100}, {0x5, 0x9, 0x7, 0xd28, 0x6, 0x9}, {0x8, 0x0, 0x564ebac8, 0x168, 0x81, 0x7}, {0x0, 0x2097, 0x1, 0x1, 0xfffffff9, 0x200}, {0x3, 0x9, 0x9, 0x5f, 0x80000001, 0x7ff}, {0x1, 0x10000, 0x9, 0x4, 0x7fff, 0x9}, {0x1ff, 0x7d93f777, 0xc000000, 0x5, 0x2d6, 0x7}, {0x5, 0x1c000, 0x5, 0x54974d7, 0x2af5, 0x6}, {0x7fffffff, 0xd51d, 0x2bc, 0x1000, 0x2, 0xa8c}, {0x9, 0x8, 0xfffffffd, 0x8000, 0x0, 0x227}, {0x7, 0x7, 0x5, 0x6, 0x400000, 0x2b}, {0x7, 0x100, 0x4, 0xfffffff6, 0x6, 0x3}, {0xad, 0x6, 0x3, 0x81, 0x0, 0x1}, {0x7ff, 0xc496, 0x9, 0xffff63a7, 0x2, 0x5}, {0x8, 0x2, 0x9, 0x3, 0x9475, 0x7}, {0x5, 0x6, 0x0, 0x8, 0x100, 0x7f}, {0x17d872f2, 0x7, 0x7, 0x40, 0x10001, 0x6}, {0xffff, 0xfe7, 0x2, 0x7, 0x7, 0x9}, {0x4, 0x0, 0x0, 0x1, 0xb0ab, 0x9}, {0x5, 0x8, 0x0, 0x8, 0x7, 0x4}, {0x6, 0x61b3, 0xfff0, 0x1, 0x10000000, 0x953}, {0x3, 0x0, 0x5, 0x40, 0x8, 0x733}, {0x10001, 0xfff, 0x10, 0x3, 0x0, 0x1000}, {0x80, 0x7ff, 0x74, 0x4, 0x9, 0xe9}, {0xd27, 0x8, 0x3ff, 0x9, 0x12c, 0xfffffff7}, {0x40, 0x4, 0x6, 0x0, 0x5, 0x401}, {0x7fff, 0x401, 0x3b9f, 0x6, 0x9, 0x5}, {0x6, 0x400, 0x8, 0xab7, 0x5d343fe4}, {0xc, 0xfb, 0x55ec0b1f, 0x7, 0xd, 0x80}, {0x7, 0x401, 0xbaf, 0xca, 0x2, 0x4}, {0xd, 0x4, 0xffff, 0x80, 0x4, 0x4816}, {0x6, 0x9, 0xd, 0x401, 0x1000, 0x40000}, {0x101, 0x0, 0xb38, 0x7, 0x2}, {0x80000000, 0x2, 0x0, 0x9, 0x5, 0x800}, {0x1172, 0x7, 0xa43, 0xfa, 0x0, 0x1}, {0xa, 0x8, 0x51a, 0x9, 0x6ae3, 0x1}, {0xa2, 0xfe, 0x5, 0x7d, 0xc1, 0xa}, {0xffff10b8, 0x0, 0x3, 0x5, 0x5424e1fd, 0x7}, {0x4, 0x5, 0x0, 0x2, 0x4, 0x401}, {0x81, 0x0, 0x9, 0x2, 0x10, 0x5c82}, {0xc, 0x7fff, 0x4eff, 0x2, 0xc, 0x9}, {0x5, 0x4, 0x3ff, 0x7ff, 0x4, 0x452}, {0x6f, 0xbf4a, 0x7f, 0x8, 0xd, 0xffffffff}, {0x3, 0x9, 0x7, 0x647f, 0x800, 0x8}, {0x3, 0x3, 0x41ab, 0x6aa, 0x2, 0x27}, {0x6, 0x200, 0x7fff, 0xa3, 0x5, 0x3}, {0xb, 0xc899edc, 0x8, 0x2c, 0x8, 0x4}, {0x3, 0x0, 0x9b, 0xa, 0x8, 0x9}, {0x1, 0xb47, 0x9, 0x1, 0x9379, 0x1000}, {0xa, 0x6, 0x7, 0xffff8798, 0x2, 0xfffffffb}, {0x9, 0xe7, 0x0, 0x1c, 0xfffffffd, 0x9}, {0x5, 0x9f, 0x8275, 0x7fffffff, 0x5, 0x80000000}, {0x1, 0x5, 0x3, 0x4, 0x400000, 0x9}, {0x10001, 0x9, 0x80000000, 0xf80f, 0x21d7, 0x88}, {0x1, 0x7, 0xbc2, 0x100, 0x8000, 0x80}, {0x6, 0x1c46, 0x401, 0xc, 0x4, 0x7}, {0x401, 0x8, 0x0, 0x4, 0x81, 0xc}, {0x7f, 0x1, 0x20000, 0x4, 0x0, 0x2}, {0x1, 0xc7c, 0x4, 0x8001, 0x6}, {0x30a, 0x6, 0x5, 0x7, 0x7d5f, 0x653}, {0x6, 0x6, 0x4, 0x5, 0x5, 0x8f2}, {0x10001, 0x2, 0x1, 0x0, 0xff, 0x93a}, {0x8, 0x10001, 0x3, 0x10, 0x6, 0x80}, {0x10000, 0x0, 0x6, 0x8846, 0x9, 0xf}, {0x0, 0x6, 0x7, 0x1000, 0x4, 0x8}, {0x80, 0x7, 0xbeb, 0x3, 0x7, 0x8}, {0xa2, 0x80000001, 0x7, 0xba, 0xffffffff, 0x60000000}, {0x8, 0x4, 0x4, 0x7f, 0xa3, 0x8}, {0x9, 0xf, 0x3, 0x1, 0x200, 0x7}, {0x5, 0x2, 0x9, 0x2, 0xbbf, 0x7}, {0x7, 0x0, 0x6, 0x3ff, 0x3, 0x4}, {0x9, 0xb32, 0x3, 0xa5, 0x6, 0x7}, {0x90b, 0x6a, 0x2, 0xfff, 0x0, 0x200}, {0x7, 0x5, 0x1, 0x8, 0x7, 0x6}, {0x7db5, 0x40, 0x80000001, 0x3, 0x6, 0x8}, {0x0, 0x80, 0x101, 0x4, 0x2, 0xe5}, {0x0, 0x7, 0x3bf, 0x10000, 0xb, 0x8}, {0xd, 0x0, 0x59ab, 0x6ba, 0x2, 0xff}, {0x2, 0x100, 0x6, 0x6, 0x6, 0x5}, {0x6, 0x101, 0x9, 0x0, 0x7, 0xffffffff}, {0x0, 0x0, 0x2, 0x2, 0x4, 0xfffffff7}, {0xc1, 0x4, 0x8, 0x6, 0x0, 0xffffffff}], [{0x4}, {0x4}, {0x3}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x5}, {}, {0x3}, {0x3, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0xbc578d9c84697236}, {0x5}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0xe28a37b7ed5dfd8c, 0x1}, {0x2}, {0x2}, {0x6}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {}, {}, {0x5, 0x1}, {0x2}, {0x2}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4c, 0x6, "8d48601e77d2f5966115a066e76631dba1ea919004d2761748c14b8954b9f1c1a420128d340c84f8969c2645bde42424092ffeccb9a6449064b2018e64ceec99c963612a2cd89621"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0x88, 0x7, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x10}, @TCA_MPLS_TTL={0x5, 0x7, 0x9f}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x43, 0x6, "c194ddda6dc2272182b5e163811a380af6cb3921247a40add09f1fa73de5db33b146c781c18bb73744b9ccf8d394dafb558b9c4141a1cc6d24946dcf520b50"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x168c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x10000c00)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffe70, &(0x7f0000000580)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8985b0808aa78", 0x14}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00'})
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)='|=', 0x2}], 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05e6000000000000000f0600000008000300", @ANYRES32=r6, @ANYBLOB="0800050009000000"], 0x24}, 0x1, 0x0, 0x0, 0x900}, 0x0)

130.252626ms ago: executing program 2 (id=2818):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) (async)
syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x800, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000031c08000a4000000000080003400000004008000f4000000006440000000c0a01030000000000000000070000070900020073797a31000000000900010073797a300000000018000380140000800900090073797a310000000004000a80140000001000010000000000000000000084000a"], 0xd8}}, 0x4000000)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r7 = socket$kcm(0x10, 0x3, 0x0) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6f0cd1dfb72cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r11=>0x0}) (async)
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001b00)={0x1, 0x8, @status={[0xfffffffffffffffe, 0x401, 0x6, 0x1b, 0x4, 0xfb4]}, [0x7, 0x417, 0x1cde, 0x2, 0x5, 0x40, 0x7, 0x100000001, 0xee, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1, 0xfffc, 0xfffffffffffffffc, 0x9, 0x1, 0xd27, 0x6, 0x2, 0x490000000000003, 0xffbd, 0x1000, 0x7, 0xff, 0x4bd, 0x18000000, 0x8, 0x62, 0x400008001, 0xb1b, 0x7, 0x8, 0x81, 0x0, 0x0, 0x5, 0x8, 0x2, 0x9, 0x0, 0xfffffffffffffff9, 0xb24c, 0x9, 0x7fc, 0x0, 0x2, 0x3, 0x3, 0x6, 0x444b, 0x1, 0x9, 0x6, 0x7fff, 0x401, 0x1, 0xfffffffffffffffd, 0xf, 0x100800001, 0x0, 0x6, 0x8]}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x98, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000600)=@get={0x1, &(0x7f0000000500)=""/247, 0x7ff})
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
ioctl$TUNSETOFFLOAD(r0, 0x80047456, 0xf0ff1f00000000)

0s ago: executing program 2 (id=2819):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)=r4}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000000000040000", @ANYRES32=r2], 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

ode
[  172.773629][T10106] siw: device registration error -23
[  172.789213][T10106] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  172.799568][T10105] syz_tun: left allmulticast mode
[  172.915255][T10116] netlink: 'syz.1.1327': attribute type 10 has an invalid length.
[  173.632962][T10142] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  173.643148][T10142] tipc: Resetting bearer <eth:syzkaller0>
[  173.646789][T10142] netlink: 'syz.2.1334': attribute type 3 has an invalid length.
[  173.663928][T10142] netlink: 'syz.2.1334': attribute type 1 has an invalid length.
[  173.666991][T10142] netlink: 'syz.2.1334': attribute type 1 has an invalid length.
[  173.787583][T10156] sctp: [Deprecated]: syz.2.1337 (pid 10156) Use of struct sctp_assoc_value in delayed_ack socket option.
[  173.787583][T10156] Use struct sctp_sack_info instead
[  173.900798][T10150] lo speed is unknown, defaulting to 1000
[  174.322296][T10163] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.632156][T10179] netlink: 'syz.0.1348': attribute type 1 has an invalid length.
[  174.636406][T10177] veth13: entered promiscuous mode
[  174.657250][T10179] 8021q: adding VLAN 0 to HW filter on device bond10
[  174.672083][T10179] vlan3: entered promiscuous mode
[  174.674961][T10179] bond10: entered promiscuous mode
[  174.676912][T10179] vlan3: entered allmulticast mode
[  174.678649][T10179] bond10: entered allmulticast mode
[  174.755283][T10187] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  174.766302][T10187] 8021q: adding VLAN 0 to HW filter on device macvlan11
[  174.852897][   T54] Bluetooth: hci1: command tx timeout
[  174.864962][T10193] netlink: 'syz.2.1354': attribute type 1 has an invalid length.
[  174.882118][T10193] 8021q: adding VLAN 0 to HW filter on device bond26
[  175.228958][T10208] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  175.532205][T10229] __nla_validate_parse: 28 callbacks suppressed
[  175.532232][T10229] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1363'.
[  175.540643][T10229] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  175.545109][T10229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1363'.
[  175.548676][T10229] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1363'.
[  175.552331][T10229] netlink: 'syz.2.1363': attribute type 5 has an invalid length.
[  175.555795][T10229] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1363'.
[  175.569857][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.584001][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.720600][T10239] sctp: [Deprecated]: syz.1.1367 (pid 10239) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.720600][T10239] Use struct sctp_sack_info instead
[  176.038151][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'.
[  176.289815][T10270] 8021q: adding VLAN 0 to HW filter on device bond12
[  176.307133][T10270] gretap4: entered promiscuous mode
[  176.314271][T10270] bond12: (slave gretap4): Enslaving as an active interface with an up link
[  176.328882][T10270] macvlan0: entered promiscuous mode
[  176.331548][T10270] macvlan0: entered allmulticast mode
[  176.342010][T10270] bond12: entered promiscuous mode
[  176.345125][T10270] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  176.349130][T10270] bond12: left promiscuous mode
[  176.386344][T10267] lo speed is unknown, defaulting to 1000
[  176.430984][T10274] netlink: 'syz.1.1378': attribute type 22 has an invalid length.
[  176.438553][T10277] syzkaller1: entered promiscuous mode
[  176.443494][T10277] syzkaller1: entered allmulticast mode
[  176.510689][T10285] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1380'.
[  176.524069][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1378'.
[  176.533301][T10285] veth1_to_bond: entered allmulticast mode
[  176.536442][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'.
[  176.639733][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'.
[  176.704562][T10293] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  176.730503][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'.
[  176.847349][T10284] veth1_to_bond: left allmulticast mode
[  177.286372][T10332] ..0: renamed from ..1 (while UP)
[  177.291827][T10332] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  178.097308][T10394] pim6reg1: entered allmulticast mode
[  178.261114][T10404] netlink: 'syz.0.1411': attribute type 2 has an invalid length.
