last executing test programs:

3.265410122s ago: executing program 2 (id=1242):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

2.393248836s ago: executing program 2 (id=1259):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.300798999s ago: executing program 2 (id=1260):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0x2, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)

1.648228154s ago: executing program 0 (id=1266):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50)

1.360717459s ago: executing program 2 (id=1267):
unshare(0x8040480)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x1)
ioctl$PPPIOCGNPMODE(r0, 0x4008744b, 0x0)

1.000215042s ago: executing program 0 (id=1268):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)="e4875df92570dc447dca45efba35f6d4a64639447a1bbc0e841f308699281a0e47076a577cd78db2905f24878a87b11581d53a2ce69a599201cca30e751800f1d41022bb97bd0f897768e21e57a0eaeaae1f3057d83fbb41e53699d01a409e2742eb2252b07fa222565886029c0086b4e67e8d6b0f9aa6dd477e272d875b56c36b1781ac106e18e4119f31fbb6060fa4bc148df7fc28d9165c0a0d718069c7afadddd55378fd0aa84fbed6ca8428e809", 0xb0}, {&(0x7f0000000180)="be25b1ac9599c48deb3a908c857b908d04c0394c7e2415e66f7789603598cd36408b6f13a899df86d1fcca6b60d205e587e26729aa098370d57f83c71957d6c940c2185376f86d4d5b432c8731508d280f64259bfda08388b7436037c46801cc2c15a2e28a767d51217c791a1101b9083c32235326753c689628dd3746896c8e3235599b8b7f0b28026f10aecb3fb02f1d7295979e45750438dfe896dd7fc1d0387e24df98fd3bf6f7c64ff8079bbffe53046fe5", 0xb4}, {&(0x7f0000000280)="22ff988f965ee1fdf33ad34c5f217a4e6ee45a610253ce07d50f0c697a5fcfc2c8acada074a3a01ce5dc3045c16ad3117a8e8243885a32de9366f6bec88791ba062cbf5e67791f24462011accee9edbbfcffa86b34262ac18da9d98ecd8dcbdd48ec99f3fedff4a9a1568664efa65d6f5af20413bcd1853d7fef91b28fd63a8cb1f36946952cbb1435909397f5295652a226e61809df457d87b7bd5efebb7c62f9f93b682420571fb0e06ba66be2f7dc0d5e89368f5c64d403bccfc97d0da5362f", 0xc1}, {&(0x7f0000000380)="6a524b33093aa67fbb797ae318dacaa66a06e479328ee7a9fd952256011185548896e5235e923b86652e0804fd31f8ad987b65ddbbf6a95b695d62422ab1adbd239f4ed503786fc07e6a963548bc27b29ddd664c546f1260feef819fd5f96c0b7684290834bcaa66fb7c2c72d13dc4ae9249b3c2d87d9a3fce38d3b6", 0x7c}], 0x4}}], 0x1, 0x840)

830.782552ms ago: executing program 0 (id=1269):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r0], 0x2c}}, 0x80)

628.394233ms ago: executing program 0 (id=1270):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="07000300010001", 0x7)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040))
recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/138, 0x8a, 0x102, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb"], 0x48}}, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xb)
syz_emit_ethernet(0x6e, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7fff, {0x9, 0x6, "c7bdf9", 0x1, 0x3a, 0x1, @rand_addr=' \x01\x00', @local, [], "be0a559bc2104b93"}}}}}}}, 0x0)
writev(r2, &(0x7f0000000580)=[{&(0x7f0000000480)="f65bbf1dcc2c8e4a2775d2250722c47115b1cfb0", 0x14}], 0x1)

507.219156ms ago: executing program 0 (id=1271):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x80}, [@IFLA_ADDRESS={0xa}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x2008004)

452.519331ms ago: executing program 1 (id=1272):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x49)
write(r0, &(0x7f0000000340)="08000000010000", 0x7)

451.847834ms ago: executing program 0 (id=1273):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x11, 0x6, @remote}, 0x10)

392.088612ms ago: executing program 1 (id=1274):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1b}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3e}]}}]}, 0x44}}, 0x4814)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

307.240252ms ago: executing program 2 (id=1275):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18)
sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x15, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0)

294.476245ms ago: executing program 1 (id=1276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xccbf}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x4000)

212.626788ms ago: executing program 1 (id=1277):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0xffffffff, 0x4)

150.072192ms ago: executing program 2 (id=1278):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r2)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES32=r1])
socket$netlink(0x10, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0xf8, r4, 0x1, 0xd7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x18, 0x1411, 0x701, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}}, 0x84)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000140)={r7, 0x0, 0x80000001, 0x4, 0x1, 0x8, [0xa2, 0x2a46, 0x0, 0xa8c8, 0x2, 0x10000]})
syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x8, 0x6}}}}}}, 0x0)

149.807994ms ago: executing program 1 (id=1279):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001980)=""/4096, 0x101d0}], 0x1, &(0x7f0000002a80)=[@rights={{0x10}}], 0x10}}], 0x1, 0x400122a0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

