last executing test programs:

983.29426ms ago: executing program 0 (id=1110):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

979.350164ms ago: executing program 0 (id=1112):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8, @any, 0x74}, 0xe)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x4000, 0xd8e0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delneigh={0x38, 0x1e, 0x1, 0xffffffff, 0x3, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_MASTER={0x8, 0x9, 0x19}]}, 0x38}}, 0x0)

931.962868ms ago: executing program 0 (id=1113):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x72}}}}, [@NL80211_ATTR_IE={0xb, 0x2a, [@ibss={0x6, 0x2, 0x9}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20020000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x4}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7f}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x101}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xc4f}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xadd8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48804}, 0x1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4d}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x80}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xfffffff9}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x22fb}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x240040c0)
unshare(0x10000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={<r4=>0x0}, &(0x7f0000000540)=0xc)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000580), 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r4, r5, 0x0, 0x1, &(0x7f00000005c0)='\x00'}, 0x30)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004804}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r6)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r7, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20040000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x181, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000900)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x20}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cpuacct.stat\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000ac0)="960d78a9edb7dc0f7fa5fd635d1517b0", 0x10)
setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000b00)={0x74a8, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @private=0xa010100}}}, 0x108)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000c40)={0x0, @initdev, @private}, &(0x7f0000000c80)=0xc)
setsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f0000000cc0)=0x1, 0x4)
connect$unix(r9, &(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000d80)="dc770b60599e65a6e8b793695abd5524a1a68f351e7c963f121b6f13671d6e2c0ca266be68bf5db7a329651bccd88f6cc92a809f88fd3a4f3eff4dc66be82b281529ac7de7bc3637fa02fcd11435c06f5f7ce402bff90ffca75caadbe78bfd97597e88df4d4a072e354cf23245c5f847b0e846df49d1b95fee377fba7b7a271b15d0d84c526e6c0c389ac0b01b2be90f611b7340f8ad83098adabad029675079471957cb144aa85296d4a7e7fa3dac9566d483f4e106a7e2f3", 0xb9, 0xc8, &(0x7f0000000e40)={0xa, 0x4e21, 0xffffff7f, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x100}, 0x1c)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r11, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
unshare(0x4000280)

930.557724ms ago: executing program 0 (id=1114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

823.371218ms ago: executing program 0 (id=1115):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
socket$kcm(0x2, 0x1, 0x84)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}, 0x1c)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$inet6(0xa, 0x5, 0x6d)
accept(r1, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r4 = socket(0x25, 0x3, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
sendto$inet(r0, 0x0, 0xe421dd4e9d72c967, 0x40081, 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
clock_gettime(0x2, &(0x7f00000001c0))
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

713.043533ms ago: executing program 0 (id=1116):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000700)=@mgmt_frame=@probe_response={{{}, {}, @device_b}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x2, 0x7, 0x0, {0x1, 0x433, 0x0, 0x8, 0x0, 0x1}, 0x400, 0x100, 0x8}}, @void, @void}, 0x4a)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28)