[  178.548154][T10407] lo speed is unknown, defaulting to 1000
[  178.994151][T10412] lo speed is unknown, defaulting to 1000
[  179.201021][T10416] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.212963][T10416] syzkaller0: Caught tx_queue_len zero misconfig
[  179.258493][T10416] tipc: Resetting bearer <eth:syzkaller0>
[  179.352697][T10416] nbd0: detected capacity change from 0 to 63
[  179.366740][T10422] bond13: entered promiscuous mode
[  179.368375][T10422] bond13: entered allmulticast mode
[  179.370239][T10422] 8021q: adding VLAN 0 to HW filter on device bond13
[  179.395436][   T55] block nbd0: Receive control failed (result -32)
[  179.479748][T10427] geneve3: entered promiscuous mode
[  179.481408][T10427] geneve3: entered allmulticast mode
[  179.494091][   T13] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 53010 - 0
[  179.499777][   T13] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 53010 - 0
[  179.510343][   T13] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 53010 - 0
[  179.526973][   T13] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 53010 - 0
[  180.122230][T10455] netlink: 'syz.2.1427': attribute type 10 has an invalid length.
[  180.135909][T10455] team0: Port device dummy0 added
[  180.141517][T10455] netlink: 'syz.2.1427': attribute type 10 has an invalid length.
[  180.154357][T10455] team0: Port device dummy0 removed
[  180.169898][T10455] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  180.532840][ T5845] Bluetooth: hci1: command 0x0406 tx timeout
[  180.601009][T10475] __nla_validate_parse: 16 callbacks suppressed
[  180.601024][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'.
[  181.050142][T10498] 8021q: adding VLAN 0 to HW filter on device bond14
[  181.056517][T10498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.096363][T10506] netlink: 'syz.0.1440': attribute type 1 has an invalid length.
[  181.118405][T10509] netlink: 'syz.2.1441': attribute type 4 has an invalid length.
[  181.128560][T10506] 8021q: adding VLAN 0 to HW filter on device bond15
[  181.211422][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'.
[  181.220873][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'.
[  181.224981][T10515] netlink: 'syz.2.1442': attribute type 1 has an invalid length.
[  181.227362][T10515] netlink: 'syz.2.1442': attribute type 11 has an invalid length.
[  181.229782][T10515] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1442'.
[  181.239152][T10506] bond15 (unregistering): Released all slaves
[  181.444999][T10522] xt_limit: Overflow, try lower: 604147548/4200216962
[  181.671012][T10526] bond2: option mode: unable to set because the bond device has slaves
[  181.675420][T10526] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1446'.
[  181.708886][T10528] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1447'.
[  181.732178][T10528] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1447'.
[  181.826041][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'.
[  181.829737][T10535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1449'.
[  181.966768][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'.
[  182.080511][T10544] 8021q: VLANs not supported on lo
[  182.575650][T10567] lo speed is unknown, defaulting to 1000
[  183.612049][T10595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  183.651058][T10595] tipc: Resetting bearer <eth:syzkaller0>
[  183.655200][T10595] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  183.660081][T10597] bridge0: failed insert local address into bridge forwarding table
[  183.841909][T10609] netlink: 'syz.2.1472': attribute type 1 has an invalid length.
[  183.856881][T10609] veth15: entered promiscuous mode
[  183.873606][T10610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  183.876511][T10610] IPv6: NLM_F_CREATE should be set when creating new route
[  183.879409][T10610] IPv6: NLM_F_CREATE should be set when creating new route
[  183.883193][T10610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  183.909226][T10612] erspan0: entered allmulticast mode
[  184.058795][T10617] netlink: 'syz.2.1473': attribute type 39 has an invalid length.
[  184.226567][T10625] hsr_slave_0 (unregistering): left promiscuous mode
[  184.497295][T10632] netlink: 'syz.0.1479': attribute type 10 has an invalid length.
[  184.506349][T10632] netlink: 'syz.0.1479': attribute type 10 has an invalid length.
[  184.509453][T10632] batadv0: entered promiscuous mode
[  184.511499][T10632] batadv0: entered allmulticast mode
[  184.514383][T10632] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  184.563008][T10631] lo speed is unknown, defaulting to 1000
[  185.021785][T10646] pim6reg1: entered promiscuous mode
[  185.031003][T10646] pim6reg1: entered allmulticast mode
[  185.137088][T10652] 8021q: adding VLAN 0 to HW filter on device bond16
[  185.408266][T10672] netlink: 'syz.2.1495': attribute type 1 has an invalid length.
[  185.435542][T10672] 8021q: adding VLAN 0 to HW filter on device bond27
[  185.467369][T10672] veth15: entered promiscuous mode
[  185.474223][T10672] bond27: (slave veth15): Enslaving as an active interface with a down link
[  185.481193][T10675] netlink: 'syz.0.1496': attribute type 10 has an invalid length.
[  185.506737][T10675] netlink: 'syz.0.1496': attribute type 10 has an invalid length.
[  185.597710][T10688] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.693710][T10697] __nla_validate_parse: 16 callbacks suppressed
[  185.693731][T10697] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1502'.
[  185.701858][T10697] netlink: 'syz.0.1502': attribute type 5 has an invalid length.
[  185.776535][T10702] netlink: 'syz.0.1502': attribute type 10 has an invalid length.
[  185.939827][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'.
[  186.221464][T10716] lo speed is unknown, defaulting to 1000
[  186.486678][T10726] netlink: 'syz.0.1511': attribute type 1 has an invalid length.
[  186.569922][T10736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1514'.
[  186.623312][T10737] 8021q: adding VLAN 0 to HW filter on device bond28
[  186.884758][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'.
[  186.887629][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'.
[  186.891021][T10761] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1520'.
[  186.915471][T10761] nbd: socks must be embedded in a SOCK_ITEM attr
[  187.032194][T10769] bond0: (slave dummy0): Releasing backup interface
[  187.049688][T10769] bond24: (slave gretap4): Releasing active interface
[  187.052157][T10769] gretap4: left promiscuous mode
[  187.054304][T10769] gretap4: left allmulticast mode
[  187.059277][T10769] bond27: (slave veth15): Releasing active interface
[  187.074470][T10769] syz.2.1523: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  187.080034][T10769] CPU: 0 UID: 0 PID: 10769 Comm: syz.2.1523 Not tainted syzkaller #0 PREEMPT(full) 
[  187.080057][T10769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.080069][T10769] Call Trace:
[  187.080076][T10769]  <TASK>
[  187.080084][T10769]  dump_stack_lvl+0x189/0x250
[  187.080122][T10769]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.080140][T10769]  ? __pfx__printk+0x10/0x10
[  187.080159][T10769]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  187.080177][T10769]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  187.080195][T10769]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  187.080213][T10769]  warn_alloc+0x214/0x310
[  187.080263][T10769]  ? stack_depot_save_flags+0x40/0x860
[  187.080289][T10769]  ? __pfx_warn_alloc+0x10/0x10
[  187.080313][T10769]  ? kasan_save_track+0x4f/0x80
[  187.080331][T10769]  ? xskq_create+0x56/0x170
[  187.080345][T10769]  ? xsk_init_queue+0xb0/0x110
[  187.080356][T10769]  ? xsk_setsockopt+0x4dc/0x8d0
[  187.080375][T10769]  ? do_sock_setsockopt+0x17c/0x1b0
[  187.080393][T10769]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  187.080408][T10769]  ? do_syscall_64+0xfa/0x3b0
[  187.080422][T10769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.080443][T10769]  __vmalloc_node_range_noprof+0x125/0x12f0
[  187.080484][T10769]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  187.080509][T10769]  ? __kasan_kmalloc+0x93/0xb0
[  187.080526][T10769]  vmalloc_user_noprof+0xad/0xf0
[  187.080545][T10769]  ? xskq_create+0xbf/0x170
[  187.080560][T10769]  xskq_create+0xbf/0x170
[  187.080577][T10769]  xsk_init_queue+0xb0/0x110
[  187.080592][T10769]  xsk_setsockopt+0x4dc/0x8d0
[  187.080614][T10769]  ? __pfx_xsk_setsockopt+0x10/0x10
[  187.080631][T10769]  ? __pfx_aa_sk_perm+0x10/0x10
[  187.080651][T10769]  ? aa_sock_opt_perm+0xff/0x1b0
[  187.080665][T10769]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  187.080680][T10769]  ? __pfx_xsk_setsockopt+0x10/0x10
[  187.080699][T10769]  do_sock_setsockopt+0x17c/0x1b0
[  187.080718][T10769]  __x64_sys_setsockopt+0x13f/0x1b0
[  187.080738][T10769]  do_syscall_64+0xfa/0x3b0
[  187.080750][T10769]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.080762][T10769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.080775][T10769]  ? exc_page_fault+0x9f/0xf0
[  187.080791][T10769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.080804][T10769] RIP: 0033:0x7f2d7f58ec29
[  187.080819][T10769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.080831][T10769] RSP: 002b:00007f2d8044c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  187.080847][T10769] RAX: ffffffffffffffda RBX: 00007f2d7f7d5fa0 RCX: 00007f2d7f58ec29
[  187.080857][T10769] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  187.080866][T10769] RBP: 00007f2d7f611e41 R08: 0000000000000004 R09: 0000000000000000
[  187.080874][T10769] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.080881][T10769] R13: 00007f2d7f7d6038 R14: 00007f2d7f7d5fa0 R15: 00007fff4360ab68
[  187.080905][T10769]  </TASK>
[  187.080911][T10769] Mem-Info:
[  187.213729][T10769] active_anon:5119 inactive_anon:0 isolated_anon:0
[  187.213729][T10769]  active_file:1523 inactive_file:38289 isolated_file:0
[  187.213729][T10769]  unevictable:1768 dirty:130 writeback:0
[  187.213729][T10769]  slab_reclaimable:10927 slab_unreclaimable:100344
[  187.213729][T10769]  mapped:18216 shmem:3374 pagetables:891
[  187.213729][T10769]  sec_pagetables:0 bounce:0
[  187.213729][T10769]  kernel_misc_reclaimable:0
[  187.213729][T10769]  free:249639 free_pcp:17965 free_cma:0
[  187.230774][ T5908] lo speed is unknown, defaulting to 1000
[  187.230769][T10769] Node 0 active_anon:10672kB inactive_anon:0kB active_file:3868kB inactive_file:144252kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39328kB dirty:296kB writeback:0kB shmem:5012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8608kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  187.233410][ T5908] syz0: Port: 1 Link ACTIVE
[  187.244162][T10769] Node 1 active_anon:6064kB inactive_anon:0kB active_file:2224kB inactive_file:8904kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33536kB dirty:224kB writeback:0kB shmem:4744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4452kB pagetables:1304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  187.265132][   T24] lo speed is unknown, defaulting to 1000
[  187.274836][T10769] Node 0 DMA free:6580kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:580kB local_pcp:292kB free_cma:0kB
[  187.285650][T10769] lowmem_reserve[]: 0 811 811 811 811
[  187.288423][T10769] Node 0 DMA32 free:107356kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10672kB inactive_anon:0kB active_file:3868kB inactive_file:144252kB unevictable:3536kB writepending:296kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:21272kB local_pcp:3788kB free_cma:0kB
[  187.299481][T10769] lowmem_reserve[]: 0 0 0 0 0
[  187.301295][T10769] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  187.311499][T10769] lowmem_reserve[]: 0 0 854 854 854
[  187.313284][T10769] Node 1 Normal free:426004kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6132kB inactive_anon:0kB active_file:2224kB inactive_file:8904kB unevictable:3536kB writepending:224kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:53808kB local_pcp:19844kB free_cma:0kB
[  187.323169][T10769] lowmem_reserve[]: 0 0 0 0 0
[  187.325060][T10769] Node 0 DMA: 1*4kB (U) 2*8kB (U) 0*16kB 7*32kB (U) 7*64kB (U) 2*128kB (U) 2*256kB (U) 0*512kB 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 6580kB
[  187.330669][T10769] Node 0 DMA32: 1091*4kB (UME) 660*8kB (UM) 199*16kB (UME) 289*32kB (UM) 329*64kB (UME) 92*128kB (UM) 33*256kB (UM) 4*512kB (UM) 17*1024kB (UM) 4*2048kB (UM) 4*4096kB (UM) = 107388kB
[  187.337890][T10769] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  187.344312][T10769] Node 1 Normal: 2*4kB (ME) 4*8kB (UME) 6*16kB (UME) 46*32kB (UME) 254*64kB (UM) 89*128kB (UME) 24*256kB (UM) 17*512kB (UME) 7*1024kB (UME) 7*2048kB (UME) 88*4096kB (UM) = 426056kB
[  187.351684][T10769] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  187.355498][T10769] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  187.359075][T10769] 42251 total pagecache pages
[  187.360557][T10769] 0 pages in swap cache
[  187.361862][T10769] Free swap  = 124996kB
[  187.363460][T10769] Total swap = 124996kB
[  187.364775][T10769] 786301 pages RAM
[  187.365980][T10769] 0 pages HighMem/MovableOnly
[  187.367524][T10769] 241356 pages reserved
[  187.368830][T10769] 0 pages cma reserved
[  188.255108][T10797] veth0_to_bond: entered allmulticast mode
[  188.366582][T10801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1532'.
[  188.438856][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'.
[  188.463625][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'.
[  188.518756][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'.
[  188.974215][T10857] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  188.981653][T10857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.077687][T10862] delete_channel: no stack
[  189.242105][T10882] validate_nla: 74 callbacks suppressed
[  189.242118][T10882] netlink: 'syz.0.1561': attribute type 1 has an invalid length.