0s ago: executing program 1 (id=1280):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32650' (ED25519) to the list of known hosts.
syzkaller login: [   57.487292][ T5531] cgroup: Unknown subsys name 'net'
[   57.631819][ T5531] cgroup: Unknown subsys name 'cpuset'
[   57.636530][ T5531] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.358374][ T5531] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.530194][ T4988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.535184][ T4988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.538280][ T4988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.542283][ T4988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.544753][ T4988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.570101][   T58] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.573140][   T58] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.575655][   T58] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.580070][   T58] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.582639][   T58] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.599754][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.609438][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.611954][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.614768][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.617377][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.249272][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.252429][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.255165][ T5605] bridge_slave_0: entered allmulticast mode
[   64.258881][ T5605] bridge_slave_0: entered promiscuous mode
[   64.282468][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.285131][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.287844][ T5605] bridge_slave_1: entered allmulticast mode
[   64.291456][ T5605] bridge_slave_1: entered promiscuous mode
[   64.307085][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.310059][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.312992][ T5613] bridge_slave_0: entered allmulticast mode
[   64.316651][ T5613] bridge_slave_0: entered promiscuous mode
[   64.344134][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.346840][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.350360][ T5613] bridge_slave_1: entered allmulticast mode
[   64.354028][ T5613] bridge_slave_1: entered promiscuous mode
[   64.364403][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.366480][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.368675][ T5611] bridge_slave_0: entered allmulticast mode
[   64.371581][ T5611] bridge_slave_0: entered promiscuous mode
[   64.388598][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.392204][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.394530][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.396858][ T5611] bridge_slave_1: entered allmulticast mode
[   64.400277][ T5611] bridge_slave_1: entered promiscuous mode
[   64.418380][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.431745][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.448010][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.452724][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.467830][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.478822][ T5605] team0: Port device team_slave_0 added
[   64.495962][ T5605] team0: Port device team_slave_1 added
[   64.516796][ T5613] team0: Port device team_slave_0 added
[   64.520244][ T5611] team0: Port device team_slave_0 added
[   64.523741][ T5613] team0: Port device team_slave_1 added
[   64.536505][ T5611] team0: Port device team_slave_1 added
[   64.549286][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.551771][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.560707][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.577498][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.579835][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.587175][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.595450][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.597541][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.605321][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.616415][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.618461][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.626270][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.630859][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.632969][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.640927][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.644654][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.646687][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.654656][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.697769][ T5605] hsr_slave_0: entered promiscuous mode
[   64.701264][ T5605] hsr_slave_1: entered promiscuous mode
[   64.746051][ T5611] hsr_slave_0: entered promiscuous mode
[   64.748395][ T5611] hsr_slave_1: entered promiscuous mode
[   64.750899][ T5611] debugfs: 'hsr0' already exists in 'hsr'
[   64.752662][ T5611] Cannot create hsr debugfs directory
[   64.764349][ T5613] hsr_slave_0: entered promiscuous mode
[   64.767305][ T5613] hsr_slave_1: entered promiscuous mode
[   64.770093][ T5613] debugfs: 'hsr0' already exists in 'hsr'
[   64.771795][ T5613] Cannot create hsr debugfs directory
[   65.003646][ T5605] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.010126][ T5605] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.021765][ T5605] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.027132][ T5605] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.070826][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.077114][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.082997][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.088322][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.138625][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.151445][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.157969][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.162525][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.235913][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.253080][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.266769][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.272201][ T5605] 8021q: adding VLAN 0 to HW filter on device team0