408.455704ms ago: executing program 2 (id=1119):
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc0000000202010200000000000000000100000308000940000000040400038094000a800800014000000000080001400000000108000140000000017800028006000340000000001400018008000100ac1414bb08000200e00000012c00018014000300fe8000000000000000000000000000bb14000400fe8000000000000000000000000000352c00018014000300feff0000000000000000000000000101140004ffff000000000000000000000000000000180001801400018008000100ac1414bb08000200e00000015921"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2505000000180001"], 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001380)={&(0x7f00000002c0)='rxrpc_tx_data\x00', r2, 0x0, 0x1}, 0x18)
pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="cf2fe3d1b5ff3d28e8c56d04cee2b3dbdbd8cc7ece81aa113a86d8e40e353d1d607098efd5715e2d658e", 0x2a}, {&(0x7f0000000080)="e7d2ba0d9f636d379eb489f143fde071ee70f06531c3d7899a98987034102419ba0f84ede5b766bfc5bd98be33cf91a0ebeff2b43c677e58fb6cf561ffb54116d2ab4d0394c459c8d09de755960bbd91da3ccffcd1bad749f71602fd86fb645013dff1c6bb63", 0x66}, {&(0x7f0000000100)="6f1520b1a4da4dca3db55ab1f204c5371c424f0022f50e7b52d828ff421acc371b98e0a6df036abfed5efbec568badb1", 0x30}, {&(0x7f0000000380)="50343b3da5b0cb2bce1e65397ff9848f20076fa9e51298844fbaa98fd46230f4520bb9ece0a33df91452e8189d1e9844b8a742ca4286ef137986ed5e48d125ebdea66d6a529d0055cb92d5e06fa3ac79a06683e8d2711cc4011c363cb2e961b8ac3d79e6ec54578fb35b7a6848519fef6f6f7e95f505ae9eb59bba58f1e7c94627e393fabfb299cbbf8568fd158f399a8b9a6c271607a9c54e9d7b20bcf29f65ea37921251d906b5ddf6471479c764b04b1d8ccc61c90044429e5ca1285d8c04c8e262c83b306ec603336fd23aab85750c3f8677b39e9b5307ed082c5c9ed79c4083d5d8e436dd2f58c074be9bc11b2d60e83639d2560314b7a1f09720e1df896565c9f639273d32df09cb5ce969692355dcc7ba32835c509f6c716616c3456c3fbe82e200c9d01dd5ae15796e6b09f3be9d3b37ac46defb3aa0ffe093f32c9b65c7ad07b51f462472f2e65e5b7fc7b070aaf02603fd8f85cb13c4f87c9602576ee55462782c61de9aa22ec2645d615df0ba33a96f9629a3f1885cdaba6713169422bc390056962a224dc12494a3fdcebb490e6329a3844ecbfdad51c38394087d3f7647ffe2867747f8aeb6a695d7ae9b2854f383eac8dc263c24aca2ba38cd971dd89a6bc43638e3f7274de4253efdf238d2c7f9fe08f8609ccbdf064acf9e301cc3735d6a055a18c485c6602c30788730768a154bb5362ac4b6d6be510332000c3539cd97afcce55588462d2c9e7064a234c6c8f3ff8629f60bc9e3e4ceba3635ce8e75957156f05949a2d52be3f710190c4c1fb5238210d9744d96b0bb0915b4abb789856ede3e556d37fc2bd3d37a69316df4141b337bfea098ba631c18e5abe795d7ce295ea4314d43f10025225fde8e3a7410b1b199443203249451b369aaa7144cad8f3ef5daa1f9f952accbbdd7ecfebff0690fb10fac0af5b98edb7529b461002af84fe1a0dd1df46ffd346f012848b91ba688947d3461a0084d83eb140f4148da797c37a0a46cfe41a9a73d15b2cda01a63ebd39d4f1934ad6c65e08533927a93cac77dc99ae16f40e55b399c43d97b063053f894e442b9ff921bb01a42c8631c00932d72d9309d22014e508dd89703cedcf16b41f6b0a3b9316752c66a6ff736ba03ba98c84674685adbf9bdad812c10e87844f886a641adc8237be5f2f083fde47c4285980f0fb2de1cf14bed7e0d8c9a25802eec8e19dbb53938445f6a943246fa3d475b8901248671f5ad661919341ec9cb15976307376d65e1e1c18e03452e8660afbea06f2e871051a4e1535b2ba9cadef5ba34ed25ed11936bdea21e0615db02976e0789bd6afe866550b75e8fafc463a5985ab3f7c76b19c464a0751bfa412bc24099be01663e3e1fbe7ed8717d6a04947b5ed412583ecaf94eb3233644853995c2e3bc327c28aeefe85d35fee296c52b1b5d640349639aafe442bc027e774ca64a8bd890ae2d43050ec5b22cf827cf511f7bead6f0996c2828435b3907bfe9938fdbd6e1b623a0258e646eff2e1b9f8578cf9144078af7bd300aec316b013ccabfe6d271264f53f16f083c38330f40f95b566112e4df282785bb16bc587f7a087519bbb84b19db6c0b275e94b970f149103e6ed0debca7c33bdbaf8a8b0e2214b86d8fea2e7d7fed2ee04427c73f60d4fc54512b379dc4fd5c6bd9c909e71f4b2db660c1f8687bc5d8d3b6393a91daa230286aa5d64faa6efb278588ee54f5b0e9895ad91a264aa8fed8b126cc93855dc6652e10b4cfe9e5340b2c68af7344a58e74b181de1615b7f80ea38c46f694e5a0b89d4b0df1516350e8872e4ec336a24810cc6137b965c2f89d5e628b12f58108ea9426149942524656a02ba82fc774be1ebd947e2dae1ef6c85dbe25db5c38acc489434697a8d3b709f739c7ace43966e710779f40263a97ac101d856396210c79e6648cd66a96bad3243dcb60821929f9796261346d00be888af2aec4c071b918d2ec1f9ee046dc025d18977308ba8f84a7c9abd879544568ec9803cf07a9baf91a570ea96372ddb1de28a30ac4f8e30c07304729e9b27b69f873ef8a160bd9469116fb31acda306d06fd3477d8352c314df017cbfc1087145ba452b96a8d13f0c1c73ffb080b37021edfad2c4244fe3693b6200674ca398f36d6328d69ffda7b9a9e927181f4591615b868488d03ec297607499457a11aaf7837f2b169cffcfc0794cd507dc9636db958a3b7d5351ac6ecfa6553b900d11ec71e96adc443d2923015d34927fdd219fea2445e711f1b69f6056bf5869130ed07d9cf8cd7ff96cbeb5adb3af00b7c53af8e95d10ae1ade50a9492cfdc795c6cff1c649bb1a29514d06afbcd5d95441ac291b297574f4c90fa890fbfc36faa4a028c3336f9818a21c9ae54a296aa5e329957994099c78f8d6b41a7619bd37a19ea1138e403204f451eeb1070506e6e922651f26a928b2594fedd30d69db8018e01bf6d25c1e8739a022badbe8f38eb379fe7b374ce22faa2dbef45bfe836ec7b29e51f0d013f985061cb53e503d036135940bd52d997b53b3d92060e365ac8104f4f4942eabd2b57ce4c56f30253c9a038668be861525957d621bb18f97ba2149485ec29149b9b49d6a0c94e39ed0bfe867692db5352b783130e2be9001f0b75a64498d84311d7b8b404f7bc58d779b71b559d062f2010632d221340fde8a8dbb63aa18a5212cb410b1e2ed42223cffc98a74c2c0f6fc052a94f97aaeb535da2d9e86c0fd00314d5d34121b8937b78a283c938186f5f699b9868ee7bdd2e576f4f1ebb3061a64076f2f71811f855a69e57b672bafe2d1ac9a77f207d700ff7f884d515b3db4ca4f8811e7b101d79ba5fa7983375e0516d1a64ad042712d5a0d8cfa2b6ba1d881c15f9e998a831c6e8caa4cdefe306e54ba080a9f43c987f392e8748cad45db3dd475138c4b3e867c8ce0d83c7227716ef7948e51853038a6825458a1ff57574431a1f151dc323307dc1f441b22f6d13d22efff7a73e19727c42d4b904fbdb2ece5222a680addd5a35212e0f8d26dc303a4dbffe984e5e7386f2ef0e0606d62c1c17f7fa73900a6056623359f176c06dd8b83c7072e7d5f341971b2f55106fe202f1687c98bea7be6d5c451d46dd2eeb6d0adb3f36a849c468807c53561018062b54f573a3df86598206fee4f0c5110f8b4a0b85c7f48a54c2a5bbbb51245d9441eb33a34d7d12b52ab989366c6c0328dd9e8290de3e80c7c4bcecdbcf2cf76a7236c8b84f9ad171073a2f69e24f82ad168756a04b337cabe0d2dcdcb2f304562a6a8b901945ab0611607f7ab35d5f8348dc25810f616beaf6c98e7aa9880aebb1f1a4f5a4a78befc1070cf8ffed186f171e0a65d505fa0faba7a6134eb46f066333f952ddaa0e4f86d682920bde9291690be529b4b708a66a8470785278e40888099a16f19aa12814bf587af668582f84f239b2126c0bad75eae8208306125bb6af5806beabd4e1f1c80ead0aa86327661600946599ddb33314a1ddf68aef05a4220ed2fc8f7fc37c84d5195986302869587709b4a0c72f3438419f6f43d7dd5197693959e9175a505a4d07e761941ee7ea3acb4d39d1705703a1f6453c7017feb1e0a34972baf96a478625f33e8c60060a9fb7332cc829e15659eb9944f5c323087f6eb24389224a37884e97b1201f1fd2eaac0e8955a2ff9535952d8faa047bc9fba0922cdb264a9d62c1f089d97805159fa81cb67c2cc791aac2b31d7635841107a20d06cce2da507596f75599bba6e4ddee8e7529487d0d1f4c66699170d8bb43a9dc9d1ed0757707379aca8ed481d0efb269f525094d5a4978706bdc9c4aa4085676369c896e692b9a4ff01ae48ab5a60044d71e5123c68213a9e5d6317988bd804243f313d462232e04d2bb29536420a6215a0306b66b92dc1f30b24d3f6153ea99be001e916892331630b1b0958d08db212fdd59f26b8aa3185744960f4f67d289f5f73ecc9c21e8d47428dd21daf0164b93362279e69bdc350b45b7b5fb7e4296ba864b30df3b49b0ab54800e2f8d46633d974bc806f2da72f445620a5375372a203f7f5c88cca20131b787a3fd5adadf13f39fe3367831eee7f44bafcecdef43ee288466f7fa8d1136ca8cbcdbb152d68ab2acb4b62c278afcabc3253275f633397c3ba8fd87d2aac6ecd94dfd3c520a4887149903f2b1c0a5b540c525c6935af5e5e6115a53486588dbf4ba5409de5c70464830157d7a4fbff67d18830883aa5327a428a5598df13b76403c5eb171374ae95e9745da75a6e8da4333ed7b1141c28217c50ee589447860373f79146657a56c750979891539288b675fee94c786f510cf220119954c7c7eaaad0fe4cc6c67a82b526d7a1773c379cd0030aceca6ca57b2a64ffff5636634ae102c0433e35ee9bb83717faa8c8888a5187768e7307b98e8a6160dda3b07122c4d441ec370fb919683fe7f12df7148b63883a1a44c990c5ee7695c6c707a48fa564f86011c0c1709dabfe294d107f9ee953c4a64955facfde33c05c4d9ab1bcb9510de838089dc7bd1de92b56254cb68a3499ecf7ee66fd1b1fcc5e23a991dbb5565cee349d721ac78bb1c0665dcbd5f05c2f717e428522098a6ab74cfe87a9c62f57296f9d49ba5b147f2bff683ac4ffb80078e0f551a5ed69f7c743f35bc5b14229fe50766ccd0720f8656f42114aadb48cf8a9cf42fdadf3414d906530d161d06eed99fa4473395a414c27a22adf8336a8f260f607a7d8d759c7ee92eedcd3120d6ce47a9d10d1d392b1e2515b3740f63179ef1e37d7a2416a495da3e381e33205389160dd48a5430b926317f9e227cb417a8b968395e33a4e75486084f6a90299aec3782bc864482469178b532fdf6d5921dbba35747e81509933f2588071d2383ada22dab7503d61678b81e0e261e0b4809a4bf0838049d8094e619dc6e66fd237de2728552082a2eb3c92fe5cd8a235412d1725b87a473492e3d30697a3bb714cda197d506d7c5cd36707aaca0cfd7eba5d0760f44a2391a9c86e35dfa4d38d212d79669b462c8503d19f5758281dab5fadaec4dde2ac558ecdecf15cfffe4272bfbe33d5fef5caf6398fcd1259a268a992cc6496fd9ee3205fef163ea57e5dcc670f9be12c267eb4267c47220baac321891cac1971b03c27097854cf3ed24ca6e445e5986f3ad2bdebd66a5980cc7e7da7f27ddf68b6dc505a2b02a4b316081840f62938bccadbc5a1700d54f9a3d1540b78e3463d54378a9f7ac644229fb08757ca45edbb968c0961bc8cba07f860ab3283a15528c11b1527fcb4b5b6b3ccfb90435568c3683b060052fd015f207a16f17efd06dbc65969e2e12293c1c1025701fe97b364787071a35361efeb7851caa2d4e95b843dc89a7e18c4541b1ad5a6b2eadf1e12235ef7cf1514c0043eb0751f847681bb028ab8bd637b0cbe750bdffd1fc99c59947cbbec89c2f1b91f6fb0c544d04d5059bd17f4b1299331b0cbc846dc76bfbb7cbae2889ab415e6a5f74eb1c8b5895b13fdc2b78232086425a91397e5d9a33a6a259b791ab30283cbcae6763733839bb08863232ca7cc39ffba0867ec65a729ba02f402850a85db6c18691e48adf2001682ca58905cd0770710b5cea889c529c01629dbfab2074a54099fa58f91f83f15dfd9ad454e6fec0d20f21c1fdc569824538e2d11dedc71083e488213e9389301dd83668559a613e8cf4d9f2d37514f002f60e54600f2011ae2ee1137631644b501b4740bd3d3c223a33bed7d9c3988f5a5541c5efb2644df9b7fe2b37", 0x1000}, {0x0}], 0x5, 0x4, 0xfff) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)=0xfffffffd)
close(r1) (async)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async)
socket$key(0xf, 0x3, 0x2)
ioctl$int_in(r5, 0x0, &(0x7f00000013c0)=0x8001) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fce5ffff0000000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r8, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x844) (async)
r9 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000b00)={'bond0\x00', &(0x7f0000000a40)=@ethtool_pauseparam={0x13, 0x0, 0x36, 0x101}})
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