[  189.276862][T10882] 8021q: adding VLAN 0 to HW filter on device bond18
[  189.295275][T10882] vlan4: entered promiscuous mode
[  189.297492][T10882] bond18: entered promiscuous mode
[  189.299837][T10882] vlan4: entered allmulticast mode
[  189.301977][T10882] bond18: entered allmulticast mode
[  189.304474][T10876] lo speed is unknown, defaulting to 1000
[  189.481922][T10892] bond0: Device is already in use.
[  189.710050][T10908] IPv6: sit2: Disabled Multicast RS
[  189.821520][T10921] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.984090][T10932] xt_socket: unknown flags 0xd0
[  190.137509][T10942] netlink: 'syz.1.1582': attribute type 32 has an invalid length.
[  190.140636][T10942] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  190.462908][T10951] netlink: 'syz.1.1585': attribute type 10 has an invalid length.
[  190.571145][T10955] vlan5: entered allmulticast mode
[  190.573083][T10955] gretap0: entered allmulticast mode
[  190.633759][T10962] vlan5: entered allmulticast mode
[  190.706052][T10965] __nla_validate_parse: 17 callbacks suppressed
[  190.706068][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1588'.
[  190.711080][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'.
[  190.878990][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'.
[  190.916008][T10981] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  191.046856][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1595'.
[  191.063559][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1595'.
[  191.103627][T10981] lo speed is unknown, defaulting to 1000
[  191.260939][T11000] netlink: 'syz.0.1598': attribute type 10 has an invalid length.
[  191.286834][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'.
[  191.725739][T11009] lo speed is unknown, defaulting to 1000
[  191.747198][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'.
[  191.750538][T11019] netlink: 'syz.1.1604': attribute type 30 has an invalid length.
[  191.803945][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'.
[  191.807024][T11019] netlink: 'syz.1.1604': attribute type 30 has an invalid length.
[  191.949547][T11024] netlink: 'syz.1.1606': attribute type 4 has an invalid length.
[  191.952274][T11024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1606'.
[  191.964074][T11024] : renamed from bond0 (while UP)
[  192.119936][T11028] netlink: 'syz.0.1608': attribute type 2 has an invalid length.
[  192.155183][T11029] netlink: 'syz.0.1608': attribute type 2 has an invalid length.
[  192.455523][T11047] netlink: 'syz.2.1611': attribute type 10 has an invalid length.
[  192.458107][T11047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1611'.
[  192.511815][T11042] lo speed is unknown, defaulting to 1000
[  193.406530][T11078] bond30: (slave vxcan7): The slave device specified does not support setting the MAC address
[  193.410891][T11078] bond30: (slave vxcan7): Error -95 calling set_mac_address
[  193.460030][T11076] macvlan12: entered promiscuous mode
[  193.466038][T11076] macvlan12: entered allmulticast mode
[  193.468151][T11076] bond30: (slave macvlan12): Error -98 calling set_mac_address
[  193.603226][T11096] 0X: renamed from caif0
[  193.606802][T11096] 0X: entered allmulticast mode
[  193.608521][T11096] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  193.629139][T11098] veth1_to_bond: entered allmulticast mode
[  193.640195][T11098] veth1_to_bond: left allmulticast mode
[  193.689332][T11104] ip_vti0: entered promiscuous mode
[  193.705730][T11105] erspan0: left allmulticast mode
[  193.708844][T11105] 0X: left allmulticast mode
[  193.711841][T11105] xfrm0: left promiscuous mode
[  193.716867][T11105] xfrm0: left allmulticast mode
[  193.718786][T11105] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  193.722425][T11105] tipc: Resetting bearer <eth:syzkaller0>
[  193.730469][T11105] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  193.732938][T11105] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  193.735799][T11105] xfrm1: left allmulticast mode
[  193.737888][T11105] vti0: left promiscuous mode
[  193.739920][T11105] vlan0: left promiscuous mode
[  193.741485][T11105] bond16: left promiscuous mode
[  193.743738][T11105] vlan0: left allmulticast mode
[  193.745676][T11105] bond16: left allmulticast mode
[  193.747828][T11105] vxcan3: left allmulticast mode
[  193.749928][T11105] bond18: left promiscuous mode
[  193.751681][T11105] bond18: left allmulticast mode
[  193.753798][T11105] bridge9: left promiscuous mode
[  193.755485][T11105] bridge9: left allmulticast mode
[  193.757463][T11105] batadv0: left allmulticast mode
[  193.759339][T11105] vlan3: left promiscuous mode
[  193.760957][T11105] bond24: left promiscuous mode
[  193.763222][T11105] vlan3: left allmulticast mode
[  193.764980][T11105] bond24: left allmulticast mode
[  193.766731][T11105] team1: left promiscuous mode
[  193.768186][T11105] team1: left allmulticast mode
[  193.770952][T11105] veth13: left promiscuous mode
[  193.780607][T11105] veth15: left promiscuous mode
[  193.783392][ T5891] lo speed is unknown, defaulting to 1000
[  193.784039][T11110] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  193.785822][ T5891] syz0: Port: 1 Link DOWN
[  193.791251][ T5891] lo speed is unknown, defaulting to 1000
[  193.860329][T11119] geneve5: entered promiscuous mode
[  193.863520][T11119] geneve5: entered allmulticast mode
[  193.868673][ T6841] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 256 - 0
[  193.873739][ T6841] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 256 - 0
[  193.878094][ T6841] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 256 - 0
[  193.880720][ T6841] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 256 - 0
[  193.897209][T11122] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  193.900679][T11122] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  194.124470][T11154] netlink: del zone limit has 4 unknown bytes
[  194.297871][T11167] veth0: entered promiscuous mode
[  194.328651][T11167] validate_nla: 4 callbacks suppressed
[  194.328666][T11167] netlink: 'syz.0.1646': attribute type 16 has an invalid length.
[  194.333461][T11167] netlink: 'syz.0.1646': attribute type 17 has an invalid length.
[  194.356492][T11167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.484184][T11165] lo speed is unknown, defaulting to 1000
[  194.498838][T11176] batadv_slave_1: entered promiscuous mode
[  194.594749][T11175] batadv_slave_1: left promiscuous mode
[  194.680981][T11167] veth0: left promiscuous mode
[  194.765192][T11195] bridge_slave_0: entered allmulticast mode
[  195.061797][T11217] dvmrp1: entered allmulticast mode
[  195.065560][T11217] dvmrp1: left allmulticast mode
[  195.558863][T11240] netlink: 'syz.0.1670': attribute type 10 has an invalid length.
[  195.571541][T11240] dummy0: entered promiscuous mode
[  195.579075][T11240] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  195.590686][T11244] pimreg: entered allmulticast mode
[  195.595555][T11244] pimreg: left allmulticast mode
[  195.728245][T11262] !: renamed from dummy0 (while UP)
[  195.766821][T11241] lo speed is unknown, defaulting to 1000
[  195.838879][T11266] __nla_validate_parse: 26 callbacks suppressed
[  195.838898][T11266] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1678'.
[  195.954803][T11268] netlink: 'syz.0.1679': attribute type 1 has an invalid length.
[  196.023639][T11268] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[  196.028012][T11268] bond19: (slave vxcan3): Error -95 calling set_mac_address
[  196.084149][T11270] bond19: (slave bridge9): Enslaving as an active interface with a down link
[  196.096184][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'.
[  196.121542][T11268] macvlan0: entered promiscuous mode
[  196.126734][T11268] macvlan0: entered allmulticast mode
[  196.154002][T11262] lo speed is unknown, defaulting to 1000
[  196.357351][T11281] dvmrp1: tun_chr_ioctl cmd 1074025677
[  196.359823][T11281] dvmrp1: linktype set to 805
[  196.441512][T11276] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.445642][T11276] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  196.449770][T11276] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 53010 - 0
[  196.463015][T11276] netdevsim netdevsim0 eth3 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0
[  196.546204][T11276] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.552759][T11276] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  196.561699][T11276] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 53010 - 0
[  196.565256][T11276] netdevsim netdevsim0 eth2 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0
[  196.610706][T11276] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.616981][T11276] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  196.624234][T11276] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 53010 - 0
[  196.629074][T11276] netdevsim netdevsim0 eth1 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0
[  196.633737][T11289] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1685'.
[  196.701113][T11276] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.706147][T11276] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  196.720601][T11276] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 53010 - 0
[  196.725571][T11276] netdevsim netdevsim0 eth0 (unregistering): unset [1, 3] type 2 family 0 port 256 - 0
[  196.990056][ T5852] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  196.993265][ T5852] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 53010 - 0
[  196.998925][ T5852] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  197.011308][ T5852] netdevsim netdevsim0 eth0: set [1, 3] type 2 family 0 port 6081 - 0
[  197.049255][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  197.052102][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 53010 - 0
[  197.057403][   T12] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  197.060183][   T12] netdevsim netdevsim0 eth1: set [1, 3] type 2 family 0 port 6081 - 0
[  197.063551][T11286] lo speed is unknown, defaulting to 1000
[  197.088088][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  197.093095][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 53010 - 0
[  197.097046][   T12] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  197.101181][   T12] netdevsim netdevsim0 eth2: set [1, 3] type 2 family 0 port 6081 - 0
[  197.109121][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  197.114868][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 53010 - 0
[  197.123329][   T12] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  197.126100][   T12] netdevsim netdevsim0 eth3: set [1, 3] type 2 family 0 port 6081 - 0
[  197.240377][T11297] netlink: 'syz.0.1686': attribute type 21 has an invalid length.
[  197.247964][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'.
[  197.282181][T11297] netlink: 'syz.0.1686': attribute type 21 has an invalid length.
[  197.282801][ T5871] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  197.289305][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'.
[  197.292385][ T5871] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  197.305049][ T5871] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  197.309617][ T5871] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  197.313308][T11297] netlink: 'syz.0.1686': attribute type 21 has an invalid length.
[  197.316054][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'.
[  197.611292][T11305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1688'.
[  197.615476][T11305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1688'.
[  197.685667][T11309] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1691'.
[  197.810874][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'.
[  197.831992][T11321] smc: removing ib device syz0
[  197.843513][T11316] netlink: 'syz.2.1693': attribute type 10 has an invalid length.
[  197.846200][T11316] dummy0: entered promiscuous mode
[  197.848220][T11316] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  197.981407][T11328] bridge: RTM_NEWNEIGH with invalid ether address
[  198.111294][T11327] bond31: (slave vxcan7): The slave device specified does not support setting the MAC address
[  198.117759][T11327] bond31: (slave vxcan7): Error -95 calling set_mac_address
[  198.172421][T11330] macvlan0: entered promiscuous mode
[  198.176422][T11330] macvlan0: entered allmulticast mode
[  198.206465][T11330] bond31: (slave macvlan0): Error -98 calling set_mac_address
[  198.404651][T11332] netlink: 'syz.2.1697': attribute type 1 has an invalid length.
[  198.882782][T11357] netlink: 'syz.1.1704': attribute type 1 has an invalid length.
[  198.922840][T11357] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.359690][T11398] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.363471][T11401] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.641140][T11413] netlink: 'syz.1.1718': attribute type 4 has an invalid length.
[  199.761892][T11422] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.291409][T11438] geneve4: entered promiscuous mode
[  200.296423][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.301446][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.306831][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.310475][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.638337][T11444] bond0: (slave veth0_to_hsr): Device is not bonding slave
[  200.640843][T11444] bond0: option active_slave: invalid value (veth0_to_hsr)
[  200.646975][T11444] netlink: 'syz.1.1728': attribute type 29 has an invalid length.
[  200.668024][T11444] bond20: entered promiscuous mode
[  200.669792][T11444] bond20: entered allmulticast mode
[  200.671800][T11444] 8021q: adding VLAN 0 to HW filter on device bond20
[  200.729771][T11449] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  200.788117][T11455] netlink: 'syz.0.1734': attribute type 1 has an invalid length.
[  200.839122][T11455] bond20: (slave vxcan3): The slave device specified does not support setting the MAC address
[  200.843597][T11455] bond20: (slave vxcan3): Error -95 calling set_mac_address
[  201.023014][T11476] __nla_validate_parse: 17 callbacks suppressed
[  201.023028][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'.
[  201.091792][T11479] 8021q: adding VLAN 0 to HW filter on device bond21
[  201.170710][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'.
[  201.187414][T11489] dvmrp8: entered allmulticast mode
[  201.273584][T11492] bridge0: failed insert local address into bridge forwarding table
[  201.423286][T11488] dvmrp8: left allmulticast mode
[  201.746232][T11510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1750'.
[  201.850082][T11519] netlink: 'syz.0.1752': attribute type 2 has an invalid length.
[  201.855248][T11519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1752'.
[  201.946338][T11530] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1755'.
[  201.958661][T11530] netlink: 'syz.1.1755': attribute type 1 has an invalid length.
[  202.010559][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'.
[  202.013002][T11533] netlink: 'syz.0.1756': attribute type 1 has an invalid length.
[  202.017182][T11530] 8021q: adding VLAN 0 to HW filter on device bond22
[  202.049932][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'.
[  202.070154][T11536] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1757'.
[  202.079272][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'.
[  202.082194][T11538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1758'.