[   65.285685][ T1984] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.288600][ T1984] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.295711][ T5613] 8021q: adding VLAN 0 to HW filter on device team0
[   65.303238][ T3363] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.305327][ T3363] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.316227][ T1984] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.319086][ T1984] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.331176][ T5611] 8021q: adding VLAN 0 to HW filter on device team0
[   65.338397][ T3363] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.340627][ T3363] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.351221][ T3363] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.353330][ T3363] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.364212][ T3363] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.366402][ T3363] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.620843][   T58] Bluetooth: hci0: command tx timeout
[   65.622716][ T5614] Bluetooth: hci1: command tx timeout
[   65.663489][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.699328][   T58] Bluetooth: hci2: command tx timeout
[   65.714945][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.725325][ T5605] veth0_vlan: entered promiscuous mode
[   65.737673][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.744364][ T5605] veth1_vlan: entered promiscuous mode
[   65.783363][ T5605] veth0_macvtap: entered promiscuous mode
[   65.801290][ T5613] veth0_vlan: entered promiscuous mode
[   65.805271][ T5605] veth1_macvtap: entered promiscuous mode
[   65.812060][ T5611] veth0_vlan: entered promiscuous mode
[   65.822430][ T5613] veth1_vlan: entered promiscuous mode
[   65.826925][ T5611] veth1_vlan: entered promiscuous mode
[   65.838573][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.853843][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.868580][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.876825][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.880670][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.886939][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.902446][ T5611] veth0_macvtap: entered promiscuous mode
[   65.907209][ T5613] veth0_macvtap: entered promiscuous mode
[   65.925196][ T5611] veth1_macvtap: entered promiscuous mode
[   65.941063][ T5613] veth1_macvtap: entered promiscuous mode
[   65.985360][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.996633][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.000880][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.005018][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.012987][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.026653][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.038210][ T1984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.042249][ T1984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.047158][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.052215][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.060011][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.069173][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.071823][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.078868][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.082729][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.090193][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.104381][ T5605] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.168530][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.174029][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.214978][ T3363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.217842][ T3363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.227838][ T5718] syzkaller0: entered promiscuous mode
[   66.231054][ T5718] syzkaller0: entered allmulticast mode
[   66.249113][ T1984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.251465][ T1984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.270427][ T1984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.272753][ T1984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.457836][ T5730] syz.2.5 uses obsolete (PF_INET,SOCK_PACKET)
[   67.623908][ T5808] netlink: 'syz.1.12': attribute type 1 has an invalid length.
[   67.703618][ T5614] Bluetooth: hci1: command tx timeout
[   67.705363][   T58] Bluetooth: hci0: command tx timeout
[   67.780649][   T58] Bluetooth: hci2: command tx timeout
[   67.849894][ T5820] netlink: 220 bytes leftover after parsing attributes in process `syz.1.16'.
[   68.043307][ T5832] netlink: 'syz.1.19': attribute type 1 has an invalid length.
[   68.763806][ T5883] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26'.
[   68.774548][ T5883] netlink: 44 bytes leftover after parsing attributes in process `syz.1.26'.
[   68.778502][ T5883] netlink: 43 bytes leftover after parsing attributes in process `syz.1.26'.
[   68.781489][ T5883] netlink: 'syz.1.26': attribute type 6 has an invalid length.
[   68.790062][ T5883] netlink: 'syz.1.26': attribute type 5 has an invalid length.
[   68.792692][ T5883] netlink: 43 bytes leftover after parsing attributes in process `syz.1.26'.
[   68.835229][ T5891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29'.
[   68.976305][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'.
[   68.982221][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'.
[   69.138881][ T5909] warning: `syz.1.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.232920][    T9] IPVS: starting estimator thread 0...
[   69.329100][ T5917] IPVS: using max 62 ests per chain, 148800 per kthread
[   69.346371][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'.
[   69.590613][ T5950] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   69.619706][ T5951] x_tables: duplicate underflow at hook 2
[   69.644462][ T5953] Bluetooth: MGMT ver 1.23
[   69.706804][ T5957] netlink: 260 bytes leftover after parsing attributes in process `syz.2.59'.
[   69.781149][ T5614] Bluetooth: hci1: command tx timeout
[   69.782893][   T58] Bluetooth: hci0: command tx timeout
[   69.787588][ T5965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.828588][ T5969] netlink: 'syz.0.65': attribute type 21 has an invalid length.