251.455731ms ago: executing program 2 (id=1121):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$phonet(0x23, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f00000034c0)={&(0x7f00000030c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}, 0x80)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0153000000000000000001"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x4008019}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000301010200000000000000000000000aaa07fa2abf402cf608000340000008020800084000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x8000080)

183.664537ms ago: executing program 1 (id=1123):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@rthdr={{0x28, 0x29, 0x39, {0x21, 0x2, 0x2, 0xf1, 0x0, [@loopback]}}}], 0x28}, 0x440d0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x4a, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x2b, 0xb, 0x0, 0x25dfdbfe, {0x6}}, 0x14}}, 0xc00)

183.277238ms ago: executing program 1 (id=1124):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8, 0x2, 0xe, r1}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000980)={r1, 0x4762, 0x10}, 0xc)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x18, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x14, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6)
ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$802154_raw(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)="a01a320c580ff0e9825c9a827c244f0d6bfc8ff261e515534c839c5023c4f492831a438e5913b6f5b0669d0e515ee108d86618e3e6250dc5b545122ebd3a3996c35942b54efe35cd366efeb0a683b3fcb1f98d4566a57e6efa95dede004d8a861770ea999efe1d042f851be0c10afc506795004f6c0a96c276709f4891f8193e8fbfcd3f11343c39e7efd5dd2add8add1e989c9d14e396a194353a2f417de1da0116f88907db50630f876dc0e0a3d8672ac3b69f48cb10b7a86e40", 0xbb}, 0x1, 0x0, 0x0, 0x4801}, 0x40000c4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fdffffff10000000180001801400020076657468315f746f5f68737200000000080011"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x18, &(0x7f0000000600)=ANY=[@ANYBLOB="18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003902526985000000060000001856000010000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800006d94d1697b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000000f43c0ffffffffff"], &(0x7f00000006c0)='GPL\x00', 0xffff8000, 0x48, &(0x7f0000000700)=""/72, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x7, 0x4e, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r5], &(0x7f0000000840)=[{0x2, 0x5, 0x5, 0x6}, {0x0, 0x4, 0xf, 0xc}, {0x1, 0x2, 0x8, 0x8}, {0x5, 0x4, 0x6, 0x4}, {0x2, 0x3, 0x5, 0x6}, {0x0, 0x3, 0xf, 0x6}], 0x10, 0x964b}, 0x94)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'ip6_vti0\x00'})