[  202.126025][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.128439][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.130681][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.147285][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.149721][T11542] dvmrp1: tun_chr_ioctl cmd 1074025677
[  202.152068][T11542] dvmrp1: linktype set to 65535
[  202.162426][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.165213][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.170107][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.177074][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.184698][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.186661][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.188637][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.199917][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.220067][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.222000][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.224323][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.226352][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.228288][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.230127][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.231861][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.235320][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.237082][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.248015][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.250097][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.251912][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.254752][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.257324][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.259285][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.261466][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.263567][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.269272][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.272051][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.275454][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.282808][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.285237][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.287475][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.289700][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.291970][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.297309][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.299967][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.310267][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.312220][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.320389][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.326133][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.333795][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.336693][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.341682][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.346410][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.348364][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.350394][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.352925][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.354857][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.364052][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.365840][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.367562][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.369578][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.371746][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.377407][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.379223][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.381034][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.383447][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.385391][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.387973][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.389820][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.392075][T11543] dvmrp1: tun_chr_ioctl cmd 1074025673
[  202.408095][T11562] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.884921][T11584] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  203.350720][T11588] tipc: Resetting bearer <eth:syzkaller0>
[  203.435281][T11588] batman_adv: batadv0: Interface deactivated: gretap2
[  203.490043][T11588] veth0_macvtap: left allmulticast mode
[  203.553868][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.556925][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  203.559512][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 53010 - 0
[  203.562249][   T13] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  203.566149][   T13] netdevsim netdevsim0 eth0: unset [1, 3] type 2 family 0 port 6081 - 0
[  203.571560][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.577644][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  203.580350][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 53010 - 0
[  203.589506][   T13] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  203.594576][   T13] netdevsim netdevsim0 eth1: unset [1, 3] type 2 family 0 port 6081 - 0
[  203.601210][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.606698][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  203.611632][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 53010 - 0
[  203.616976][   T13] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  203.622170][   T13] netdevsim netdevsim0 eth2: unset [1, 3] type 2 family 0 port 6081 - 0
[  203.629499][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.636897][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  203.641323][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 53010 - 0
[  203.647885][   T13] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  203.653560][   T13] netdevsim netdevsim0 eth3: unset [1, 3] type 2 family 0 port 6081 - 0
[  203.709951][T11600] 8021q: adding VLAN 0 to HW filter on device bond23
[  203.723571][T11600] : (slave bond16): Releasing backup interface
[  203.895908][T11607] bridge10: port 1(veth0_to_bond) entered blocking state
[  203.898368][T11607] bridge10: port 1(veth0_to_bond) entered disabled state
[  203.900616][T11607] veth0_to_bond: entered allmulticast mode
[  203.903830][T11607] veth0_to_bond: entered promiscuous mode
[  203.970811][T11613] batadv_slave_0: entered promiscuous mode
[  204.139591][T11621] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  204.247446][ T5871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.250114][ T5871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.263000][ T5871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.267948][ T5871] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.317166][T11630] bond21: option mode: unable to set because the bond device is up
[  204.400276][T11639] netlink: 'syz.2.1787': attribute type 1 has an invalid length.
[  204.467216][T11644] team0: Device ipvlan0 failed to register rx_handler
[  204.501828][T11645] bond33: (slave bridge12): making interface the new active one
[  204.506665][T11645] bond33: (slave bridge12): Enslaving as an active interface with an up link
[  204.559964][T11649] team0: Mode changed to "broadcast"
[  204.570172][T11649] netlink: 'syz.2.1790': attribute type 30 has an invalid length.
[  204.574239][T11649] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  204.577880][T11649] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  204.796187][T11668] netlink: 'syz.1.1796': attribute type 1 has an invalid length.
[  204.884299][T11668] 8021q: adding VLAN 0 to HW filter on device bond24
[  205.064556][T11680] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.073041][T11681] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.076022][T11681] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.155370][T11681] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.155767][T11685] netlink: 'syz.2.1800': attribute type 13 has an invalid length.
[  205.158428][T11681] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.164584][T11685] netlink: 'syz.2.1800': attribute type 17 has an invalid length.
[  205.205741][T11685] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.217503][T11685] 8021q: adding VLAN 0 to HW filter on device team0
[  205.229380][T11685] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  205.237553][ T5891] syz1: Port: 1 Link ACTIVE
[  205.241735][T11681] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.257179][T11681] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.276962][T11686] xfrm0: entered promiscuous mode
[  205.281031][T11686] xfrm0: entered allmulticast mode
[  205.331284][T11681] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.339140][T11681] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.375940][T11690] netlink: 'syz.0.1801': attribute type 4 has an invalid length.
[  205.449807][ T5852] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.454896][ T5852] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.458556][ T5852] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.461361][ T5852] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.464095][ T5852] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.466584][ T5852] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.469256][ T5852] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.471862][ T5852] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.584300][T11695] vlan5: entered promiscuous mode
[  205.586144][T11695] gretap0: entered promiscuous mode
[  205.688238][T11702] netlink: 'syz.2.1805': attribute type 12 has an invalid length.
[  205.691350][T11702] netlink: 'syz.2.1805': attribute type 12 has an invalid length.
[  205.742273][T11707] netlink: 'syz.2.1807': attribute type 10 has an invalid length.
[  205.912151][ T5852] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  205.919811][ T5852] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  205.964185][ T5852] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  205.971691][ T5852] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  206.086960][T11726] __nla_validate_parse: 18 callbacks suppressed
[  206.086978][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1812'.
[  206.093318][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1812'.
[  206.098676][T11726] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1812'.
[  206.202274][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'.
[  206.512308][T11761] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.516795][T11761] tipc: Resetting bearer <eth:syzkaller0>
[  206.761900][T11780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.764294][T11780] IPv6: NLM_F_CREATE should be set when creating new route
[  206.766641][T11780] IPv6: NLM_F_CREATE should be set when creating new route
[  206.781702][T11780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.798165][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'.
[  207.062861][T11792] veth0: entered promiscuous mode
[  207.065003][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1828'.
[  207.085806][T11792] veth0 (unregistering): left promiscuous mode
[  207.116020][T11801] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  207.118416][T11801] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  207.301729][T11826] netlink: 'syz.1.1836': attribute type 12 has an invalid length.
[  207.310312][T11826] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1836'.
[  207.335025][T11832] netlink: 'syz.2.1838': attribute type 8 has an invalid length.
[  207.751155][T11848] syzkaller1: entered promiscuous mode
[  207.755474][T11848] syzkaller1: entered allmulticast mode
[  207.784021][T11848] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1844'.
[  207.812259][T11850] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1845'.
[  207.816658][T11850] netlink: 'syz.0.1845': attribute type 5 has an invalid length.
[  207.943118][T11861] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1848'.
[  207.991001][T11865] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  208.195541][T11876] macvlan1: entered promiscuous mode
[  208.229999][T11879] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  209.274161][T11929] geneve5: entered promiscuous mode
[  209.278685][T11929] geneve5: entered allmulticast mode
[  209.281148][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  209.284088][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  209.300976][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  209.304022][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  209.413210][T11942] IPv6: sit3: Disabled Multicast RS
[  209.541444][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.545887][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.556026][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.558835][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.594310][T11972] bridge0: Device is already in use.
[  209.603951][T11972] dummy0: left promiscuous mode
[  209.605774][T11972] batadv0: left promiscuous mode
[  209.607377][T11972] batadv0: left allmulticast mode
[  209.609716][T11972] veth0_to_bond: left allmulticast mode
[  209.619562][T11972] xfrm0: left promiscuous mode
[  209.621259][T11972] xfrm0: left allmulticast mode
[  209.624226][T11972] ..0: left allmulticast mode
[  209.632809][T11972] hsr_slave_1: left allmulticast mode
[  209.635862][T11972] ip6tnl1: left promiscuous mode
[  209.637474][T11972] ip6tnl1: left allmulticast mode
[  209.642688][T11972] tipc: Resetting bearer <eth:syzkaller0>
[  209.645493][T11972] syzkaller0: left promiscuous mode
[  209.647564][T11972] syzkaller0: left allmulticast mode
[  209.650716][T11972] ip6gretap1: left allmulticast mode
[  209.654952][T11972] hsr1: left promiscuous mode
[  209.656668][T11972] bridge2: left promiscuous mode
[  209.658459][T11972] bridge2: left allmulticast mode
[  209.660620][T11972] bond1: left promiscuous mode
[  209.662134][T11972] bond1: left allmulticast mode
[  209.664893][T11972] veth3: left promiscuous mode
[  209.667606][T11972] vlan0: left allmulticast mode
[  209.669456][T11972] bond6: left allmulticast mode
[  209.671498][T11972] gretap3: left allmulticast mode
[  209.676880][T11972] macvtap1: left allmulticast mode
[  209.679572][T11972] vlan3: left promiscuous mode
[  209.681658][T11972] bond10: left promiscuous mode
[  209.686311][T11972] vlan3: left allmulticast mode
[  209.688026][T11972] bond10: left allmulticast mode
[  209.693352][T11972] gretap4: left promiscuous mode
[  209.695090][T11972] bond13: left promiscuous mode
[  209.696640][T11972] bond13: left allmulticast mode
[  209.698389][T11972] geneve3: left promiscuous mode
[  209.699906][T11972] geneve3: left allmulticast mode
[  209.702432][T11972] vlan4: left promiscuous mode
[  209.704288][T11972] bond18: left promiscuous mode
[  209.709400][T11972] vlan4: left allmulticast mode
[  209.710964][T11972] bond18: left allmulticast mode
[  209.715279][T11972] geneve5: left promiscuous mode
[  209.716852][T11972] geneve5: left allmulticast mode
[  209.721957][T11972] macvlan0: left promiscuous mode
[  209.726645][T11972] macvlan0: left allmulticast mode
[  209.728639][T11980] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  209.731178][T11980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.743684][T11972] vlan0: left promiscuous mode
[  209.745349][T11972] bond6: left promiscuous mode
[  209.746863][T11972] gretap3: left promiscuous mode
[  209.749071][T11972] macvlan1: left promiscuous mode
[  209.772095][ T5871] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  209.775098][ T5871] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  209.777667][ T5871] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  209.780166][ T5871] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  209.797545][T11980] bond34: entered promiscuous mode
[  209.799395][T11980] bond34: entered allmulticast mode
[  209.813840][T11980] bridge15: entered promiscuous mode
[  209.815980][T11980] bridge15: entered allmulticast mode
[  209.820364][T11980] bond34: (slave bridge15): making interface the new active one
[  209.823368][T11980] bond34: (slave bridge15): Enslaving as an active interface with an up link
[  209.879014][T11989] validate_nla: 5 callbacks suppressed
[  209.879027][T11989] netlink: 'syz.1.1883': attribute type 39 has an invalid length.
[  209.884839][T11988] netlink: 'syz.1.1883': attribute type 39 has an invalid length.
[  209.888977][T11988] openvswitch: netlink: Message has 8 unknown bytes.
[  209.891842][T11988] netlink: 'syz.1.1883': attribute type 5 has an invalid length.
[  209.900920][T11989] vlan1: entered allmulticast mode
[  210.382757][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  210.410803][T12008] bond0: (slave rose0): Error: Device can not be enslaved while up
[  210.504223][T12009] bond21: option mode: unable to set because the bond device is up
[  210.518407][T12009] bond21: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  210.637641][ T5852] bond21: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  210.749596][T12021] syz_tun: entered allmulticast mode
[  210.762960][ T5871] bond21: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  210.781425][T12020] syz_tun: left allmulticast mode
[  210.925097][T12032] netlink: 'syz.1.1893': attribute type 1 has an invalid length.
[  211.170743][T12053] __nla_validate_parse: 24 callbacks suppressed
[  211.170755][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1899'.
[  211.221888][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1899'.
[  211.337757][T12060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1900'.
[  211.769253][T12063] netlink: 'syz.0.1901': attribute type 9 has an invalid length.
[  211.772405][T12063] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1901'.
[  212.102116][T12070] tipc: Resetting bearer <eth:syzkaller0>
[  212.150954][   T10] syz1: Port: 1 Link DOWN
[  212.150967][ T5871] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.150986][ T5871] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.159079][ T5871] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.161856][ T5871] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.168284][ T5871] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.172358][ T5871] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.177316][ T5871] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  212.180811][ T5871] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.444809][T12076] netlink: 'syz.0.1905': attribute type 1 has an invalid length.
[  212.996266][T12089] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  213.266244][T12102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.281594][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'.
[  213.794349][T12117] netlink: 'syz.2.1919': attribute type 30 has an invalid length.
[  214.016147][T12120] bond33: (slave bridge12): Releasing active interface
[  214.020455][T12120] bond34: (slave bridge15): Releasing backup interface
[  214.089153][T12120] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  214.156335][T12129] xt_time: invalid argument - start or stop time greater than 23:59:59
[  214.160161][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'.
[  214.346945][T12133] bridge0: Device is already in use.
[  214.472370][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'.
[  214.633772][T12155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1929'.
[  214.647771][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1929'.
[  214.652334][T12155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1929'.
[  214.785929][T12160] vlan1: entered promiscuous mode
[  214.795875][T12160] macvtap0: entered promiscuous mode
[  215.156832][T12168] netlink: zone id is out of range
[  215.161526][T12168] netlink: zone id is out of range
[  215.163767][T12168] netlink: zone id is out of range
[  215.165516][T12168] netlink: zone id is out of range
[  215.169354][T12168] netlink: zone id is out of range
[  215.174272][T12168] netlink: zone id is out of range
[  215.266128][T12169] netlink: del zone limit has 4 unknown bytes
[  215.288895][T12168] netlink: set zone limit has 4 unknown bytes
[  215.494276][T12182] @0: renamed from bond_slave_1
[  215.529902][T12191] bond0: (slave rose0): Error: Device can not be enslaved while up
[  215.639837][T12199] netlink: 'syz.2.1939': attribute type 12 has an invalid length.
[  215.664282][ T6841] bond21: (slave ip6gretap4): link status up again after 0 ms
[  215.676728][T12204] netlink: 'syz.1.1941': attribute type 7 has an invalid length.