[   69.859052][   T58] Bluetooth: hci2: command tx timeout
[   69.982670][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.985374][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.059065][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.066289][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.145799][ T5971] sit0: entered promiscuous mode
[   70.152053][ T5971] netlink: 'syz.2.66': attribute type 1 has an invalid length.
[   70.154639][ T5662] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.160047][ T5662] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.162717][ T5662] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.165527][ T5662] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.266442][ T5983] bond0: (slave bond_slave_1): Releasing backup interface
[   70.283034][ T5983] Zero length message leads to an empty skb
[   70.439372][ T5983] nbd2: detected capacity change from 0 to 63
[   70.443105][ T5993] block nbd2: NBD_DISCONNECT
[   70.445416][ T5993] block nbd2: Disconnected due to user request.
[   70.448046][ T5993] block nbd2: shutting down sockets
[   70.448569][ T5981] Cannot find del_set index 0 as target
[   70.458500][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   70.461468][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[   70.463837][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   70.466606][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[   70.468905][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   70.471907][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[   70.474363][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   70.477583][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[   70.480816][ T5608] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   70.484073][ T5608] Buffer I/O error on dev nbd2, logical block 0, async page read
[   70.486603][ T5608] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   70.492567][ T5608] Buffer I/O error on dev nbd2, logical block 1, async page read
[   70.495046][ T5608] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   70.497882][ T5608] Buffer I/O error on dev nbd2, logical block 2, async page read
[   70.501254][ T5608] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   70.504944][ T5608] Buffer I/O error on dev nbd2, logical block 3, async page read
[   70.507174][ T5608] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   70.510059][ T5608] Buffer I/O error on dev nbd2, logical block 0, async page read
[   70.513407][ T5608] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   70.516235][ T5608] Buffer I/O error on dev nbd2, logical block 1, async page read
[   70.542999][ T5608] ldm_validate_partition_table(): Disk read failed.
[   70.545341][ T5608] Dev nbd2: unable to read RDB block 0
[   70.547256][ T5608]  nbd2: unable to read partition table
[   70.551713][ T5608] ldm_validate_partition_table(): Disk read failed.
[   70.554317][ T5608] Dev nbd2: unable to read RDB block 0
[   70.556876][ T5995] Cannot find set identified by id 0 to match
[   70.562270][ T5608]  nbd2: unable to read partition table
[   70.587288][ T5997] netlink: 'syz.2.75': attribute type 1 has an invalid length.
[   70.663669][ T6001] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   71.047105][ T6028] syzkaller0: entered promiscuous mode
[   71.048858][ T6028] syzkaller0: entered allmulticast mode
[   71.092971][ T6030] nbd: couldn't find device at index 1694498816
[   71.293516][ T6042] netlink: 'syz.1.97': attribute type 4 has an invalid length.
[   71.792791][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.799867][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.802588][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.805145][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.860161][ T5614] Bluetooth: hci1: command tx timeout
[   71.861879][   T58] Bluetooth: hci0: command tx timeout
[   71.939970][   T58] Bluetooth: hci2: command tx timeout
[   72.285894][ T6108] syzkaller1: entered promiscuous mode
[   72.287818][ T6108] syzkaller1: entered allmulticast mode
[   72.406796][ T6110] xt_recent: Unsupported userspace flags (000000b1)
[   72.632214][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.636010][ T6117] 8021q: adding VLAN 0 to HW filter on device team0
[   72.642320][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.682244][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.686140][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.694783][ T6117] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   72.701520][ T1984] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.703759][ T1984] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.707411][ T1984] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.709655][ T1984] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.741349][ T6120] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   73.191539][ T6132] syzkaller0: entered promiscuous mode
[   73.193666][ T6132] syzkaller0: entered allmulticast mode
[   73.363048][ T6145] ipip0: entered promiscuous mode
[   73.364601][ T6145] ipip0: entered allmulticast mode
[   73.483290][ T6151] __nla_validate_parse: 15 callbacks suppressed
[   73.485161][ T6151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.146'.
[   73.614052][ T6165] netlink: 'syz.1.153': attribute type 3 has an invalid length.
[   73.616579][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.153'.
[   73.748697][ T6177] raw_sendmsg: syz.1.159 forgot to set AF_INET. Fix it!
[   74.707685][ T6223] geneve2: entered promiscuous mode
[   74.785828][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[   75.040054][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.189'.
[   75.063090][ T6244] Driver unsupported XDP return value 0 on prog  (id 19) dev N/A, expect packet loss!
[   75.069175][ T6242] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.083166][ T6242] gretap1: entered allmulticast mode
[   75.099315][ T6242] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   75.157958][ T6242] bond1 (unregistering): (slave gretap1): Releasing backup interface
[   75.166081][ T6242] bond1 (unregistering): Released all slaves
[   75.253468][ T6249] netlink: 19 bytes leftover after parsing attributes in process `syz.1.191'.
[   75.265567][ T6249] netlink: 19 bytes leftover after parsing attributes in process `syz.1.191'.