182.682214ms ago: executing program 2 (id=1125):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0x6, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x44040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x2c, &(0x7f0000001dc0)=ANY=[@ANYBLOB="180018b8ea1845b1656af7501100000000000000cfbf606d791b8cf5c4219a14ae09be67fd8a7d7ac2fa4373cb4a7df16db76f8404abbac7c4de4e73be7aba2bbb65b3558854fa88d9602c03e73fe74b3a92282a42c6f0a85bdb1be4d4a2187ec9bc68b63fd2300100129cee4d3c144bc844d07d112245e21502623004453c21d5abcf5cf3dea5766db169cf96e465a933c70e43b5bae1c463195ccd46d07b63252203d99d3312a749094bb9b40fbe2cb3bf581b1a6899497ef63aef1e5a98c498281d75dfb0607ccead9f7c112c35de0cb8dd19d4defa7e79b9267f3e171fd2ead45d7a4695de", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000006000000000000000700000085000000230000002c47f8ff080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000008c33080008000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x10001, 0xa8, &(0x7f0000000700)=""/168, 0x41000, 0x60, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xe, 0x4b3, 0x10000}, 0x10, 0x21dd6, 0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x4, 0xb, 0x6}, {0x5, 0x4, 0x5}], 0x10, 0x2}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map=<r5=>0xffffffffffffffff, 0xc, 0x0, 0x80000000, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001cc0)={r5, &(0x7f0000000c80)="f9d6241d0e99f70a977ffbb0dc0696a0b56db45cbfef682ebd47de97f15c38cb70cf1099a40d25034d99d4ee1a9deb64058bf80fd742277bed88bdee5907e80ebaa89ec4b6184871e3c1d12dd58c4bd8018332831d777b3059e5e2fc1bb4998e19559ce91946231b5ac45b36d167c0b195100eea766d0cbac135496848103faf0eb244f7eeb040871b25d4543e3d1b48785b7def6ab1581e35c0421a6e8d0947337eb17ebf55e30ae70f78803454d4ff6c5ad77390b6b614edb4fd244ef372100055c7ce31086888d337718ab8720cc5929e294eb09d4cedbaf9dc43b8265b901656689a2d84819f2e2840bb7ac5e9521fe6174763ddf8dda9515c733fb366a039138be923320e20ea97d181364d0f9dba73b7d89b8e6dab352125233365617baef5902118970d1a35561d6d08fbbd6318160eba6c591af99186ed0b4d83c6b9bdf04a4dd546a71f58fe5bbe1723eb2bd0c39e340cc2127be64965e6091cf19cd11ba00bbaf6da2b5008e07d63b0c33d6ac76bd008da8a5830ad029ac4bfb5ce81cd458a1391139cfbbc5880c601144a6184e93bf84f42ff4098a2618c4854e6c7a501defbe8317a707a0126dc951298e798d102b01973f7ff1111322af3a049e6942856b84c31b3f772647f479c7ec2c2f235cbf0177add3618e2b4e5236bafacea9a0545c06cd1dba76ccb10651621f9743573a931b30bee416b78dc4d6998911aaf37c54a1f5df6f03221e4ba9073767952fbdd105d438be752343f067e4782d95525ada35056d4ae5b788c4cbc60efdba16a7dffa947a3b8973fd27175ec293c0a81854b440106a79a4e03f275129e8f2a1352dd91521e4ec46fcbd9d0e402f4e0accd04cdaafbe2f941ed9fbca60a85775ffb222598732e9fd1d99c7c340c7b610fde2eded7f2049c1d38af23ba5a7adc1ccd3b0c0125b8abb287af10cef3ff48a05440c125c112c678eed7205569fa291e5677188b6053761cdb75232cee8381ea48d335cdbc5a48e39aeba43659f57f9fc4c507f2e840daad8f864c8c7506ea247b319e95030a6c20f2006be40b2ad905b69ddea1921ec1db581aac49a0abf3f5c88d3b9a1b67c1a0cdb04dd6f3698d3fee7b5e0c11f314811456ca90c93d4883034598307afc710aa74bcb11e5ac2706c2f9910a4fb0f1139fe7dcd2b65875ceeffe9ed86fe3731204bbc494d241846e5f7e28ed52631ada016993af262a784d4561fe7beaf0d0fbbcdb778a58b9cc7c3a3bb003cb20062ca74f1b6b9c9ba790f6083d5aee909ca8cd9700954a1b35cd69f8286f5ddf10e9a1ff69e1aba4c8b263755a65ff8077c2d573dae0929134556267bca76e26f8d094df74f1710a05e31531a3699440d0d9cd9eb28ef459548ac4d22c657bbff50ca24fb926049f7f9230d86202af40c0a1afa4d1ae115f42e273bd31df2ea56cf96847e7338a0c08d5ede8184e1c93449e716bb294e271ada30f3c843aac2d99ec936dfa346b1cc0468c1f2f557f76725c1e92198c83fe08389b7d23cf495cb1572e13fb77fb80b16dc62ecb6cb2bc7b0278b509d647eccb1effa20a8c19db5c50606e5456af827849b87edb1fde8484ff9592dd0a287825555ea3a48a623c2510013b22fa64aede7a1f8b9184b12798927863af0b473e05258fa050e01386d06f1943832ad1549dbb19adf92e16f82e14dc17110770d5b81a90f4c779b4c4f0429ba658dcd5733d02593011b78a6768e67051867f77e96a01053aca16983412a97549d2bf09556932b8a2aa1e6a18dc2dbbc60a13a0e1bb4dcd3dd987ba5af34850bf72c4ad59ff972335e2f2f1f51e5bd0899c502db32b5f4d067378a192af1f149497a017635bf577440a4194f41033d737a45429eabb840b931218965a2402e36a1f8f936d23846a3a1326dab57da4589af806a2d586670aa5d05d8a7498d41d25fea9813ae194ac3b3d25f3db7b2901ad4447bf3cc167c5168bed13f30698555f22a64770fc299bf7d41f87d446cc5ccc4c08a68bb5a074b096e134a33a377a55366563bc0cf5232e78c0c48799d42aded7566b55c2fc39429a4c9231d3307d70c63831e823fd7b8e6fb16985bfad1d1331b095a2ef783d0933ddd790940f358bbd221a1f79610a4295b9a734dcdf4176df1cda3f23d22be11108fe7a017d2c25a7b6b868931fc227a2d908321dc9bb2ba00556e2ae62fee0dd5118eac5b23a457a0e5b33964190f06f08b8716b7dbec6238cfa6bee1fc8a4aa85008a00b383915da8f3a97ceb5d6d95c25957fcd3a6b41930eed55097429b1941cc47afe6eb3fcd8213aaab734f22f3ecf0cf12093fcfb9e11a2edef0d03076e9528dc80f97fbe1af6380834d86f56c0a64854f252b6feca6a550a997a7bfc61d7c382c75e05744488957f97bcf3f1d489db0a6b3ec842c7e522fdb0c982dba929b20d7f9437f3487d8e39f7a7a156178d1163068c25b7aeeb1573e81a02019d2ee8e95c1e8400d955f741c0f03cf8ee50470230d73e4960460204409015b23a83f78a4f622c4a0b07177fa3c7f250f27002d8ede943e2c178c708323148aa0569df874b96f1307767893e408920f9767b881d03504c0c4f2f7c5349c7c5b07073ccb1be1c691862de1639da7c273c2149edcb7bc7a8da5fe8aaff64a2836f5501c4c9f4c921979c78aee6d74cc248d0b37eaa27f6f8890fb353f0af87ac39a957ea0ee279ed770d14576245535db710ade63c1a0463c4f0a991e048ee0990d0364888832904afe7f14c8d513d1bae5a1d3f9dc840fd85ee61e0fbf03219f9ca7bc3584c3d9eb2dadb933c38748d552ae6d174ad8a687c6f4c4994a65910502746bd7af86c7e501c25fad80d979743fa0a7355bf18d3548b321141590c099b0c3883fa79d62a94afac16d1567377a1be72fd84ccfd4fa1a0b063373347f1a71a159d45d0c4e5a765e00b06efeb2843b0adc5da591cca1c49d18680c2112c6ed6ff74d9006c1c2e3de1171273fdf1114ae3c18ab5c58a6ae606c0536c888d37bc18fa05ae4e122445e661dceb872cb10fd8239155b77331ed0a938506b54a976a6f5fc9ddcc5ea96eb2ecc809ae8e9cb5307ea1dadedc1636a3c3396edf9df617295de164431a4e542b4160a62fc765b665a615b2ee7a97bed55655f17aeebfcb2e882e0c8c3dd5a7191c9830e26158b8d76cf3fc49393cc48dc972494b8bebfa53b3526e1d388372a7447e7d15afe1066fabbfcdaf5b48ba612084527983f91bbd8d3aa3b49d27ed20b1a90e4d0dde14e732ff294228f289c299c7aae95f10cb70807d2904e0881f2efa5aeee49e09342b8893c1f67c94928b53e310e1ecb562a99711e8ed2d937241235770ff1a0abf1df1a5a03ea58c644fe557a299a02ba5326e00fcd21f8561fd86742b6ed98fb7bee1e7eee220e39d0cfe940e2421321adf5f7f2856f7fa997648d41e37bec102f27c632a29d89dc8eb16368fdf5eff1081f23cce43e74ef45cedada5860bcf4ff4e4c9b91d2d7a26ff1aa613399f2c678b2f9adee47617005dbc2d92b3c3cf7339c8b02505053d890b19bc2fdd2c1aa092e65f6dd9c036411be01ed596f2ac99d08fcd66d1d2393d14979d6c86a670175ef82ee8c25f4339f6ee81c16e17ee164b5b557ba14a7b99ce1ca1eb1836c859e84f8f2cc804f3ce1d0ed24c284e89f7acf52df781814fd458c3a0b40f34c55ff19670f0404698ba9d53518ab835e6bfe5ff563acc31a8d593827c638a8a163343087b8bdad355287b214bdb2a3b5eaea2c73afe3c83b035c534c9cc1d15e3a544f4b2acd49996c39803de8f3667e1dfd0a9a89bf27341cc20070af53a9685b077cb8ccf3648168ed00d8a3470e0a9e2d21ca80248aecd45c4b05a3632cdb7e839fa9307db31635098cc062d3fea9ef49b2c85425226631193e2c2e2ed4b2e2ec303a68c73ae63e075c3136aae69e15b2f44c12e49fff6ea14555eee738d19c5e7c1f400711026547e853dbd23ec6cd5bd64bb0d636a0e18904cdffca02dd31c9e7967d1b976e194b6664d945c60ffafc6ec3bc85604c981979f482dd80438ddbb0f534b301503f718d730c653e04b350ba164205b8900f9eb11a5db1ea151a44d20930ad7e42ed9873c90c96158af0d763231bda4cd6d27c242cc253a4b06df2f1fe04fdec4a2ef302023ae6a264a1f2de8c6b929693c12278b24c07bebda8b76f28295b985e582ff7777fa0f4555a3b22d6bcb74c2ac667437a013d4ac95ec50e3098a11ce10cadc48dbb90fb28576da11d98538bede705f3cda2a5e62056e541a54dc4a5cbfd96a77f0fa91ae5e10ab362dc05511675f06bc42f2c9ad8a634d5c03151588e453d7c20ad4fa42dd0ebaa17b013dfb47157f1498674c4053e8055833af837a6a6bd4cdef93b06f911ce54e9e6cd6e70ffcbe62862ab067119296164a05889c45e561a674df20749e096d7866352d6942188ea633c77cd4079a2d2a8a368f9ec307e86ce313f30cc7acff929c3455438dfce62927b8f039b2874cf56f09c2a88b8a26949ef463c442a3c45d0771c12e990ba2d0d422e32f763bb5aee9070fb213c9757905dcf6529bc08acd3d5ec7625b79156bdb0284257898ac3da936aec9fb2797b012da5f335b38a39bd1360dd203e60f9604e8cef367da7b9ccebe1edf8276742dbc00923041e6180ca6474f8c28efe0656d3b91176ec5dc280564087ba0475c80e0c3d363905c7fe55e4bc3e2deb90421f83da2a22b06f94db95642915befe17541c851eb44ff048aaa95c5e69c0e4ea7a0ccdede9e64108bcb020b4ad785bfd1dd348491c230d7574494058f766a3ab094f86c3a3a75db5188e75553cdc09dbc5357a3d9b9c4fee837ed909db76354c8598341d6195616677445bb46e8345333bd7429ffe9796378cdb50e8c2a23297eb266f8ac91fda327984796c515a1d2e39738132e5471ed19df348000bbfeeb1b54248e47f6e8e11dd80532e63be2b5a6254c5b2322eedaedfb5e040bf1bd6a53e55d1556027a4893dbbffab0b1341623346f1f190295b33245f8174af1a9f198fe37ec7ccbc8e8aa925fdd350f1857686f7c70e6bb20f347e37a26b4e2148f0ca4b570794fe13f796f6009e4bdaaf1dfdaf7f028290528d2c2f2151101ab1cbbaf903a574999095966e4e285cff6764fa2326b2cef399a4e5c202372a9de3202c4a6e20ef50f9cda7c6a2cf9e35e2c45958f3b3938f5275662b6d29c793cd52623afa7f7b1bf2d3287bb680af98c21345c09f2d2e2fea4a4c45b3ccb3396a6e95e7deb3b827f9fbd8e465154719bc99e5dd2db96a60f66095cc5b0e8dd945806bb040c1ab881ac77506ed35308946bce3f472145e4f67b7d522d58c0e3120bdd5f25761dba7fd439e7bdf69f862841f95859115809d6d750159cee83bc6414fa46178e8544b844ac4955aa3b1467230775f48a883d468615f959b228ae1474326ae3a1f98f675e9c8e824421ec79d491d6f3e8cbb1f38d10af7d421dcabd40f6c8a9fb57f2a491f780d1c1a78785d8d8cc41d07c4d6195afa0a6710b65a06be37b3359d9f2cb619fa264abc3c9f65f12d6a80a726b64f4eb26304cfba2e7701473383166403232e0aca5582e7c5ab226ee858afcf6c649c7d84da204094823c2012ae89146f38a7fb6dfa60440e368741de30fad7c69d6d44183d5d7bebc4c5e86ba0d161c8150fef0a2197ea97b50bb6e5eedb5efa769d454f0fc8ab66d5cb551711d3aac0b5dffc31d6440f53655c95189155f871de8a1fef64a10b2af97046050f5a345acfe7fa7bc6204359f5", &(0x7f0000001c80)=@udp6=r7, 0x3}, 0x20)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf003, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000800)
r10 = socket$alg(0x26, 0x5, 0x0)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000002100)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000020c0)={&(0x7f0000002000)={0x88, r11, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x14}, 0x20000000)
bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r12 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$alg(r12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r12, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x60, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r9, 0xffffffffffffffff, 0x1, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000a00)='GPL\x00', 0x7f, 0x26, &(0x7f0000000a40)=""/38, 0x41100, 0x50, '\x00', 0x0, 0x25, r13, 0x8, &(0x7f0000000a80)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x5, 0x400, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r13, r13, r14], 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r13, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30)
write$tun(r13, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r13, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d00)=ANY=[@ANYRES32=r9, @ANYRES32=r4, @ANYBLOB="1f0000001420000000000000", @ANYRES32=r13, @ANYBLOB="9fb45fa9758d0aa2df351d0d07565d7b2fdfdb5d6e7efa82cb341892ec700b8beac45260c280f7deb7023bd08cb5fec2a14fae6034519d9199de8490303d847115a63aaee645b2014faa694c75b1c73605a6b7904f5d2c1c659d9991651c728dcd485f02fa0bccac361fa7f87c6046c57d7dad131d6afea524fd272f62d1afff204bd0934433e7e7dc925eaf1e", @ANYRES64=r6], 0x20)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}}, @NFT_MSG_NEWTABLE={0x124, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xa2, 0x6, "b0fe23d99d914b702ebe8c28b2a8bfe78f829fac2f54efc3f2c8414597fbc294c9909389a0794268dfc5bf5ff80fc027f4909c1756bbf072993d11bd7c7bbdf6b6b36686125157520edafd78882ba881db2061678137b27ce641c9dd0b6e96069153b701e59730ebfc70679def8728f0d380dcab08330edad11da0c0f226dd0991fac3cd737246c6808f099dc2e8b9fc563682ebbe8fa891f0647b2a8a9c"}, @NFTA_TABLE_USERDATA={0x64, 0x6, "1705f57ea3d801fb22eb3595d37c82a5076899f409fab62611a1f0d691b6c6a191c27c48c45f117f85b9783fc17bddac3421a1ca25d5b1480015d307d79856f9e7ca8388efa6a7c9db1020ced4a231ad7659622eb8d0ce6400793f848165d5e9"}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x258}}, 0x4040840)