[  216.169529][T12242] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.174457][T12242] syzkaller0: entered promiscuous mode
[  216.176710][T12242] syzkaller0: entered allmulticast mode
[  216.179480][T12242] tipc: Resetting bearer <eth:syzkaller0>
[  216.181532][T12244] __nla_validate_parse: 6 callbacks suppressed
[  216.181549][T12244] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1950'.
[  216.348744][T12255] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.404869][T12263] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  216.638233][T12274] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1957'.
[  216.641772][T12274] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1957'.
[  216.670345][T12274] ip_vti0: left promiscuous mode
[  216.677791][T12274] 8021q: adding VLAN 0 to HW filter on device 
[  217.068403][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1963'.
[  217.071312][T12292] netlink: 'syz.1.1963': attribute type 14 has an invalid length.
[  217.075619][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1963'.
[  217.078661][T12292] netlink: 'syz.1.1963': attribute type 14 has an invalid length.
[  217.120849][T12278] netlink: 'syz.2.1958': attribute type 1 has an invalid length.
[  217.123885][T12278] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1958'.
[  217.134069][T12278] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1958'.
[  217.271805][ T5871] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20001 - 0
[  217.275024][ T5871] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20001 - 0
[  217.277796][ T5871] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20001 - 0
[  217.280437][ T5871] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20001 - 0
[  217.608849][T12313] vxcan1: entered allmulticast mode
[  217.618321][T12313] vxcan1: left allmulticast mode
[  217.746051][T12321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1972'.
[  217.750642][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1972'.
[  217.759129][T12321] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.764083][T12321] tipc: Resetting bearer <eth:syzkaller0>
[  218.030880][T12331] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.038868][T12331] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.042271][T12331] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  218.058312][T12331] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  218.174529][T12340] bridge12: entered promiscuous mode
[  218.178026][T12340] bridge12: entered allmulticast mode
[  218.208042][T12331] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.222235][T12331] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.226007][T12331] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  218.230679][T12331] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  218.283279][ T6841] net_ratelimit: 21 callbacks suppressed
[  218.283307][ T6841] bond21: (slave ip6gretap4): failed to get link speed/duplex
[  218.307045][T12331] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.310805][T12331] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.314802][T12331] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  218.318533][T12331] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  218.379884][T12331] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.386241][T12331] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.390245][T12331] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  218.394867][T12331] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20001 - 0
[  218.429150][T12350] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1982'.
[  218.433995][T12350] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  218.437516][T12350] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  218.442771][ T6841] bond21: (slave ip6gretap4): failed to get link speed/duplex
[  218.520422][ T5871] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  218.528558][ T5871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  218.532221][ T5871] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  218.536276][ T5871] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  218.551505][ T5871] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  218.554747][ T5871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  218.557670][ T5871] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  218.560564][ T5871] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  218.590938][ T5871] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  218.597803][ T5871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  218.602945][ T5871] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  218.613167][ T5871] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  218.641708][T12350] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode
[  218.681270][ T5871] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  218.685053][ T5871] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  218.687615][ T5871] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  218.690090][ T5871] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  218.722987][ T5871] bond21: (slave ip6gretap4): failed to get link speed/duplex
[  218.832115][T12362] netlink: 'syz.2.1985': attribute type 9 has an invalid length.
[  218.877343][ T5871] bond21: (slave ip6gretap4): failed to get link speed/duplex
[  218.909936][T12369] bond35: entered promiscuous mode
[  218.911995][T12369] 8021q: adding VLAN 0 to HW filter on device bond35
[  218.936090][T12369] 8021q: adding VLAN 0 to HW filter on device bond35
[  218.939281][T12369] bond35: (slave vcan0): The slave device specified does not support setting the MAC address
[  218.944128][T12369] bond35: (slave vcan0): Error -95 calling set_mac_address
[  219.013912][ T5852] bond21: (slave ip6gretap4): failed to get link speed/duplex
[  219.134508][ T5852] bond21: (slave ip6gretap4): failed to get link speed/duplex
[  219.215341][T12395] netlink: 'syz.1.1992': attribute type 14 has an invalid length.
[  219.218044][T12395] netlink: 'syz.1.1992': attribute type 14 has an invalid length.
[  219.252839][ T5871] bond21: (slave ip6gretap4): failed to get link speed/duplex
[  219.362851][ T5871] bond21: (slave ip6gretap4): failed to get link speed/duplex
[  219.490402][T12422] erspan0: entered promiscuous mode
[  219.505302][T12419] vti0: entered promiscuous mode
[  219.529522][T12424] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  219.766548][   T54] Bluetooth: hci2: link tx timeout
[  219.769828][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  219.827436][T12439] veth1: entered promiscuous mode
[  219.969414][T12440] netlink: 'syz.1.2006': attribute type 1 has an invalid length.
[  220.477495][T12458] netlink: 'syz.1.2010': attribute type 39 has an invalid length.
[  220.742186][T12478] 8021q: VLANs not supported on lo
[  220.811296][T12478] erspan0: entered promiscuous mode
[  220.813930][T12478] erspan0: left promiscuous mode
[  220.991383][T12489] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.003799][ T2285] syz1: Port: 1 Link ACTIVE
[  221.052053][T12492] validate_nla: 1 callbacks suppressed
[  221.052068][T12492] netlink: 'syz.0.2022': attribute type 1 has an invalid length.
[  221.153843][T12503] macvtap2: entered allmulticast mode
[  221.155683][T12503] veth0_macvtap: entered allmulticast mode
[  221.293598][T12514] netlink: 'syz.0.2026': attribute type 9 has an invalid length.
[  221.349130][T12517] netlink: 'syz.0.2028': attribute type 4 has an invalid length.
[  221.352478][T12517] netlink: 'syz.0.2028': attribute type 4 has an invalid length.
[  221.401769][T12519] __nla_validate_parse: 13 callbacks suppressed
[  221.401784][T12519] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2029'.
[  221.558918][T12524] netlink: 'syz.1.2031': attribute type 10 has an invalid length.
[  221.711811][T12532] netlink: 'syz.1.2035': attribute type 1 has an invalid length.
[  221.714546][T12532] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2035'.
[  221.826014][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  222.257241][T12562] veth0_to_bond: left allmulticast mode
[  222.259068][T12562] veth0_to_bond: left promiscuous mode
[  222.261285][T12562] bridge10: port 1(veth0_to_bond) entered disabled state
[  222.293993][T12562] bond21: (slave ip6gretap4): Removing an active aggregator
[  222.308771][T12562] bond21: (slave ip6gretap4): Releasing backup interface
[  222.365373][T12562] netlink: 'syz.1.2042': attribute type 10 has an invalid length.
[  222.385564][T12562] 8021q: adding VLAN 0 to HW filter on device 
[  222.391281][T12562] : (slave wlan1): Enslaving as an active interface with an up link
[  222.406466][T12562] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  222.409908][T12562] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  222.839307][T12574] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2047'.
[  222.848513][T12574] workqueue: Failed to create a rescuer kthread for wq "phy5": -EINTR
[  223.153566][T12607] netlink: 'syz.1.2053': attribute type 39 has an invalid length.
[  223.261259][T12617] netlink: 'syz.0.2057': attribute type 1 has an invalid length.
[  223.288484][T12617] bond23: entered promiscuous mode
[  223.303241][T12617] 8021q: adding VLAN 0 to HW filter on device bond23
[  223.350799][T12617] 8021q: adding VLAN 0 to HW filter on device bond24
[  223.361981][T12617] bond23: (slave bond24): making interface the new active one
[  223.366399][T12617] bond24: entered promiscuous mode
[  223.369946][T12617] bond23: (slave bond24): Enslaving as an active interface with an up link
[  223.379535][T12619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2056'.
[  223.587145][T12638] net_ratelimit: 25 callbacks suppressed
[  223.587168][T12638] openvswitch: netlink: Key 12 has unexpected len 0 expected 2
[  223.708345][T12638] tipc: Resetting bearer <eth:syzkaller0>
[  223.795416][T11591] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.802822][T11591] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  223.805809][T11591] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  223.808641][T11591] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  223.820116][T11591] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.824547][T11591] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  223.827568][T11591] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  223.830783][T11591] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  223.836563][T11591] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.839794][T11591] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  223.843164][T11591] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  223.846468][T11591] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  223.849641][T11591] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  223.855493][T11591] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  223.858867][T11591] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  223.862395][T11591] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  224.045880][T12657] netlink: 'syz.1.2067': attribute type 10 has an invalid length.
[  224.050032][T12657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2067'.
[  224.307676][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'.
[  224.498221][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  224.566377][T12678] bond0: entered promiscuous mode
[  224.568125][T12678] bond0: entered allmulticast mode
[  224.661732][T12683] 8021q: adding VLAN 0 to HW filter on device bond26
[  224.674753][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2076'.
[  224.676563][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2075'.
[  224.678441][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'.
[  224.755346][T12687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.801801][T12687] veth1_to_team: entered promiscuous mode
[  224.806726][T12687] veth1_to_team: left promiscuous mode
[  225.276494][T12726] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  225.438416][T12738] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap8
[  225.448313][T12738] gretap8: entered promiscuous mode
[  225.450201][T12738] gretap8: entered allmulticast mode
[  226.467069][T12781] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  226.570108][  T960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.573176][  T960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.635390][T12795] validate_nla: 4 callbacks suppressed
[  226.635411][T12795] netlink: 'syz.0.2107': attribute type 4 has an invalid length.
[  226.659376][T12795] netlink: 'syz.0.2107': attribute type 4 has an invalid length.
[  226.723496][T12804] xt_socket: unknown flags 0x50
[  226.736678][T12804] __nla_validate_parse: 8 callbacks suppressed
[  226.736690][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'.
[  226.741507][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'.
[  226.750529][T12804] netlink: 'syz.0.2111': attribute type 14 has an invalid length.
[  226.753703][T12801] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2110'.
[  226.756771][T12804] netlink: 'syz.0.2111': attribute type 11 has an invalid length.
[  226.758374][T12806] netlink: 'syz.1.2112': attribute type 3 has an invalid length.
[  226.766397][T12806] syz_tun: entered allmulticast mode
[  226.808514][T12813] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1819698532)
[  226.815540][T12806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2112'.
[  226.823049][T12813] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  226.830581][T12805] syz_tun: left allmulticast mode
[  226.892185][T12816] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  226.895683][T12817] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  226.909365][T12821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2115'.
[  226.910534][T12816] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  226.926309][T12821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2115'.
[  226.989493][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.999374][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.156839][T12839] tipc: Resetting bearer <eth:syzkaller0>
[  227.207334][T12843] can: request_module (can-proto-0) failed.
[  227.265314][T12848] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2123'.
[  227.266544][T12849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'.
[  227.305387][T12849] 8021q: adding VLAN 0 to HW filter on device bond36
[  227.359720][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'.
[  227.364438][T12857] netlink: 'syz.1.2127': attribute type 14 has an invalid length.
[  227.367690][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'.
[  227.371298][T12857] netlink: 'syz.1.2127': attribute type 14 has an invalid length.
[  227.425638][T12859] dvmrp8: entered allmulticast mode
[  227.436733][T12859] dvmrp8: left allmulticast mode
[  227.539581][T12868] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  227.561232][T12872] bridge0: failed insert local address into bridge forwarding table
[  227.836155][T12883] netlink: 'syz.1.2133': attribute type 1 has an invalid length.
[  227.961426][T12892] syzkaller1: entered promiscuous mode
[  227.964792][T12892] syzkaller1: entered allmulticast mode
[  227.995274][T12895] mac80211_hwsim hwsim5 : renamed from wlan0
[  228.188023][T12902] macvtap3: entered promiscuous mode
[  228.190129][T12902] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode
[  228.191308][T12909] netlink: 'syz.2.2142': attribute type 15 has an invalid length.
[  228.216924][T12909] netlink: 'syz.2.2142': attribute type 15 has an invalid length.
[  228.220761][T12906] team0: Refused to change device type
[  228.253912][ T6841] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  228.257569][ T6841] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  228.261634][T12910] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.266320][ T6841] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  228.270132][ T6841] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  228.280014][T12910] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  228.283402][T12910] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  228.287051][T12910] tipc: Resetting bearer <eth:syzkaller0>
[  228.846903][T12932] openvswitch: netlink: Actions may not be safe on all matching packets
[  228.853756][T12938] 8021q: adding VLAN 0 to HW filter on device bond28
[  228.978671][ T5871] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[  228.982065][ T5871] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[  228.985570][   T10] syz1: Port: 1 Link DOWN
[  228.987344][ T5871] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[  228.990403][ T5871] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[  229.095420][T12954] erspan0: left promiscuous mode
[  229.117923][T12954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  229.131473][T12954] xfrm0: entered promiscuous mode
[  229.135816][T12954] xfrm0: entered allmulticast mode
[  229.809918][T12968] macsec2: entered promiscuous mode
[  229.812016][T12968] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  229.822942][T12968] macsec2: entered allmulticast mode
[  229.824739][T12968] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  230.367551][T13005] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.375684][T13005] tipc: Resetting bearer <eth:syzkaller0>
[  230.719844][T13026] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  230.976331][   T68] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  231.115277][T13036] 8021q: adding VLAN 0 to HW filter on device bond10
[  231.155137][T13036] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  231.160356][T13036] bond10: (slave macvlan0): Enslaving as a backup interface with a down link
[  231.187814][T13037] bond10: (slave macvlan0): Releasing backup interface
[  231.280779][T13042] tipc: Resetting bearer <eth:syzkaller0>
[  231.823366][T13065] veth0: entered promiscuous mode
[  232.010815][T13065] veth0: left promiscuous mode
[  232.141211][T13081] validate_nla: 4 callbacks suppressed
[  232.141231][T13081] netlink: 'syz.0.2197': attribute type 10 has an invalid length.