[   75.451647][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'.
[   75.753257][ T6270] ipvlan2: entered promiscuous mode
[   75.805505][ T6297] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.213'.
[   75.943944][ T6306] netlink: 7 bytes leftover after parsing attributes in process `syz.0.218'.
[   76.078005][ T6315] netlink: 'syz.2.222': attribute type 1 has an invalid length.
[   76.116359][ T6315] bond1: entered promiscuous mode
[   76.119603][ T6315] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.135746][ T6315] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   76.140127][ T6315] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   76.143841][ T6315] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   76.192572][ T6319] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   76.209133][ T6319] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   76.660996][ T6350] netlink: 124 bytes leftover after parsing attributes in process `syz.2.238'.
[   76.819857][ T6368] netlink: 'syz.1.245': attribute type 12 has an invalid length.
[   77.072164][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   77.076586][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   78.186581][ T6450] netlink: 'syz.2.283': attribute type 15 has an invalid length.
[   78.733734][ T6477] (: renamed from bridge_slave_0 (while UP)
[   78.942202][ T6497] x_tables: duplicate entry at hook 1
[   79.115188][ T6514] netlink: 'syz.1.311': attribute type 10 has an invalid length.
[   79.124954][ T6514] team0: Port device dummy0 added
[   79.560759][ T6524] netlink: 'syz.2.316': attribute type 11 has an invalid length.
[   79.563083][ T6524] __nla_validate_parse: 5 callbacks suppressed
[   79.563090][ T6524] netlink: 140 bytes leftover after parsing attributes in process `syz.2.316'.
[   79.610138][ T6521] netlink: 'syz.1.315': attribute type 4 has an invalid length.
[   79.655274][ T6530] xt_connbytes: Forcing CT accounting to be enabled
[   79.684248][ T6530] xt_CT: No such helper "netbios-ns"
[   79.686339][ T6532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.318'.
[   79.704579][ T6532] ip6gre1: entered promiscuous mode
[   79.710581][ T6532] ip6gre1: entered allmulticast mode
[   79.887980][ T6542] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   79.928426][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.325'.
[   79.952883][ T6548] xt_TCPMSS: Only works on TCP SYN packets
[   79.987833][ T6550] macvlan0: entered promiscuous mode
[   80.590241][ T6589] netlink: 44 bytes leftover after parsing attributes in process `syz.2.346'.
[   80.698565][ T6593] syzkaller0: entered promiscuous mode
[   80.700375][ T6593] syzkaller0: entered allmulticast mode
[   81.165746][ T6600] netlink: 204 bytes leftover after parsing attributes in process `syz.0.351'.
[   81.170386][ T6600] netlink: 84 bytes leftover after parsing attributes in process `syz.0.351'.
[   81.349242][ T6620] syzkaller0: entered promiscuous mode
[   81.351991][ T6620] syzkaller0: entered allmulticast mode
[   81.357338][ T6620] 0: reclassify loop, rule prio 0, protocol 800
[   81.552686][ T6639] xt_hashlimit: size too large, truncated to 1048576
[   81.571432][ T6641] hsr0: entered promiscuous mode
[   81.653154][ T6647] tipc: Started in network mode
[   81.654792][ T6647] tipc: Node identity ac14140f, cluster identity 4711
[   81.657040][ T6647] tipc: New replicast peer: 255.255.255.255
[   81.659366][ T6647] tipc: Enabled bearer <udp:syz2>, priority 10
[   81.680225][ T6650] bridge_slave_1: default FDB implementation only supports local addresses
[   81.862485][ T6673] tipc: Started in network mode
[   81.864017][ T6673] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   81.866576][ T6673] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   82.003984][ T6686] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.391'.
[   82.006886][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.391'.
[   82.010542][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.391'.
[   82.013250][ T6686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'.
[   82.101304][ T6696] sctp: [Deprecated]: syz.0.395 (pid 6696) Use of struct sctp_assoc_value in delayed_ack socket option.
[   82.101304][ T6696] Use struct sctp_sack_info instead
[   82.650340][ T6119] tipc: Node number set to 2886997007
[   82.734701][ T6756] x_tables: unsorted entry at hook 3
[   82.865805][ T6764] netlink: 'syz.1.425': attribute type 1 has an invalid length.
[   82.868211][ T6764] netlink: 'syz.1.425': attribute type 2 has an invalid length.
[   83.174485][ T6780] netlink: 'syz.1.433': attribute type 17 has an invalid length.
[   83.177606][ T6780] bond0: option all_slaves_active: invalid value (4)
[   83.824844][ T6830] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   83.827926][ T6830] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   83.831442][ T6830] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   85.301943][ T6928] __nla_validate_parse: 9 callbacks suppressed
[   85.301955][ T6928] netlink: 550 bytes leftover after parsing attributes in process `syz.1.500'.
[   85.353895][ T6935] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   85.358292][ T6935] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   85.833412][ T6954] lo speed is unknown, defaulting to 1000
[   85.835729][ T6954] lo speed is unknown, defaulting to 1000
[   85.842341][ T6954] lo speed is unknown, defaulting to 1000
[   85.850860][ T6954] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.862908][ T6954] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   85.877115][ T6955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.511'.
[   85.898677][ T6954] lo speed is unknown, defaulting to 1000
[   85.904824][ T6954] lo speed is unknown, defaulting to 1000
[   85.909669][ T6954] lo speed is unknown, defaulting to 1000
[   86.028381][ T6957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'.
[   86.301729][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'.
[   86.556485][ T6982] netlink: 404 bytes leftover after parsing attributes in process `syz.1.524'.
[   86.574909][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.524'.
[   86.578187][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.524'.
[   86.589129][ T6982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.524'.