113.619348ms ago: executing program 1 (id=1126):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0x0, 0x0, 0x400c05d}, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x38, r2, 0xd0d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "09aec2d28c"}, @NL80211_KEY_SEQ={0x4}]}]}, 0x38}}, 0xc054)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x24000094)

112.606209ms ago: executing program 2 (id=1127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a"], 0x248}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040000001c0001801800108014000d007665"], 0x34}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x800)

112.317407ms ago: executing program 1 (id=1128):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1000}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x47bdb0df6ff3f1cc, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x4, 0x3, 0xfffffff5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xf2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='inet_sk_error_report\x00', r1, 0x0, 0x8}, 0x18)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10)

60.720363ms ago: executing program 2 (id=1129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000003e0007012fbd7000fcdbdf25047c0000040000002000018006000600800a0000140019"], 0x38}}, 0x0)
accept(r2, 0x0, &(0x7f0000000000))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="001008000300", @ANYRES32=r1, @ANYBLOB="3c00330040bc01000802110000010802110000004c65fea3334c9400ac0146c02d1a00080010000000000000000300010008000000000406000000090800cd000400ff7f"], 0x60}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080)

60.152975ms ago: executing program 1 (id=1130):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001f40), &(0x7f00000000c0)=0x8)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

1.686971ms ago: executing program 2 (id=1131):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x12288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a0000000000000002000006"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x28)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)