[  232.146751][T13081] __nla_validate_parse: 23 callbacks suppressed
[  232.146769][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2197'.
[  232.281980][T13082] tipc: Resetting bearer <eth:syzkaller0>
[  232.295341][T13082] veth0_macvtap: left allmulticast mode
[  232.310858][T13082] mac80211_hwsim hwsim38 wlan1: left promiscuous mode
[  232.318468][T13082] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  232.320817][T13082] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  232.854066][T13092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2200'.
[  232.871897][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'.
[  233.106145][T13108] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2208'.
[  233.133827][T13108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2208'.
[  233.154350][T13111] pim6reg1: entered promiscuous mode
[  233.156643][T13111] pim6reg1: entered allmulticast mode
[  233.221067][T13115] pimreg: left allmulticast mode
[  233.223415][T13115] dvmrp8: left allmulticast mode
[  233.401691][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2213'.
[  233.471925][T13144] netlink: 'syz.2.2216': attribute type 1 has an invalid length.
[  233.510187][T13144] 8021q: adding VLAN 0 to HW filter on device bond38
[  233.537358][T13144] bond38: (slave veth19): Enslaving as an active interface with a down link
[  233.549087][T13144] 8021q: adding VLAN 0 to HW filter on device batadv3
[  233.552019][T13144] bond38: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  233.890232][T13175] dummy0: entered promiscuous mode
[  233.896049][T13175] batadv_slave_0: entered promiscuous mode
[  233.899788][T13175] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  233.905443][T13175] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  233.909761][T13175] hsr0: entered allmulticast mode
[  233.911650][T13175] dummy0: entered allmulticast mode
[  233.913909][T13175] batadv_slave_0: entered allmulticast mode
[  233.955920][T13171] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2219'.
[  234.100032][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'.
[  234.185656][T13193] bond25 (unregistering): Released all slaves
[  234.199960][T13196] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2227'.
[  234.228782][T13196] bridge16: the hash_elasticity option has been deprecated and is always 16
[  234.232346][T13196] bridge16: entered allmulticast mode
[  234.368628][T13207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2230'.
[  234.380362][T13207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.385886][T13207] tipc: Resetting bearer <eth:syzkaller0>
[  234.618779][T13227] netlink: 'syz.0.2239': attribute type 10 has an invalid length.
[  234.653983][T13232] netlink: 'syz.1.2240': attribute type 2 has an invalid length.
[  234.660858][T13232] ave_0: entered promiscuous mode
[  234.903851][T13252] netlink: 'syz.1.2245': attribute type 1 has an invalid length.
[  234.929730][T13252] bond29: (slave bridge17): making interface the new active one
[  234.933370][T13252] bond29: (slave bridge17): Enslaving as an active interface with an up link
[  235.094224][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.097224][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.093725][    T9] IPVS: starting estimator thread 0...
[  236.108667][T13296] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  236.192966][T13297] IPVS: using max 62 ests per chain, 148800 per kthread
[  236.450541][T13311] netlink: 'syz.1.2264': attribute type 1 has an invalid length.
[  236.455035][T13311] netlink: 'syz.1.2264': attribute type 1 has an invalid length.
[  236.457717][T13311] netlink: 'syz.1.2264': attribute type 2 has an invalid length.
[  236.460688][T13311] netlink: 'syz.1.2264': attribute type 2 has an invalid length.
[  236.463767][T13311] netlink: 'syz.1.2264': attribute type 1 has an invalid length.
[  236.544895][T13326] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  236.550042][T13326] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  236.591441][T13330] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  236.595829][T13330] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.905703][T13343] veth0: entered promiscuous mode
[  236.919594][T13343] veth0 (unregistering): left promiscuous mode
[  237.247143][T13353] __nla_validate_parse: 16 callbacks suppressed
[  237.247162][T13353] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2280'.
[  237.371579][T13366] vxcan6: entered allmulticast mode
[  237.609021][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'.
[  237.931081][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'.
[  238.007623][T13399] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  238.011871][T13399] tipc: Resetting bearer <eth:syzkaller0>
[  238.015141][T13399] syzkaller0: Caught tx_queue_len zero misconfig
[  238.057162][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2300'.
[  238.067529][T13413] validate_nla: 1 callbacks suppressed
[  238.067543][T13413] netlink: 'syz.2.2301': attribute type 1 has an invalid length.
[  238.068427][T13412] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2301'.
[  238.096323][T13414] 8021q: adding VLAN 0 to HW filter on device bond39
[  238.121002][T13410] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  238.126502][T13410] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  238.145636][T13419] veth0: entered promiscuous mode
[  238.151510][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'.
[  238.157318][T13419] veth0 (unregistering): left promiscuous mode
[  238.296023][T13429] netlink: 'syz.2.2305': attribute type 1 has an invalid length.
[  238.355763][T13429] bond40: (slave veth1): Enslaving as an active interface with a down link
[  238.403147][T13429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2305'.
[  238.410442][T13429] 8021q: adding VLAN 0 to HW filter on device bond40
[  238.420458][T13429] veth0: entered promiscuous mode
[  238.463833][T13429] veth0: left promiscuous mode
[  238.497933][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2307'.
[  238.501317][T13439] netlink: 'syz.2.2308': attribute type 1 has an invalid length.
[  238.513593][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2307'.
[  238.580063][T13443] bond41: (slave vxcan7): The slave device specified does not support setting the MAC address
[  238.585262][T13443] bond41: (slave vxcan7): Error -95 calling set_mac_address
[  238.620197][T13439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2308'.
[  239.427517][T13493] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  239.468944][T13495] sctp: [Deprecated]: syz.2.2327 (pid 13495) Use of int in maxseg socket option.
[  239.468944][T13495] Use struct sctp_assoc_value instead
[  239.675517][T13503] netlink: 'syz.2.2330': attribute type 1 has an invalid length.
[  240.133419][T13532] geneve7: entered promiscuous mode
[  240.135650][T13532] geneve7: entered allmulticast mode
[  240.139113][ T6841] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 37805 - 0
[  240.142416][ T6841] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 37805 - 0
[  240.149503][ T6841] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 37805 - 0
[  240.167512][ T6841] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 37805 - 0
[  240.172886][T13535] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.262148][T13543] netlink: 'syz.0.2338': attribute type 1 has an invalid length.
[  240.287972][T13543] netlink: 'syz.0.2338': attribute type 4 has an invalid length.
[  240.508942][T13560] netlink: 'syz.0.2341': attribute type 8 has an invalid length.
[  240.621121][T13565] bridge0: failed insert local address into bridge forwarding table
[  241.124352][T13611] macvtap4: entered allmulticast mode
[  241.126107][T13611] veth0_macvtap: entered allmulticast mode
[  242.481518][T13656] bond0: (slave rose0): Error: Device can not be enslaved while up
[  242.570950][T13659] __nla_validate_parse: 20 callbacks suppressed
[  242.570962][T13659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2361'.
[  243.087033][T13681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.198849][T13688] netlink: 'syz.0.2370': attribute type 1 has an invalid length.
[  243.204455][T13690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2370'.
[  243.234140][T13689] bond25: (slave vxcan1): The slave device specified does not support setting the MAC address
[  243.239656][T13689] bond25: (slave vxcan1): Error -95 calling set_mac_address
[  243.488223][T13699] vlan5: entered promiscuous mode
[  243.489978][T13699] macvtap0: entered promiscuous mode
[  243.559190][T13704] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.683674][T13711] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2379'.
[  243.726676][T13717] netlink: 'syz.2.2380': attribute type 1 has an invalid length.
[  243.760804][T13717] 8021q: adding VLAN 0 to HW filter on device bond42
[  243.775323][T13717] bond42: (slave gretap5): making interface the new active one
[  243.781906][T13717] bond42: (slave gretap5): Enslaving as an active interface with an up link
[  243.810659][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2382'.
[  243.888449][T13728] netlink: 'syz.0.2384': attribute type 10 has an invalid length.
[  243.891580][T13728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2384'.
[  243.895349][T13728] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  243.906098][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2385'.
[  243.929892][T13730] netlink: 'syz.2.2385': attribute type 1 has an invalid length.
[  243.985610][T13736] netlink: 'syz.0.2388': attribute type 4 has an invalid length.
[  243.992304][T13736] netlink: 'syz.0.2388': attribute type 4 has an invalid length.
[  244.087109][T13742] netdevsim netdevsim2 : renamed from netdevsim0
[  244.183606][T13748] netlink: 'syz.2.2393': attribute type 10 has an invalid length.
[  244.537819][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2394'.
[  244.567879][T13753] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.673810][T13759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.779431][T13763] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  244.786399][T13763] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  244.815176][T13765] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2397'.
[  244.909406][T13768] netlink: 'syz.0.2398': attribute type 27 has an invalid length.
[  244.980784][T13768] xfrm0: left promiscuous mode
[  244.983362][T13768] xfrm0: left allmulticast mode
[  244.985705][T13768] tipc: Resetting bearer <eth:syzkaller0>
[  244.989022][T13768] syzkaller0: left promiscuous mode
[  244.991277][T13768] syzkaller0: left allmulticast mode
[  244.995368][T13768] bridge12: left promiscuous mode
[  244.998149][T13768] bridge12: left allmulticast mode
[  245.000596][T13768] veth1: left promiscuous mode
[  245.004495][T13768] macvtap2: left allmulticast mode
[  245.006664][T13768] mac80211_hwsim hwsim38 wlan1: left allmulticast mode
[  245.009630][T13768] bond23: left promiscuous mode
[  245.011620][T13768] bond24: left promiscuous mode
[  245.014862][T13768] gretap8: left promiscuous mode
[  245.016797][T13768] gretap8: left allmulticast mode
[  245.018847][T13768] macvtap3: left promiscuous mode
[  245.020935][T13768] macsec2: left promiscuous mode
[  245.025824][T13768] macsec2: left allmulticast mode
[  245.029630][T13768] hsr0: left allmulticast mode
[  245.031542][T13768] dummy0: left allmulticast mode
[  245.033907][T13768] batadv_slave_0: left allmulticast mode
[  245.089811][T13775] bridge17: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  245.125378][T13776] bridge18: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  245.708198][T13798] macvtap2: entered allmulticast mode
[  245.709937][T13798] bridge0: entered allmulticast mode
[  245.713476][T13798] bridge0: left allmulticast mode
[  245.863202][T13801] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2409'.
[  245.911906][T13803] openvswitch: netlink: Message has 4 unknown bytes.
[  245.973730][T13805] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  245.976134][T13805] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  245.991838][T13809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2413'.
[  246.029993][T13813] netlink: 'syz.1.2415': attribute type 1 has an invalid length.
[  246.080125][T13813] bond30: (slave geneve8): making interface the new active one
[  246.086110][T13813] bond30: (slave geneve8): Enslaving as an active interface with an up link
[  246.119362][T11591] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  246.127429][T11591] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  246.130442][T11591] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  246.138385][T13817] vlan5: entered allmulticast mode
[  246.140138][T13817] gretap0: entered allmulticast mode
[  246.147661][T11591] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  246.645285][T13831] veth1_to_team: entered promiscuous mode
[  246.663056][T13831] veth1_to_team: left promiscuous mode
[  246.842318][T13835] netlink: 'syz.0.2422': attribute type 1 has an invalid length.
[  246.882232][T13835] 8021q: adding VLAN 0 to HW filter on device bond26
[  246.904532][T13835] bond26: (slave veth9): Enslaving as an active interface with a down link
[  246.917474][T13835] macvlan2: entered promiscuous mode
[  246.922897][T13835] macvlan2: entered allmulticast mode
[  246.926044][T13835] bond26: entered promiscuous mode
[  246.931011][T13835] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  246.936396][T13835] bond26: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  246.946371][T13835] bond26: left promiscuous mode
[  247.265453][T13856] wg2: left allmulticast mode
[  247.268417][T13856] batadv_slave_0: left promiscuous mode
[  247.271974][T13856] ip6gre1: left allmulticast mode
[  247.303170][T13856] tipc: Resetting bearer <eth:syzkaller0>
[  247.345770][T13856] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  247.348219][T13856] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  247.351397][T13856] bond3: left promiscuous mode
[  247.353941][T13856] veth5: left promiscuous mode
[  247.356198][T13856] bond6: left promiscuous mode
[  247.365315][T13856] macvtap1: left promiscuous mode
[  247.367297][T13856] macvtap1: left allmulticast mode
[  247.393700][T13856] gtp1: left promiscuous mode
[  247.395233][T13856] gtp1: left allmulticast mode
[  247.401441][T13856] bond20: left promiscuous mode
[  247.405983][T13856] bond20: left allmulticast mode
[  247.408858][T13856] geneve5: left promiscuous mode
[  247.410760][T13856] geneve5: left allmulticast mode
[  247.414515][T13856] vti0: left promiscuous mode
[  247.436112][T13856] bridge16: left allmulticast mode
[  247.444212][T13856] geneve7: left promiscuous mode
[  247.445983][T13856] geneve7: left allmulticast mode
[  247.473485][ T5871] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 37805 - 0
[  247.476341][ T5871] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  247.479008][ T5871] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 37805 - 0
[  247.481630][ T5871] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  247.486900][ T5871] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 37805 - 0
[  247.489987][ T5871] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  247.493249][ T5871] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 37805 - 0
[  247.496035][ T5871] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  247.503008][T13865] syz_tun: entered allmulticast mode
[  247.539330][T13865] bond0: left promiscuous mode
[  247.540899][T13865] bond0: left allmulticast mode
[  247.542869][T13865] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.555749][T13865] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  247.561751][    T9] syz1: Port: 1 Link ACTIVE
[  247.571073][T13864] syz_tun: left allmulticast mode
[  247.704717][T13877] 8021q: adding VLAN 0 to HW filter on device bond43
[  247.781515][T13886] __nla_validate_parse: 11 callbacks suppressed
[  247.781527][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2437'.