[   86.611680][ T6984] team_slave_0: entered promiscuous mode
[   86.614039][ T6984] team_slave_1: entered promiscuous mode
[   86.620139][ T6984] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   86.927967][ T7001] blkio.reset_stats is deprecated
[   87.276444][ T7014] erspan0: entered promiscuous mode
[   87.278880][ T7014] erspan0: entered allmulticast mode
[   88.051629][ T7049] netlink: 'syz.2.553': attribute type 11 has an invalid length.
[   89.248607][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'.
[   89.521230][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.580'.
[   90.193817][ T7158] netlink: 'syz.0.604': attribute type 10 has an invalid length.
[   90.198774][ T7158] bond0: entered promiscuous mode
[   90.206155][ T7158] bond_slave_0: entered promiscuous mode
[   90.208509][ T7158] bond_slave_1: entered promiscuous mode
[   90.211531][ T7158] bridge0: port 3(bond0) entered blocking state
[   90.229900][ T7158] bridge0: port 3(bond0) entered disabled state
[   90.232481][ T7158] bond0: entered allmulticast mode
[   90.234467][ T7158] bond_slave_0: entered allmulticast mode
[   90.236700][ T7158] bond_slave_1: entered allmulticast mode
[   90.246879][ T7158] bridge0: port 3(bond0) entered blocking state
[   90.249447][ T7158] bridge0: port 3(bond0) entered forwarding state
[   90.688307][ T7202] __nla_validate_parse: 3 callbacks suppressed
[   90.688324][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'.
[   90.703771][ T7207] x_tables: duplicate entry at hook 1
[   90.888865][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[   90.928953][    C0] hrtimer: interrupt took 267866 ns
[   90.984048][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.635'.
[   92.180426][ T7263] netlink: 'syz.0.653': attribute type 1 has an invalid length.
[   92.195031][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'.
[   92.253274][ T7270] xt_TCPMSS: Only works on TCP SYN packets
[   92.423556][   T24] cfg80211: failed to load regulatory.db
[   92.450643][ T7282] netlink: 'syz.2.662': attribute type 1 has an invalid length.
[   92.665602][ T7293] netlink: 'syz.2.667': attribute type 21 has an invalid length.
[   92.668237][ T7293] netlink: 128 bytes leftover after parsing attributes in process `syz.2.667'.
[   92.673835][ T7293] netlink: 'syz.2.667': attribute type 5 has an invalid length.
[   92.677504][ T7293] netlink: 'syz.2.667': attribute type 6 has an invalid length.
[   92.680523][ T7293] netlink: 3 bytes leftover after parsing attributes in process `syz.2.667'.
[   92.974555][ T7315] lo speed is unknown, defaulting to 1000
[   92.990818][ T7313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'.
[   93.025842][ T7316] x_tables: duplicate underflow at hook 2
[   94.187261][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[   94.496264][ T7361] syzkaller0: entered promiscuous mode
[   94.498550][ T7361] syzkaller0: entered allmulticast mode
[   94.605632][ T7364] xt_recent: Unsupported userspace flags (000000b1)
[   95.067100][ T7385] netlink: 'syz.2.707': attribute type 1 has an invalid length.
[   95.410245][ T7398] syzkaller0: entered promiscuous mode
[   95.411931][ T7398] syzkaller0: entered allmulticast mode
[   95.541525][ T7406] nbd: couldn't find device at index 1694498816
[   96.373490][ T7418] ip6gretap0: entered promiscuous mode
[   96.793604][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'.
[   96.796343][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'.
[   97.078405][  T933] IPVS: starting estimator thread 0...
[   97.164394][ T7466] netlink: 'syz.1.747': attribute type 21 has an invalid length.
[   97.167081][ T7466] netlink: 128 bytes leftover after parsing attributes in process `syz.1.747'.
[   97.169843][ T7464] IPVS: using max 62 ests per chain, 148800 per kthread
[   97.172340][ T7466] netlink: 'syz.1.747': attribute type 5 has an invalid length.
[   97.174661][ T7466] netlink: 'syz.1.747': attribute type 6 has an invalid length.
[   97.176988][ T7466] netlink: 3 bytes leftover after parsing attributes in process `syz.1.747'.
[   97.238015][ T7470] xt_addrtype: ipv6 does not support BROADCAST matching
[   98.302693][ T7496] geneve3: entered promiscuous mode
[   98.307560][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.319617][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.323417][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.326660][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.430601][ T7501] netlink: 'syz.0.762': attribute type 1 has an invalid length.
[   98.733951][ T7519] tipc: Started in network mode
[   98.740386][ T7519] tipc: Node identity ac14140f, cluster identity 4711
[   98.742734][ T7519] tipc: New replicast peer: 255.255.255.255
[   98.744871][ T7519] tipc: Enabled bearer <udp:syz2>, priority 10
[   99.069307][ T7535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'.
[   99.073217][ T7535] netlink: 56 bytes leftover after parsing attributes in process `syz.0.778'.
[   99.076857][ T7535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'.
[   99.182011][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.779'.
[   99.213215][ T7541] ip6gre1: entered promiscuous mode
[   99.215587][ T7541] ip6gre1: entered allmulticast mode
[   99.507437][ T7553] ipip0: entered promiscuous mode
[   99.509794][ T7553] ipip0: entered allmulticast mode
[   99.859584][  T933] tipc: Node number set to 2886997007
[   99.928011][ T7570] netlink: 550 bytes leftover after parsing attributes in process `syz.2.796'.
[  100.114661][ T7579] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  100.268209][ T7591] netlink: 92 bytes leftover after parsing attributes in process `syz.2.806'.
[  100.751044][ T7624] netlink: 'syz.2.821': attribute type 4 has an invalid length.
[  101.108546][ T7638] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.153027][ T7638] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.283500][ T7644] ip6gretap0: entered promiscuous mode
[  101.840950][ T7659] xt_addrtype: ipv6 does not support BROADCAST matching
[  101.891679][ T7661] __nla_validate_parse: 3 callbacks suppressed
[  101.891696][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.838'.
[  101.897698][ T7661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'.
[  101.942131][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'.