0s ago: executing program 1 (id=1132):
r0 = socket(0xa, 0x80002, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r1, 0x0, 0xfffffffffffffff9}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r1}, 0x18)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
socket(0xa, 0x80002, 0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r1, 0x0, 0xfffffffffffffff9}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r1}, 0x18) (async)
socket(0x2000000000000021, 0x2, 0x10000000000002) (async)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) (async)
sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:51930' (ED25519) to the list of known hosts.
syzkaller login: [   56.102979][ T5818] cgroup: Unknown subsys name 'net'
[   56.211531][ T5818] cgroup: Unknown subsys name 'cpuset'
[   56.217802][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.145565][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.963957][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.969021][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.972444][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.976134][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.986461][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.992573][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.995713][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.000212][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.003240][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.005814][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.020706][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.023545][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.028353][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.041141][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.046316][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.375039][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   63.381845][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   63.427443][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   63.519503][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.522824][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.525342][ T5832] bridge_slave_0: entered allmulticast mode
[   63.529423][ T5832] bridge_slave_0: entered promiscuous mode
[   63.562068][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.564480][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.567680][ T5832] bridge_slave_1: entered allmulticast mode
[   63.571180][ T5832] bridge_slave_1: entered promiscuous mode
[   63.588150][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.591705][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.594764][ T5836] bridge_slave_0: entered allmulticast mode
[   63.599751][ T5836] bridge_slave_0: entered promiscuous mode
[   63.639592][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.642622][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.645742][ T5836] bridge_slave_1: entered allmulticast mode
[   63.650716][ T5836] bridge_slave_1: entered promiscuous mode
[   63.672434][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.697407][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.701296][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.704148][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.709761][ T5841] bridge_slave_0: entered allmulticast mode
[   63.714477][ T5841] bridge_slave_0: entered promiscuous mode
[   63.721978][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.744383][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.748675][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.751704][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.754734][ T5841] bridge_slave_1: entered allmulticast mode
[   63.759515][ T5841] bridge_slave_1: entered promiscuous mode
[   63.794378][ T5832] team0: Port device team_slave_0 added
[   63.830650][ T5832] team0: Port device team_slave_1 added
[   63.836061][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.874285][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.883540][ T5836] team0: Port device team_slave_0 added
[   63.920659][ T5836] team0: Port device team_slave_1 added
[   63.940240][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.942939][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.953386][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.960905][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.963746][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.973795][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.994995][ T5841] team0: Port device team_slave_0 added
[   64.022853][ T5841] team0: Port device team_slave_1 added
[   64.026846][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.029599][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.039353][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.055366][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.057688][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.065422][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.109341][ T5832] hsr_slave_0: entered promiscuous mode
[   64.112027][ T5832] hsr_slave_1: entered promiscuous mode
[   64.115732][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.118716][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.127488][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.132357][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.134832][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.142963][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.191749][ T5836] hsr_slave_0: entered promiscuous mode
[   64.194523][ T5836] hsr_slave_1: entered promiscuous mode
[   64.198441][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.201595][ T5836] Cannot create hsr debugfs directory
[   64.261658][ T5841] hsr_slave_0: entered promiscuous mode
[   64.264887][ T5841] hsr_slave_1: entered promiscuous mode
[   64.269423][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.272470][ T5841] Cannot create hsr debugfs directory
[   64.697110][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.712548][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.734703][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.744808][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.810927][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.823420][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.835771][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.843153][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.948439][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.962442][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.968434][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.982786][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.042053][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.056841][   T55] Bluetooth: hci0: command tx timeout
[   65.070158][   T55] Bluetooth: hci1: command tx timeout
[   65.072180][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.095433][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   65.113535][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   65.125407][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.127980][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.138914][   T55] Bluetooth: hci2: command tx timeout
[   65.150398][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.153102][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.175034][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.177629][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.190769][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.193543][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.246021][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.304173][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   65.318954][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.321454][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.340520][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.343219][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.382486][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.396423][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.474127][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.534554][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.615399][ T5832] veth0_vlan: entered promiscuous mode
[   65.627886][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.640963][ T5832] veth1_vlan: entered promiscuous mode
[   65.664159][ T5836] veth0_vlan: entered promiscuous mode
[   65.683525][ T5836] veth1_vlan: entered promiscuous mode
[   65.711578][ T5841] veth0_vlan: entered promiscuous mode
[   65.714290][ T5832] veth0_macvtap: entered promiscuous mode
[   65.727257][ T5832] veth1_macvtap: entered promiscuous mode
[   65.735717][ T5841] veth1_vlan: entered promiscuous mode
[   65.755667][ T5836] veth0_macvtap: entered promiscuous mode
[   65.764183][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.775993][ T5836] veth1_macvtap: entered promiscuous mode
[   65.782976][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.798946][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.802224][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.804928][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.809908][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.839998][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.843887][ T5841] veth0_macvtap: entered promiscuous mode
[   65.860238][ T5841] veth1_macvtap: entered promiscuous mode
[   65.874564][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.903519][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.907359][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.910893][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.914328][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.972743][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.982118][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.984714][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.038255][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.063975][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.065323][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.070273][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.070370][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.075958][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.079478][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.088835][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.091360][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.141614][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.149454][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.211490][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.254889][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.262225][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.324001][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.327999][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.376139][ T5906] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.454139][ T5912] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   66.478280][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.631559][ T5916] Zero length message leads to an empty skb
[   66.725104][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.805746][ T5943] netlink: 'syz.0.9': attribute type 1 has an invalid length.
[   66.811498][ T5943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.829784][ T5941] netlink: 'syz.2.10': attribute type 1 has an invalid length.
[   66.943017][ T5941] 8021q: VLANs not supported on ip_vti0
[   67.071576][ T5958] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14'.
[   67.127085][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'.
[   67.130052][ T5969] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16'.
[   67.132825][ T5969] tipc: Invalid UDP bearer configuration
[   67.132868][ T5969] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   67.147791][ T5840] Bluetooth: hci1: command tx timeout
[   67.147879][ T5222] Bluetooth: hci0: command tx timeout
[   67.216893][ T5222] Bluetooth: hci2: command tx timeout
[   67.290077][ T5973] pim6reg1: entered promiscuous mode
[   67.292604][ T5973] pim6reg1: entered allmulticast mode
[   67.571259][ T5992] netlink: 248 bytes leftover after parsing attributes in process `syz.0.21'.
[   67.648493][ T5995] netlink: 788 bytes leftover after parsing attributes in process `syz.1.22'.
[   67.747797][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'.
[   67.778351][ T6005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.175767][ T6025] netlink: 'syz.0.27': attribute type 1 has an invalid length.
[   68.374747][ T6033] veth1_to_team: entered allmulticast mode
[   68.387817][ T6033] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   68.740960][ T6064] netlink: 64 bytes leftover after parsing attributes in process `syz.2.32'.
[   69.075460][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   69.202070][ T6093] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   69.216567][ T5222] Bluetooth: hci0: command tx timeout
[   69.216587][ T5840] Bluetooth: hci1: command tx timeout
[   69.306572][ T5840] Bluetooth: hci2: command 0x040f tx timeout
[   69.382641][ T6100] netlink: 'syz.1.38': attribute type 1 has an invalid length.
[   69.405020][ T6100] netlink: 'syz.1.38': attribute type 58 has an invalid length.
[   69.503734][ T6113] openvswitch: netlink: Message has 4784 unknown bytes.
[   69.508044][ T6113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.628918][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.632203][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.756107][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.764499][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.813442][ T6113] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.817294][ T6113] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.820156][ T6113] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.822878][ T6113] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.861981][ T6129] @: renamed from bond_slave_0 (while UP)