[  247.787658][T13886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2437'.
[  247.790515][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2437'.
[  247.802942][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2437'.
[  247.811349][T13884] 8021q: adding VLAN 0 to HW filter on device bond27
[  247.835630][T13884] veth11: entered promiscuous mode
[  247.849838][T13889] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2438'.
[  247.859992][T13889] vlan0: entered allmulticast mode
[  248.026479][T13898] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2440'.
[  248.042244][T13894] tipc: Resetting bearer <eth:syzkaller0>
[  248.081744][T13894] veth0_macvtap: left allmulticast mode
[  248.110045][   T24] syz1: Port: 1 Link DOWN
[  248.166869][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'.
[  248.170222][T13901] 8021q: adding VLAN 0 to HW filter on device bond10
[  248.189086][T13901] bond10: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  248.236115][T13905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2444'.
[  248.284455][ T6841] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  248.311296][T13905] bridge21: port 1(veth21) entered blocking state
[  248.315304][T13905] bridge21: port 1(veth21) entered disabled state
[  248.319231][T13905] veth21: entered allmulticast mode
[  248.326142][T13905] veth21: entered promiscuous mode
[  248.335188][T13908] bridge21: port 2(veth0_to_bond) entered blocking state
[  248.337439][T13908] bridge21: port 2(veth0_to_bond) entered disabled state
[  248.339853][T13908] veth0_to_bond: entered allmulticast mode
[  248.343403][T13908] veth0_to_bond: entered promiscuous mode
[  248.413243][ T6841] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  248.627834][T13916] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.699116][T13921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2448'.
[  248.702142][T13921] netdevsim0: renamed from gre0
[  248.707120][T13921] netdevsim0: entered promiscuous mode
[  248.877398][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2452'.
[  248.882342][T13927] validate_nla: 9 callbacks suppressed
[  248.882356][T13927] netlink: 'syz.0.2452': attribute type 1 has an invalid length.
[  250.636540][T13982] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  250.654044][T13982] veth0_to_bond: left allmulticast mode
[  250.656163][T13982] veth0_to_bond: left promiscuous mode
[  250.658632][T13982] bridge21: port 2(veth0_to_bond) entered disabled state
[  250.703164][T13982] bond38: (slave veth19): Releasing active interface
[  250.710103][T13982] bond40: (slave veth1): Releasing active interface
[  250.717184][T13982] bond42: (slave gretap5): Releasing active interface
[  250.722122][T13982] bond10: (slave ip6gretap4): Removing an active aggregator
[  250.730272][T13982] bond10: (slave ip6gretap4): Releasing backup interface
[  250.737394][T13982] veth21: left allmulticast mode
[  250.739264][T13982] veth21: left promiscuous mode
[  250.741076][T13982] bridge21: port 1(veth21) entered disabled state
[  250.759271][T13982] netlink: 'syz.2.2468': attribute type 10 has an invalid length.
[  250.763789][T13982] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  250.766037][T13982] bond0: (slave wlan1): refused to change device type
[  250.788494][T13982] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  250.792330][T13982] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  250.863758][T13994] sctp: [Deprecated]: syz.1.2471 (pid 13994) Use of struct sctp_assoc_value in delayed_ack socket option.
[  250.863758][T13994] Use struct sctp_sack_info instead
[  250.995089][T14000] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.999387][T14000] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  251.003935][T14000] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  251.008037][T14000] tipc: Resetting bearer <eth:syzkaller0>
[  251.027143][T14000] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  251.080400][T14002] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  251.088439][T14002] syzkaller0: entered promiscuous mode
[  251.090741][T14002] syzkaller0: entered allmulticast mode
[  251.095829][T14002] tipc: Resetting bearer <eth:syzkaller0>
[  251.808809][T14064] bond2: option mode: unable to set because the bond device has slaves
[  251.909737][T14064] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  251.953577][T14070] macsec4: entered promiscuous mode
[  251.955506][T14070] veth1_to_hsr: entered promiscuous mode
[  251.957761][T14070] macsec4: entered allmulticast mode
[  251.960704][T14070] veth1_to_hsr: entered allmulticast mode
[  252.026774][T14073] 1X: renamed from 60X
[  252.031235][T14073] 1X: entered allmulticast mode
[  252.039422][T14073] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  252.877777][ T5852] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.881021][ T5852] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.886134][ T5852] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.889681][ T5852] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.957202][T14118] netlink: 'syz.2.2510': attribute type 10 has an invalid length.
[  252.960171][T14118] bond0: (slave wlan1): refused to change device type
[  252.967050][T14118] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  252.970121][T14118] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  253.550873][T14133] __nla_validate_parse: 42 callbacks suppressed
[  253.550991][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'.
[  253.571934][T14135] netlink: 'syz.0.2515': attribute type 11 has an invalid length.
[  253.736998][T14149] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  253.739429][T14149] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  253.806032][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'.
[  253.825497][T14155] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2522'.
[  253.830757][T14153] bond7: (slave bridge0): Releasing active interface
[  253.836522][T14157] netlink: 'syz.2.2521': attribute type 1 has an invalid length.
[  253.874200][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'.
[  253.957751][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.961016][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.999771][T14161] netlink: 'syz.0.2523': attribute type 11 has an invalid length.
[  254.051874][T14166] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2524'.
[  254.119487][T14168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2525'.
[  254.228392][T14180] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.236657][T14180] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  254.239911][T14180] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  254.244450][T14180] tipc: Resetting bearer <eth:syzkaller0>
[  254.340570][T14188] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  254.403899][T14194] openvswitch: netlink: Unknown key attributes 2
[  254.421634][T14194] tipc: Resetting bearer <eth:syzkaller0>
[  254.468139][ T5852] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.471768][ T5852] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.476865][ T5852] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.480289][ T5852] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.519643][T14196] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2534'.
[  254.775350][T14212] netlink: 'syz.1.2537': attribute type 30 has an invalid length.
[  254.823931][T14212] veth1: entered promiscuous mode
[  254.828933][T14212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2537'.
[  255.512277][T14238] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2546'.
[  255.672378][T14244] tap0: tun_chr_ioctl cmd 1074025680
[  255.681779][T14244] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.685572][T14244] D: renamed from syzkaller0 (while UP)
[  255.691790][T14244] tipc: Disabling bearer <eth:syzkaller0>
[  255.758506][T14246] 8021q: VLANs not supported on sit0
[  255.815712][T14250] bond32: entered promiscuous mode
[  255.817886][T14250] 8021q: adding VLAN 0 to HW filter on device bond32
[  255.841964][T14253] netlink: 'syz.2.2551': attribute type 10 has an invalid length.
[  255.848171][T14253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2551'.
[  255.973174][T14259] netlink: 'syz.1.2555': attribute type 4 has an invalid length.
[  255.998417][T14259] netlink: 'syz.1.2555': attribute type 11 has an invalid length.
[  256.110528][T14267] syzkaller1: entered promiscuous mode
[  256.115273][T14267] syzkaller1: entered allmulticast mode
[  256.238304][T14275] netlink: 'syz.1.2561': attribute type 1 has an invalid length.
[  256.395146][T14283] netlink: 'syz.1.2564': attribute type 10 has an invalid length.
[  256.415570][T14283] team0: Port device 0! added
[  256.485665][T14291] pim6reg1: entered promiscuous mode
[  256.487533][T14291] pim6reg1: entered allmulticast mode
[  256.619577][T14294] netlink: 'syz.0.2567': attribute type 10 has an invalid length.
[  256.623591][T14294] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  257.692071][T14322] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  257.775801][T14334] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  257.785643][T14334] tipc: Resetting bearer <eth:syzkaller0>
[  257.795123][T14334] gre0: mtu less than device minimum
[  257.842672][T14338] netlink: 'syz.0.2578': attribute type 1 has an invalid length.
[  257.881685][T14338] 8021q: adding VLAN 0 to HW filter on device bond29
[  257.971160][T14348] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  258.044041][T14355] netlink: 'syz.0.2580': attribute type 2 has an invalid length.
[  258.224064][T14368] 8021q: adding VLAN 0 to HW filter on device bond44
[  258.306008][T14379] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  258.376804][T14380] veth0: entered promiscuous mode
[  258.465693][T14384] siw: device registration error -23
[  258.471391][T14380] netlink: 'syz.0.2588': attribute type 16 has an invalid length.
[  258.491871][T14380] netlink: 'syz.0.2588': attribute type 17 has an invalid length.
[  258.554995][T14380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.710481][T14380] veth0: left promiscuous mode
[  258.768332][T14408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.771705][T14408] __nla_validate_parse: 12 callbacks suppressed
[  258.771730][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2596'.
[  258.779197][T14408] syzkaller0: entered promiscuous mode
[  258.788255][T14408] syzkaller0: entered allmulticast mode
[  258.880944][T14407] tipc: Resetting bearer <eth:syzkaller0>
[  258.963782][T14407] tipc: Disabling bearer <eth:syzkaller0>
[  259.124079][T14413] bond30: (slave vxcan1): The slave device specified does not support setting the MAC address
[  259.128288][T14413] bond30: (slave vxcan1): Error -95 calling set_mac_address
[  259.266480][T14417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2598'.
[  259.302034][T14430] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  259.368101][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2603'.
[  259.464562][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'.
[  259.519087][T14454] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  259.540581][T14454] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  259.906674][ T3590] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  259.931512][T14476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.946886][T14476] syzkaller0: entered promiscuous mode
[  259.948849][T14476] syzkaller0: entered allmulticast mode
[  260.019882][T14481] team0: Refused to change device type
[  260.042569][T14482] tipc: Resetting bearer <eth:syzkaller0>
[  260.064623][T14483] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.090410][T14475] tipc: Resetting bearer <eth:syzkaller0>
[  260.111192][T14475] tipc: Disabling bearer <eth:syzkaller0>
[  260.174041][T14485] validate_nla: 2 callbacks suppressed
[  260.174055][T14485] netlink: 'syz.2.2619': attribute type 11 has an invalid length.
[  260.178633][T14485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2619'.
[  260.189634][T14485] netlink: 'syz.2.2619': attribute type 9 has an invalid length.
[  260.194813][T14485] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2619'.
[  260.427994][T14507] netlink: 'syz.2.2626': attribute type 1 has an invalid length.
[  260.431278][T14507] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2626'.
[  260.435803][T14507] netlink: 'syz.2.2626': attribute type 2 has an invalid length.
[  260.438923][T14507] netlink: 'syz.2.2626': attribute type 1 has an invalid length.
[  261.026011][T14520] netlink: 'syz.2.2630': attribute type 1 has an invalid length.
[  261.030323][T14520] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2630'.
[  261.034401][T14520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2630'.
[  261.044972][T14520] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2630'.
[  261.049219][T14520] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  261.052128][T14520] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  261.542336][T14549] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  262.037540][T14586] netlink: 'syz.1.2649': attribute type 4 has an invalid length.
[  262.443815][T14629] netlink: 'syz.2.2656': attribute type 1 has an invalid length.
[  262.515177][T14629] 8021q: adding VLAN 0 to HW filter on device bond45
[  262.518010][T14638] bond2: option mode: unable to set because the bond device has slaves
[  262.843414][T14672] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  262.855410][T14672] batman_adv: batadv0: Adding interface: gretap6
[  262.863437][T14672] batman_adv: batadv0: The MTU of interface gretap6 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  262.883609][T14672] batman_adv: batadv0: Interface activated: gretap6
[  262.937634][T14675] netlink: 'syz.2.2670': attribute type 1 has an invalid length.
[  262.959410][T14675] 8021q: adding VLAN 0 to HW filter on device bond46
[  262.963336][T14673] block nbd1: server does not support multiple connections per device.
[  262.967429][T14673] block nbd1: shutting down sockets
[  262.975659][T14675] openvswitch: netlink: ct_state flags 7fffffff unsupported
[  262.988282][T14675] veth27: entered promiscuous mode
[  262.994406][T14675] bond46: (slave veth27): Enslaving as an active interface with an up link
[  263.140982][T14683] netlink: 'syz.2.2671': attribute type 2 has an invalid length.
[  263.148042][T14683] : entered promiscuous mode
[  263.367925][T14698] geneve7: entered promiscuous mode
[  263.370716][T14698] geneve7: entered allmulticast mode
[  263.388559][ T5852] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.401390][ T5852] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.405525][ T5852] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.430878][ T5852] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.751176][T14718] 8021q: adding VLAN 0 to HW filter on device bond21
[  263.802362][T14722] tipc: Resetting bearer <eth:syzkaller0>
[  263.920239][T14729] __nla_validate_parse: 17 callbacks suppressed
[  263.920255][T14729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2685'.
[  263.947855][T14731] dvmrp0: entered allmulticast mode
[  263.953381][T14731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2686'.
[  263.956797][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2686'.
[  264.158127][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'.
[  264.161251][T14737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2689'.
[  264.166295][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2689'.
[  264.169114][T14737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2689'.
[  264.203929][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2690'.
[  264.476524][T14750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2694'.
[  264.553847][T14757] tipc: Resetting bearer <eth:syzkaller0>
[  264.601357][T14757] batman_adv: batadv0: Interface deactivated: gretap6
[  264.711778][T14760] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  264.905693][T14765] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  265.248156][T14784] xt_limit: Overflow, try lower: 271964/0
[  265.744317][T14817] validate_nla: 1 callbacks suppressed
[  265.744334][T14817] netlink: 'syz.1.2718': attribute type 12 has an invalid length.