[  102.271636][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.846'.
[  102.373461][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'.
[  102.872792][ T7728] netlink: 'syz.1.869': attribute type 3 has an invalid length.
[  102.883831][ T7728] netlink: 'syz.1.869': attribute type 3 has an invalid length.
[  103.097271][ T7747] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  103.128112][ T7748] gtp0: entered promiscuous mode
[  103.129953][ T7748] gtp0: entered allmulticast mode
[  103.132784][ T7748] team0: Device gtp0 is of different type
[  103.378622][ T7764] netlink: 92 bytes leftover after parsing attributes in process `syz.0.884'.
[  103.815321][ T7781] bridge0: port 3(bond0) entered disabled state
[  103.817537][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.819992][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.873082][ T7781] team_slave_0: left promiscuous mode
[  103.875147][ T7781] team_slave_1: left promiscuous mode
[  104.148544][ T7781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.158293][ T7781] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.325169][ T7790] macvtap1: entered promiscuous mode
[  104.326895][ T7790] vlan0: entered promiscuous mode
[  104.330363][ T7790] vlan0: left promiscuous mode
[  104.369121][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.371985][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.374585][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.400271][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.447821][ T7872] pim6reg0: tun_chr_ioctl cmd 35111
[  105.508762][ T7875] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  105.737627][ T7895] tipc: Enabled bearer <eth:vlan0>, priority 30
[  106.105009][ T7912] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  106.228616][ T7918] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  106.849062][ T5914] tipc: Node number set to 4269801488
[  107.116461][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'.
[  107.177798][ T7969] netlink: 7 bytes leftover after parsing attributes in process `syz.2.968'.
[  107.480168][ T7992] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.979'.
[  107.492345][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'.
[  107.764347][ T8011] syzkaller0: entered promiscuous mode
[  107.766139][ T8011] syzkaller0: entered allmulticast mode
[  107.867649][ T8019] bridge_slave_1: default FDB implementation only supports local addresses
[  108.334371][ T8026] ipvlan2: entered promiscuous mode
[  108.440976][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[  108.443988][ T8042] netlink: 144 bytes leftover after parsing attributes in process `syz.1.999'.
[  108.527111][ T8047] syzkaller0: entered promiscuous mode
[  108.537164][ T8047] syzkaller0: entered allmulticast mode
[  108.551441][ T8047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'.
[  108.554847][ T8047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'.
[  108.642239][ T8053] pim6reg0: tun_chr_ioctl cmd 35111
[  108.657014][ T8056] syzkaller0: entered promiscuous mode
[  108.658887][ T8056] syzkaller0: entered allmulticast mode
[  108.805008][ T8061] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  108.983245][ T8076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1020'.
[  109.041775][ T8081] erspan0: entered promiscuous mode
[  109.043727][ T8081] erspan0: entered allmulticast mode
[  109.160732][ T8089] netlink: 'syz.0.1022': attribute type 1 has an invalid length.
[  109.201128][ T8089] bond1: entered promiscuous mode
[  109.203015][ T8089] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.237853][ T8089] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  109.242018][ T8089] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  109.245597][ T8089] bond1: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  109.318644][ T8099] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  109.323012][ T8099] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  109.595021][ T8113] netlink: 'syz.1.1034': attribute type 11 has an invalid length.
[  109.900538][ T8131] netlink: 'syz.0.1040': attribute type 13 has an invalid length.
[  110.502490][ T8149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1049'.
[  110.920438][ T8172] veth0_macvtap: entered allmulticast mode
[  110.937375][ T8172] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  111.088652][ T8176] macvtap1: entered promiscuous mode
[  111.111447][ T8176] vlan0: entered promiscuous mode
[  111.134348][ T8176] vlan0: left promiscuous mode
[  111.167732][ T8178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.233820][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.265141][ T8176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.642018][ T8205] Cannot find add_set index 2 as target
[  112.784005][ T8266] __nla_validate_parse: 4 callbacks suppressed
[  112.784016][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1099'.
[  112.964145][ T8278] netlink: 'syz.0.1102': attribute type 12 has an invalid length.
[  112.970859][ T8278] netlink: 'syz.0.1102': attribute type 5 has an invalid length.
[  113.278688][ T8295] IPv6: Can't replace route, no match found
[  113.567812][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'.
[  113.579578][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'.
[  113.582366][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'.
[  113.676176][ T8318] IPv6: Can't replace route, no match found
[  113.824697][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[  113.830561][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[  113.853821][ T8326] netlink: 'syz.0.1118': attribute type 1 has an invalid length.
[  113.856323][ T8326] netlink: 'syz.0.1118': attribute type 1 has an invalid length.
[  113.858559][ T8326] netlink: 'syz.0.1118': attribute type 2 has an invalid length.
[  113.866435][ T8326] netlink: 'syz.0.1118': attribute type 1 has an invalid length.
[  114.405596][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1134'.
[  114.430179][ T8365] netlink: 'syz.1.1134': attribute type 10 has an invalid length.
[  114.487244][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'.
[  114.491348][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'.
[  114.597466][ T8375] macsec2: entered allmulticast mode
[  114.599537][ T8375] gretap0: entered allmulticast mode