[   70.128496][ T6135] netlink: 'syz.2.47': attribute type 13 has an invalid length.
[   70.142786][ T6135] netlink: 'syz.2.47': attribute type 17 has an invalid length.
[   70.232262][ T6135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.348973][ T6158] Illegal XDP return value 4294967262 on prog  (id 19) dev N/A, expect packet loss!
[   70.368544][ T6158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.552025][ T6163] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.605564][ T6172] netlink: 'syz.0.54': attribute type 1 has an invalid length.
[   70.671166][ T6181] netlink: 'syz.1.58': attribute type 39 has an invalid length.
[   70.674369][ T6182] netlink: 'syz.1.58': attribute type 39 has an invalid length.
[   70.755617][ T6189] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET)
[   70.905503][ T6191] pim6reg1: entered promiscuous mode
[   70.907819][ T6191] pim6reg1: entered allmulticast mode
[   70.992406][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.994987][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.060366][ T6191] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.064345][ T6191] team0: Port device bond1 added
[   71.250679][ T6210] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   71.255325][ T6211] bridge_slave_1: left allmulticast mode
[   71.259088][ T6211] bridge_slave_1: left promiscuous mode
[   71.261014][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.270831][ T6211] bridge_slave_0: left allmulticast mode
[   71.273324][ T6211] bridge_slave_0: left promiscuous mode
[   71.275292][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.297680][ T5840] Bluetooth: hci0: command tx timeout
[   71.299943][   T55] Bluetooth: hci1: command tx timeout
[   71.376799][   T55] Bluetooth: hci2: command 0x040f tx timeout
[   71.538131][ T6226] __nla_validate_parse: 12 callbacks suppressed
[   71.538153][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'.
[   71.546148][ T6227] netlink: 256 bytes leftover after parsing attributes in process `syz.0.71'.
[   71.563883][ T6226] netlink: 256 bytes leftover after parsing attributes in process `syz.0.71'.
[   71.598543][ T6232] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.73'.
[   71.701989][ T6236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.74'.
[   71.706785][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   71.784388][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'.
[   71.795354][ T6244] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[   71.805563][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'.
[   71.932785][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[   71.980737][ T6254] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.79'.
[   72.200711][ T6261] x_tables: duplicate underflow at hook 2
[   72.266025][ T6265] gretap0: entered promiscuous mode
[   72.273919][ T6265] batman_adv: batadv0: Adding interface: macvlan2
[   72.276632][ T6265] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.284855][ T6265] batman_adv: batadv0: Interface activated: macvlan2
[   72.434893][ T6277] validate_nla: 3 callbacks suppressed
[   72.434924][ T6277] netlink: 'syz.1.87': attribute type 2 has an invalid length.
[   72.459859][ T6279] tipc: Enabling <ib:lo> not permitted
[   72.462764][ T6279] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   72.478018][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'.
[   72.519178][ T6283] netlink: 'syz.1.89': attribute type 11 has an invalid length.
[   72.572807][ T6288] netlink: 'syz.0.91': attribute type 4 has an invalid length.
[   72.578588][ T6290] netlink: 'syz.0.91': attribute type 4 has an invalid length.
[   72.794319][ T6297] gretap0: entered promiscuous mode
[   72.862103][ T6300] 0{X: renamed from gretap0
[   72.867750][ T6300] 0{X: left promiscuous mode
[   72.869303][ T6300] 0{X: entered allmulticast mode
[   72.873064][ T6300] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   73.138042][ T6304] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   73.168825][ T6304] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.193912][ T6304] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.197309][ T6304] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[   73.203262][ T6304] bond1: (slave vxcan5): Error -95 calling set_mac_address
[   73.421845][ T6312] syzkaller0: entered promiscuous mode
[   73.429788][ T6312] syzkaller0: entered allmulticast mode
[   73.464595][   T55] Bluetooth: hci2: command 0x040f tx timeout
[   74.165269][ T6316] openvswitch: netlink: Flow key attr not present in new flow.
[   75.043429][ T6320] smc: net device bond0 applied user defined pnetid SYZ2
[   75.304514][ T6327] team0 (unregistering): Port device team_slave_0 removed
[   75.311315][ T6327] team0 (unregistering): Port device team_slave_1 removed
[   75.605334][ T6362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.889226][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.310709][ T6389] warning: `syz.2.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.576642][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   76.645650][ T6399] netlink: 'syz.0.121': attribute type 7 has an invalid length.
[   76.651212][ T6399] __nla_validate_parse: 91 callbacks suppressed
[   76.651225][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'.
[   77.284263][ T6414] netlink: 'syz.2.124': attribute type 1 has an invalid length.
[   77.304652][ T6414] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.320796][ T6414] netlink: 308 bytes leftover after parsing attributes in process `syz.2.124'.
[   77.323672][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'.
[   77.328786][ T6414] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   77.343354][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'.
[   77.393520][ T6417] netlink: 204 bytes leftover after parsing attributes in process `syz.2.125'.
[   77.445468][ T6421] netlink: 'syz.2.125': attribute type 1 has an invalid length.
[   77.499466][ T6421] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[   77.534239][ T6423] netlink: 88 bytes leftover after parsing attributes in process `syz.1.126'.
[   77.553782][ T6423] IPVS: set_ctl: invalid protocol: 43 172.20.20.30:20002
[   77.601956][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.127'.
[   77.700962][ T6439] netlink: 'syz.2.130': attribute type 6 has an invalid length.
[   77.703981][ T6439] netlink: 'syz.2.130': attribute type 7 has an invalid length.
[   77.713054][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[   77.714750][ T6439] netlink: 'syz.2.130': attribute type 8 has an invalid length.
[   77.729856][ T6439] netlink: 'syz.2.130': attribute type 11 has an invalid length.
[   77.733400][ T6444] vxcan5: entered allmulticast mode
[   77.823158][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'.
[   77.843571][ T6454] netlink: 'syz.2.135': attribute type 1 has an invalid length.
[   77.879849][ T6454] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.896091][ T6454] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.901791][ T6454] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[   77.906596][ T6454] bond3: (slave vxcan5): Error -95 calling set_mac_address
[   78.051015][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'.
[   78.054099][ T6460] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[   78.058248][ T6460] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   78.293209][ T6473] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   78.358479][ T6478] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   78.361623][ T6478] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   78.364632][ T6478] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   78.368791][ T6478] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   78.412549][ T6481] tipc: Started in network mode
[   78.414245][ T6481] tipc: Node identity ac14142f, cluster identity 4711
[   78.420384][ T6481] tipc: New replicast peer: 0.0.0.0
[   78.422923][ T6481] tipc: Enabled bearer <udp:syz2>, priority 10
[   78.564888][ T6483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.633093][ T6487] netlink: 'syz.1.145': attribute type 1 has an invalid length.
[   78.659722][ T6487] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.680778][ T6487] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.683229][ T6487] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[   78.687368][ T6487] bond1: (slave vxcan5): Error -95 calling set_mac_address
[   78.719924][ T6489] bond1: (slave ip6gretap0): making interface the new active one
[   78.723297][ T6489] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link
[   78.735301][ T6489] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap0
[   79.268831][ T6522] pimreg: entered allmulticast mode
[   79.272003][ T6523] pimreg: left allmulticast mode
[   79.372808][ T6525] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[   79.417653][ T6530] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 	
[   79.417653][ T6530] ]h^>>Mv_
[   79.422589][   T10] tipc: Node number set to 2886997039
[   79.526921][ T6543] Bluetooth: MGMT ver 1.23
[   79.732000][ T6562] netlink: 'syz.0.163': attribute type 7 has an invalid length.
[   79.936411][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   80.062835][ T6596] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   80.177010][ T6605] bridge_slave_0: left allmulticast mode
[   80.178954][ T6605] bridge_slave_0: left promiscuous mode
[   80.180754][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.205240][ T6605] bridge_slave_1: left allmulticast mode
[   80.208970][ T6605] bridge_slave_1: left promiscuous mode
[   80.212734][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.239619][ T6605] bond0: (slave bond_slave_0): Releasing backup interface
[   80.255535][ T6605] bond0: (slave bond_slave_1): Releasing backup interface
[   80.289756][ T6605] team0: Port device team_slave_0 removed
[   80.299546][ T6605] team0: Failed to send options change via netlink (err -105)
[   80.302032][ T6605] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   80.308692][ T6605] team0: Port device team_slave_1 removed
[   80.311134][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.313468][ T6605] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.318083][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.320380][ T6605] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.329683][ T6605] batman_adv: batadv0: Interface deactivated: macvlan2
[   80.331875][ T6605] batman_adv: batadv0: Removing interface: macvlan2
[   80.346786][ T6610] team0: Failed to send options change via netlink (err -105)
[   80.349782][ T6610] team0: Mode changed to "activebackup"
[   80.434056][ T6616] netlink: 'syz.0.175': attribute type 1 has an invalid length.
[   80.476298][ T6616] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.497791][ T6616] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.500909][ T6616] bond2: (slave vxcan7): The slave device specified does not support setting the MAC address
[   80.505355][ T6616] bond2: (slave vxcan7): Error -95 calling set_mac_address
[   80.584871][ T6626] veth3: entered promiscuous mode
[   80.593381][ T6626] bond2: (slave veth3): Enslaving as an active interface with a down link
[   80.739738][ T6640] netlink: 'syz.1.179': attribute type 4 has an invalid length.
[   80.759024][ T6640] bond1: (slave ip6gretap0): Releasing active interface
[   80.765757][ T6640] bond0: (slave bond_slave_0): Releasing backup interface
[   80.802616][ T6640] bond0: (slave bond_slave_1): Releasing backup interface
[   80.805805][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.810435][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.900682][ T6654] netlink: 'syz.0.182': attribute type 5 has an invalid length.
[   80.977439][ T6640] vlan0: entered promiscuous mode
[   81.317016][ T6688] openvswitch: netlink: Flow actions attr not present in new flow.
[   81.534983][ T6703] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   81.560520][ T6705] pimreg: entered allmulticast mode
[   81.563823][ T6705] pimreg: left allmulticast mode
[   81.784918][ T6711] __nla_validate_parse: 18 callbacks suppressed
[   81.784939][ T6711] netlink: 12392 bytes leftover after parsing attributes in process `syz.1.197'.
[   81.798364][ T6711] openvswitch: netlink: Flow key attr not present in new flow.
[   82.093134][ T6721] tc_dump_action: action bad kind
[   82.160767][ T6723] veth0_macvtap: left promiscuous mode
[   82.638979][ T6741] validate_nla: 5 callbacks suppressed
[   82.638992][ T6741] netlink: 'syz.2.203': attribute type 1 has an invalid length.
[   82.661891][ T6741] x_tables: duplicate underflow at hook 3
[   82.747595][ T6751] netlink: 'syz.2.206': attribute type 13 has an invalid length.
[   82.750999][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'.
[   82.754591][ T6751] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   82.914218][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'.
[   83.008824][ T6755] block nbd0: server does not support multiple connections per device.
[   83.029288][ T6755] block nbd0: shutting down sockets
[   83.069305][ T6765] netlink: 844 bytes leftover after parsing attributes in process `syz.0.209'.
[   83.119362][ T6767] netlink: 224 bytes leftover after parsing attributes in process `syz.1.210'.
[   83.124786][ T6768] netlink: 224 bytes leftover after parsing attributes in process `syz.1.210'.
[   83.151672][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'.
[   83.178928][ T6767] netlink: 'syz.1.210': attribute type 1 has an invalid length.
[   83.182990][ T6768] netlink: 'syz.1.210': attribute type 1 has an invalid length.