[  265.755248][T14817] netlink: 'syz.1.2718': attribute type 1 has an invalid length.
[  265.922085][T14829] netlink: 'syz.1.2721': attribute type 1 has an invalid length.
[  265.952397][T14829] 8021q: adding VLAN 0 to HW filter on device bond34
[  265.955961][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2720'.
[  265.966847][T14829] bond34: (slave geneve9): making interface the new active one
[  265.971448][T14829] bond34: (slave geneve9): Enslaving as an active interface with an up link
[  265.980066][ T6841] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.985868][ T6841] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.013998][ T6841] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.022012][T14829] bond34: entered promiscuous mode
[  266.024122][T14829] geneve9: entered promiscuous mode
[  266.028194][ T5871] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.032362][T14829] netlink: 'syz.1.2721': attribute type 2 has an invalid length.
[  266.036100][T14829] netlink: 'syz.1.2721': attribute type 1 has an invalid length.
[  266.039323][T14829] netlink: 'syz.1.2721': attribute type 1 has an invalid length.
[  266.118864][T14841] netlink: 'syz.2.2724': attribute type 5 has an invalid length.
[  266.383334][T14867] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  266.889530][T14882] netlink: 'syz.2.2732': attribute type 2 has an invalid length.
[  266.896314][T14882] : entered promiscuous mode
[  266.965446][T14889] netlink: 'syz.2.2734': attribute type 1 has an invalid length.
[  267.000705][T14889] bond48: (slave veth29): Enslaving as an active interface with a down link
[  267.016458][T14889] 8021q: adding VLAN 0 to HW filter on device bond48
[  267.058394][T14899] netlink: 'syz.2.2737': attribute type 1 has an invalid length.
[  267.078124][T14899] 8021q: adding VLAN 0 to HW filter on device bond49
[  267.110695][T14899] bond49: (slave veth31): Enslaving as an active interface with a down link
[  267.259116][T14912] netlink: 'syz.0.2741': attribute type 11 has an invalid length.
[  267.338586][T14920] team0: Port device 0! removed
[  267.344278][T14920] : (slave wlan1): Releasing backup interface
[  267.349905][T14920] bond29: (slave bridge17): Releasing active interface
[  267.356461][T14920] bond30: (slave geneve8): Releasing active interface
[  267.361307][T14920] bond34: (slave geneve9): Releasing active interface
[  267.363961][T14920] geneve9: left promiscuous mode
[  267.370205][T11591] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.373325][T11591] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.375906][T11591] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.378614][T11591] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.412880][   T68] wlan0: Trigger new scan to find an IBSS to join
[  267.901098][T14957] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  267.910602][T14957] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  268.389970][T14968] gretap9: entered allmulticast mode
[  268.397418][T14968] bond31: (slave gretap9): making interface the new active one
[  268.401106][T14968] bond31: (slave gretap9): Enslaving as an active interface with an up link
[  268.518001][ T6841] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  268.521258][ T6841] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  268.545050][ T6841] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  268.548248][ T6841] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  268.615042][T14984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.753602][T14992] bond0: up delay (18673) is not a multiple of miimon (100), value rounded to 18600 ms
[  268.757241][T14992] bond0: entered promiscuous mode
[  268.759212][T14992] bond0: entered allmulticast mode
[  268.761218][T14992] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.876730][T14997] veth1_to_hsr (unregistering): left allmulticast mode
[  268.879402][T14997] veth1_to_hsr (unregistering): left promiscuous mode
[  268.945324][T14997] hsr_slave_1 (unregistering): left promiscuous mode
[  269.061350][T15006] 8021q: adding VLAN 0 to HW filter on device bond32
[  269.112037][T15011] __nla_validate_parse: 19 callbacks suppressed
[  269.112049][T15011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2769'.
[  269.159650][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'.
[  269.164649][T15011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'.
[  269.229891][T15017] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  269.234798][T15017] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  269.241280][T15017] tipc: Resetting bearer <eth:syzkaller0>
[  269.366186][T15021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.435904][T15023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2772'.
[  269.685080][T15026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2773'.
[  269.761820][T15030] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2774'.
[  269.767432][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2774'.
[  269.806896][T15030] 8021q: adding VLAN 0 to HW filter on device bond35
[  269.901373][T15030] bond35 (unregistering): Released all slaves
[  270.145277][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2778'.
[  270.177133][T15043] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2778'.
[  270.314387][T15049] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2779'.
[  270.317147][T15049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  270.382471][ T1090] wlan0: Trigger new scan to find an IBSS to join
[  270.585199][T15056] : Master is either lo or non-ether device
[  270.705192][T15074] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  270.709707][T15074] bond10: (slave macvlan1): Enslaving as an active interface with a down link
[  270.738960][T15074] bridge0: port 1(syz_tun) entered blocking state
[  270.741245][T15074] bridge0: port 1(syz_tun) entered disabled state
[  270.743759][T15074] syz_tun: entered allmulticast mode
[  270.748213][T15074] syz_tun: entered promiscuous mode
[  270.763209][T15074] syz1: rxe_newlink: already configured on syz_tun
[  270.779876][T15076] validate_nla: 9 callbacks suppressed
[  270.779887][T15076] netlink: 'syz.0.2785': attribute type 16 has an invalid length.
[  270.784986][T15076] netlink: 'syz.0.2785': attribute type 17 has an invalid length.
[  270.934073][T11591] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.936773][T11591] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  270.942954][T11591] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.945538][T11591] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  270.958590][T15076] IPv6: NLM_F_REPLACE set, but no existing node found!
[  270.965490][T11591] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.968560][T11591] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  270.971701][T11591] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.981300][T11591] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  271.210764][T15092] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  271.213581][T15092] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  271.321081][T15103] openvswitch: netlink: Flow actions attr not present in new flow.
[  271.497534][T15117] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  271.615099][T15127] netlink: 'syz.1.2802': attribute type 21 has an invalid length.
[  271.619663][T15127] netlink: 'syz.1.2802': attribute type 21 has an invalid length.
[  271.627013][T15127] netlink: 'syz.1.2802': attribute type 21 has an invalid length.
[  271.629661][T15127] netlink: 'syz.1.2802': attribute type 21 has an invalid length.
[  271.632107][T15127] netlink: 'syz.1.2802': attribute type 21 has an invalid length.
[  271.712867][T15135] vlan1: entered promiscuous mode
[  271.714607][T15135] macvtap0: entered promiscuous mode
[  272.008992][T15146] syz_tun: Device is already in use.
[  272.101894][T15151] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20002
[  272.162019][T15166] netlink: 'syz.1.2813': attribute type 8 has an invalid length.
[  272.164953][T15159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  272.499842][T15201] netlink: 'syz.2.2818': attribute type 10 has an invalid length.
Connection to localhost closed by remote host.
[  273.187903][ T5846] syz_tun (unregistering): left allmulticast mode
[  273.190392][ T5846] syz_tun (unregistering): left promiscuous mode
[  273.193218][ T5846] bridge0: port 1(syz_tun) entered disabled state
[  273.217287][   T52] smc: removing ib device syz1
[  273.277727][T15190] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  273.282307][T15190] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  273.285165][T15190] CPU: 1 UID: 0 PID: 15190 Comm: syz.1.2817 Not tainted syzkaller #0 PREEMPT(full) 
[  273.289435][T15190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  273.293433][T15190] RIP: 0010:klist_remove+0x14a/0x340
[  273.295514][T15190] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 04 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 04 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  273.302895][T15190] RSP: 0018:ffffc9000298f5e0 EFLAGS: 00010202
[  273.305238][T15190] RAX: 000000000000000b RBX: ffff8880223ad640 RCX: 0000000000000000
[  273.308371][T15190] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  273.311500][T15190] RBP: ffffc9000298f6e0 R08: ffffffff8f8a0b23 R09: 1ffffffff1f14164
[  273.314642][T15190] R10: dffffc0000000000 R11: fffffbfff1f14165 R12: 0000000000000000
[  273.317718][T15190] R13: 1ffff11021c93c0c R14: ffff88810e49e060 R15: dffffc0000000000
[  273.320810][T15190] FS:  0000555572368500(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  273.324186][T15190] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  273.326795][T15190] CR2: 00007fa264542440 CR3: 000000000df36000 CR4: 00000000000006f0
[  273.329835][T15190] Call Trace:
[  273.331132][T15190]  <TASK>
[  273.332306][T15190]  ? __pfx_klist_remove+0x10/0x10
[  273.334269][T15190]  ? __pfx_kobject_move+0x10/0x10
[  273.336237][T15190]  ? do_raw_spin_unlock+0x4d/0x240
[  273.338254][T15190]  ? get_device_parent+0x366/0x3a0
[  273.340252][T15190]  device_move+0x193/0x700
[  273.342035][T15190]  hci_conn_del_sysfs+0xb8/0x170
[  273.344021][T15190]  hci_conn_del+0xc33/0x11b0
[  273.345865][T15190]  hci_conn_hash_flush+0x191/0x230
[  273.347902][T15190]  hci_dev_close_sync+0xaef/0x1330
[  273.349939][T15190]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  273.352085][T15190]  ? up_write+0x1c4/0x420
[  273.353845][T15190]  hci_unregister_dev+0x21a/0x510
[  273.355841][T15190]  vhci_release+0x152/0x1a0
[  273.357665][T15190]  ? __pfx_vhci_release+0x10/0x10
[  273.359617][T15190]  __fput+0x44c/0xa70
[  273.361162][T15190]  task_work_run+0x1d4/0x260
[  273.362973][T15190]  ? __pfx_task_work_run+0x10/0x10
[  273.364964][T15190]  ? kmem_cache_free+0x18f/0x400
[  273.366720][T15190]  do_exit+0x6b5/0x2300
[  273.368010][T15190]  ? do_raw_spin_lock+0x121/0x290
[  273.369532][T15190]  ? __pfx_do_exit+0x10/0x10
[  273.370950][T15190]  do_group_exit+0x21c/0x2d0
[  273.372379][T15190]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.374128][T15190]  get_signal+0x1286/0x1340
[  273.375839][T15190]  arch_do_signal_or_restart+0x9a/0x750
[  273.377919][T15190]  ? blkcg_maybe_throttle_current+0x1ab/0xb40
[  273.380211][T15190]  ? _raw_spin_unlock_irq+0x23/0x50
[  273.382190][T15190]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  273.384697][T15190]  ? exit_to_user_mode_loop+0x40/0x110
[  273.386919][T15190]  exit_to_user_mode_loop+0x75/0x110
[  273.388928][T15190]  do_syscall_64+0x2bd/0x3b0
[  273.390715][T15190]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.392757][T15190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.395081][T15190]  ? exc_page_fault+0x9f/0xf0
[  273.396913][T15190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.399157][T15190] RIP: 0033:0x7f08e3b8ec29
[  273.400883][T15190] Code: Unable to access opcode bytes at 0x7f08e3b8ebff.
[  273.403719][T15190] RSP: 002b:00007ffff4edaac8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  273.406893][T15190] RAX: 0000000000000000 RBX: 00000000000427a4 RCX: 00007f08e3b8ec29
[  273.410103][T15190] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  273.413193][T15190] RBP: 00007f08e3dd7da0 R08: 0000000000000001 R09: 00000015f4edadbf
[  273.416332][T15190] R10: 0000001b31020000 R11: 0000000000000246 R12: 00007f08e3dd5fac
[  273.419386][T15190] R13: 00007f08e3dd5fa0 R14: ffffffffffffffff R15: 00007ffff4edabe0
[  273.422621][T15190]  </TASK>
[  273.423160][   T26] wlan0: Trigger new scan to find an IBSS to join
[  273.423817][T15190] Modules linked in:
[  273.428821][T15190] ---[ end trace 0000000000000000 ]---
[  273.432129][T15190] RIP: 0010:klist_remove+0x14a/0x340
[  273.434860][T15190] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 04 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 04 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  273.440680][T15190] RSP: 0018:ffffc9000298f5e0 EFLAGS: 00010202
[  273.442706][T15190] RAX: 000000000000000b RBX: ffff8880223ad640 RCX: 0000000000000000
[  273.445122][T15190] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  273.447523][T15190] RBP: ffffc9000298f6e0 R08: ffffffff8f8a0b23 R09: 1ffffffff1f14164
[  273.449927][T15190] R10: dffffc0000000000 R11: fffffbfff1f14165 R12: 0000000000000000
[  273.452284][T15190] R13: 1ffff11021c93c0c R14: ffff88810e49e060 R15: dffffc0000000000
[  273.454816][T15190] FS:  0000555572368500(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  273.457564][T15190] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  273.459616][T15190] CR2: 00007fa264542440 CR3: 000000000df36000 CR4: 00000000000006f0
[  273.462074][T15190] Kernel panic - not syncing: Fatal exception
[  273.464570][T15190] Kernel Offset: disabled
[  273.465893][T15190] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:03:44  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8fc38948 RCX=ffffffff8fc3894c RDX=ffffffff9045987c
RSI=ffffffff9045987c RDI=ffffffff8be33ea0 RBP=dffffc0000000000 RSP=ffffc900007af238
R8 =0000000000000010 R9 =0000000000000000 R10=ffffc900007af358 R11=ffffffff81ac3b00
R12=ffffffff90459880 R13=ffffffff90459881 R14=ffffc900007af308 R15=ffffffff8fc38948
RIP=ffffffff8172c464 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000298ed70
R8 =ffff888107498237 R9 =1ffff11020e93046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b0291a R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555572368500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa264542440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 000000000000ff00 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 000000000000ff00 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