[  114.609951][ T8375] gretap0: left allmulticast mode
[  115.669419][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'.
[  116.213779][ T8491] macsec2: entered promiscuous mode
[  116.411592][ T8507] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  117.178896][ T8558] netlink: 'syz.0.1222': attribute type 1 has an invalid length.
[  117.228449][ T8558] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.264355][ T8561] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.268113][ T8561] bond2: (slave gre2): The slave device specified does not support setting the MAC address
[  117.271837][ T8561] bond2: (slave gre2): Error -95 calling set_mac_address
[  117.294284][ T8558] gretap2: entered promiscuous mode
[  117.298746][ T8558] bond2: (slave gretap2): making interface the new active one
[  117.302158][ T8558] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  117.305849][ T8562] syzkaller0: entered promiscuous mode
[  117.309228][ T8562] syzkaller0: entered allmulticast mode
[  117.317419][ T8558] macvlan3: entered promiscuous mode
[  117.320344][ T8558] macvlan3: entered allmulticast mode
[  117.322824][ T8558] bond2: entered promiscuous mode
[  117.325131][ T8558] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  117.333057][ T8558] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  117.338232][ T8558] bond2: left promiscuous mode
[  117.803711][ T8575] netlink: 'syz.1.1230': attribute type 3 has an invalid length.
[  117.976809][ T8578] bridge0: port 4(vlan2) entered blocking state
[  117.982195][ T8578] bridge0: port 4(vlan2) entered disabled state
[  117.984936][ T8578] vlan2: entered allmulticast mode
[  117.987163][ T8578] geneve0: entered allmulticast mode
[  117.992352][ T8578] vlan2: entered promiscuous mode
[  117.995203][ T8578] geneve0: entered promiscuous mode
[  117.998711][ T8583] netlink: 'syz.1.1234': attribute type 3 has an invalid length.
[  118.002387][ T8583] __nla_validate_parse: 4 callbacks suppressed
[  118.002398][ T8583] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1234'.
[  118.024519][ T8578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1232'.
[  118.028144][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'.
[  118.323507][ T8602] lo speed is unknown, defaulting to 1000
[  118.434521][ T8602] dvmrp0: entered allmulticast mode
[  118.493178][ T8607] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1245'.
[  118.499987][ T8607] smc: net device wlan0 applied user defined pnetid SYZ0
[  118.503040][ T8607] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1245'.
[  118.904875][   T13] dvmrp0 (unregistering): left allmulticast mode
[  119.354073][ T8645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.414537][ T8645] syzkaller0: entered promiscuous mode
[  119.419092][ T8645] syzkaller0: entered allmulticast mode
[  119.429984][ T8645] tipc: Resetting bearer <eth:syzkaller0>
[  119.435653][ T8643] tipc: Resetting bearer <eth:syzkaller0>
[  120.839520][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1269'.
[  120.998450][ T8643] tipc: Disabling bearer <eth:syzkaller0>
[  121.175996][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'.
[  121.187209][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.190760][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.194142][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'.
[  121.196906][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.212699][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.377806][ T8681] vcan0: tx address claim with dlc 0
[  121.590788][ T8693] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1280'.
[  121.594181][ T8693] unsupported nlmsg_type 40
[  121.594838][ T8671] netlink: 'syz.0.1273': attribute type 4 has an invalid length.
[  121.642487][ T8686] syz_tun: entered allmulticast mode
[  121.643496][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1273'.
[  121.670488][ T8685] syz_tun: left allmulticast mode
[  138.505776][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  138.508893][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  186.660598][ T5607] Bluetooth: hci0: command 0x0406 tx timeout
[  186.663662][ T4988] Bluetooth: hci1: command 0x0406 tx timeout
[  199.950504][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  199.953348][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  242.979186][ T5614] Bluetooth: hci2: command 0x0406 tx timeout
[  261.387399][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  261.393458][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  322.825691][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  322.828540][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  384.276577][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  384.279552][ T1365] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
12:23:53  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000049b RBX=ffff888121023e40 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000049b RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000006f90
R8 =ffffffff81b11165 R9 =0000000000080000 R10=0000000000000000 R11=ffffffff8172bab0
R12=0000000010004676 R13=dffffc0000000000 R14=000000000000049b R15=0000000000000020
RIP=ffffffff8173e8c9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818e448000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556927551600 CR3=000000000e144000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 000055557b347898
XMM02=b008000380030010 000fffffffffffff XMM03=0004b80800010000 0008060a010ba202
XMM04=0103800400040808 0004b80800010000 XMM05=0008060a010ba202 b008000380030010
XMM06=000fffffffffffff 0404080002080001 XMM07=00000008060a0172 bc048c0800021000
XMM08=0106800404a7e408 0001000000080606 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=fb563d0b717c8a00 RBX=ffffffff8198983a RCX=fb563d0b717c8a00 RDX=0000000000000001
RSI=ffffffff8da4ef30 RDI=ffffffff8be55840 RBP=ffffc90000197f10 RSP=ffffc90000197de0
R8 =ffff88823c6336db R9 =1ffff110478c66db R10=dffffc0000000000 R11=ffffed10478c66dc
R12=1ffff1102c157000 R13=dffffc0000000000 R14=0000000000000001 R15=1ffff92000032fc8
RIP=ffffffff8b715b8f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9a48000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe7d779fa0 CR3=0000000101b04000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