[   83.211544][   T10] IPVS: starting estimator thread 0...
[   83.218774][ T6767] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.257468][ T6767] bond2: (slave gretap1): making interface the new active one
[   83.262836][ T6767] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   83.296876][ T6772] IPVS: using max 47 ests per chain, 112800 per kthread
[   83.391954][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'.
[   83.394681][ T6784] netlink: 'syz.0.215': attribute type 30 has an invalid length.
[   83.402204][ T6784] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.405059][ T6784] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.408942][ T6784] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.412341][ T6784] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.424983][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'.
[   83.429936][ T6786] netlink: 'syz.1.216': attribute type 1 has an invalid length.
[   83.436400][ T6784] netlink: 'syz.0.215': attribute type 30 has an invalid length.
[   83.462577][ T6786] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.503055][ T6786] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.513160][ T6786] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[   83.520045][ T6786] bond3: (slave vxcan5): Error -95 calling set_mac_address
[   83.543076][ T6788] bond3: (slave ip6gretap0): making interface the new active one
[   83.546848][ T6788] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link
[   83.572129][ T6788] bond3: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap0
[   83.599558][ T6792] netlink: 32 bytes leftover after parsing attributes in process `syz.0.218'.
[   83.673829][ T6796] veth4: entered allmulticast mode
[   83.880929][ T6816] netlink: 'syz.1.224': attribute type 13 has an invalid length.
[   83.891478][ T6816] netlink: 'syz.1.224': attribute type 17 has an invalid length.
[   83.955969][ T6816] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.964958][ T6816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.972919][ T6818] lo speed is unknown, defaulting to 1000
[   83.981580][ T6818] lo speed is unknown, defaulting to 1000
[   84.015235][ T6818] lo speed is unknown, defaulting to 1000
[   84.029381][ T6818] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   84.043653][ T6818] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   84.052241][ T6816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.085829][ T6818] lo speed is unknown, defaulting to 1000
[   84.096030][ T6818] lo speed is unknown, defaulting to 1000
[   84.101893][ T6818] lo speed is unknown, defaulting to 1000
[   84.105304][ T6818] lo speed is unknown, defaulting to 1000
[   84.123195][ T6816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.170741][ T6824] netlink: 'syz.2.226': attribute type 1 has an invalid length.
[   84.179554][ T6816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.214430][ T6824] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.235330][ T6824] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.240835][ T6824] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[   84.244779][ T6824] bond5: (slave vxcan1): Error -95 calling set_mac_address
[   84.285686][ T6828] bond3: (slave geneve3): making interface the new active one
[   84.289488][ T6828] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   84.327123][ T6828] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[   84.346185][ T6828] syz.0.228 (6828) used greatest stack depth: 20048 bytes left
[   84.545158][ T6837] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.594169][ T6837] siw: device registration error -23
[   84.640622][ T6846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.654400][ T6846] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   84.697881][ T6816] syz.1.224 (6816) used greatest stack depth: 19352 bytes left
[   84.811029][ T6850] openvswitch: netlink: Flow key attr not present in new flow.
[   85.339168][ T6863] bond0: entered promiscuous mode
[   85.340854][ T6863] @: entered promiscuous mode
[   85.342714][ T6863] bond_slave_1: entered promiscuous mode
[   85.344549][ T6863] batadv0: entered promiscuous mode
[   85.350380][ T6863] bond0: left promiscuous mode
[   85.352510][ T6863] @: left promiscuous mode
[   85.354466][ T6863] bond_slave_1: left promiscuous mode
[   85.356745][ T6863] batadv0: left promiscuous mode
[   85.563286][ T6871] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[   85.567703][ T6871] Cannot find add_set index 3 as target
[   85.570280][ T6870] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[   85.587153][ T6870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.670781][ T6873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.675595][    T9] lo speed is unknown, defaulting to 1000
[   85.719342][ T6875] lo speed is unknown, defaulting to 1000
[   85.790656][ T6873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.033608][ T6898] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[   86.272273][ T6907] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   86.277567][ T6907] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   86.308629][ T6907] lo speed is unknown, defaulting to 1000
[   86.350409][  T791] cfg80211: failed to load regulatory.db
[   86.469077][ T6913] pim6reg1: entered promiscuous mode
[   86.471026][ T6913] pim6reg1: entered allmulticast mode
[   86.668636][ T6914] bond4 (unregistering): Released all slaves
[   86.997462][ T6927] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   87.087872][ T6931] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   87.087954][ T6932] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   87.111269][ T6934] __nla_validate_parse: 14 callbacks suppressed
[   87.111282][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[   87.156874][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[   87.188564][ T6934] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   87.306788][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'.
[   87.593283][ T6961] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.265'.
[   87.680405][ T6976] netlink: 44 bytes leftover after parsing attributes in process `syz.0.268'.
[   87.683400][ T6977] netlink: 44 bytes leftover after parsing attributes in process `syz.0.268'.
[   87.966735][ T6986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.115058][ T6991] validate_nla: 7 callbacks suppressed
[   88.115077][ T6991] netlink: 'syz.1.272': attribute type 1 has an invalid length.
[   88.155801][ T6996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.274'.
[   88.160881][ T6996] openvswitch: netlink: Flow key attr not present in new flow.
[   88.279009][ T7007] lo speed is unknown, defaulting to 1000
[   88.282907][ T7001] lo speed is unknown, defaulting to 1000
[   88.411268][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.278'.
[   88.693000][ T7027] netlink: 112 bytes leftover after parsing attributes in process `syz.0.282'.
[   88.702613][ T7023] netlink: 'syz.1.281': attribute type 1 has an invalid length.
[   88.708518][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'.
[   88.783352][ T7033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.793217][ T7023] 8021q: adding VLAN 0 to HW filter on device bond6
[   88.812044][ T7023] bond5: (slave bond6): making interface the new active one
[   88.818154][ T7023] bond5: (slave bond6): Enslaving as an active interface with an up link
[   88.854757][ T7023] bond5: (slave gretap2): Enslaving as a backup interface with an up link
[   88.861117][ T7023] 8021q: adding VLAN 0 to HW filter on device bond5
[   88.991927][ T7052] netlink: 'syz.2.289': attribute type 5 has an invalid length.
[   89.416394][ T7095] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744072564227003)
[   89.420065][ T7095] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   89.632139][ T7119] netlink: 'syz.0.307': attribute type 1 has an invalid length.
[   89.663116][ T7119] 8021q: adding VLAN 0 to HW filter on device bond4
[   89.683997][ T7119] 8021q: adding VLAN 0 to HW filter on device bond4
[   89.687597][ T7119] bond4: (slave vxcan7): The slave device specified does not support setting the MAC address
[   89.691738][ T7119] bond4: (slave vxcan7): Error -95 calling set_mac_address
[   90.172812][ T7158] openvswitch: netlink: Flow key attr not present in new flow.
[   90.310449][ T7172] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   90.392674][ T7176] macsec1: entered allmulticast mode
[   90.394376][ T7176] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   90.403805][ T7176] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   90.489178][ T7180] netlink: 'syz.1.322': attribute type 6 has an invalid length.
[   90.492581][ T7180] netlink: 'syz.1.322': attribute type 6 has an invalid length.
[   90.592501][ T7184] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.602027][ T7184] bond0: (slave rose0): Enslaving as an active interface with an up link
[   90.611685][ T7186] tipc: Started in network mode
[   90.615747][ T7186] tipc: Node identity 86eb5ce08c7d, cluster identity 4711
[   90.621938][ T7186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.630214][ T7186] syzkaller0: entered promiscuous mode
[   90.634313][ T7186] syzkaller0: entered allmulticast mode
[   90.669521][ T7186] tipc: Resetting bearer <eth:syzkaller0>
[   90.747317][ T7192] netlink: 'syz.2.326': attribute type 9 has an invalid length.
[   90.754969][ T7193] netlink: 'syz.1.324': attribute type 16 has an invalid length.
[   90.757816][ T7193] netlink: 'syz.1.324': attribute type 17 has an invalid length.
[   90.814712][ T7193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.284730][ T7210] _Z`Ԁ@: entered promiscuous mode
[   91.445573][ T7223] openvswitch: netlink: Flow key attr not present in new flow.
[   91.503102][ T7226] netlink: 'syz.2.335': attribute type 30 has an invalid length.
[   91.515066][ T7226] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0
[   91.518405][ T7226] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.521097][ T7226] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.523708][ T7226] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.678095][    T9] tipc: Node number set to 177626336
[   91.900946][ T7267] ip6gre1: entered promiscuous mode
[   92.134374][ T7287] __nla_validate_parse: 20 callbacks suppressed
[   92.134399][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.347'.
[   92.142595][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   92.146964][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'.
[   92.150748][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'.
[   92.222697][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'.
[   92.359059][ T7295] 8021q: adding VLAN 0 to HW filter on device bond6
[   92.553641][ T7315] lo speed is unknown, defaulting to 1000
[   92.563024][ T7313] syzkaller1: entered promiscuous mode
[   92.565432][ T7313] syzkaller1: entered allmulticast mode
[   92.832103][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'.
[   93.308947][ T7360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.366'.
[   93.391791][ T7357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.396754][ T7357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.501150][ T7357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.505737][ T7357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.585955][ T7357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.590672][ T7357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.659695][ T7357] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.663595][ T7357] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.774746][ T7357] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.778661][ T7357] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.793178][ T7357] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.795961][ T7357] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.807429][ T7357] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.810210][ T7357] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.820863][ T7357] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.823549][ T7357] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.845017][ T7374] netlink: 56 bytes leftover after parsing attributes in process `syz.0.372'.
[   94.107548][ T7395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.378'.
[   94.167420][ T7401] Cannot find del_set index 2 as target
[   94.197897][ T7401] bridge0: port 3(erspan0) entered blocking state
[   94.204285][ T7401] bridge0: port 3(erspan0) entered disabled state
[   94.206202][ T7403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.211029][ T7401] erspan0: entered allmulticast mode
[   94.217060][ T7401] erspan0: entered promiscuous mode
[   94.220387][ T7401] bridge0: port 3(erspan0) entered blocking state
[   94.222951][ T7401] bridge0: port 3(erspan0) entered forwarding state
[   94.233973][ T7401] erspan0: left allmulticast mode
[   94.235613][ T7401] erspan0: left promiscuous mode
[   94.238773][ T7401] bridge0: port 3(erspan0) entered disabled state
[   94.244950][ T7405] netem: incorrect ge model size
[   94.247704][ T7405] netem: change failed
[   94.258787][ T7405] validate_nla: 4 callbacks suppressed
[   94.258806][ T7405] netlink: 'syz.0.382': attribute type 6 has an invalid length.
[   94.394970][ T7418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.386'.
[   94.428323][ T7420] sctp: [Deprecated]: syz.1.385 (pid 7420) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.428323][ T7420] Use struct sctp_sack_info instead
[   94.726649][ T7437] netlink: 'syz.2.392': attribute type 1 has an invalid length.
[   94.733153][ T7437] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   94.836545][ T7442] bridge_slave_1: left allmulticast mode
[   94.838496][ T7442] bridge_slave_1: left promiscuous mode
[   94.840358][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.845193][ T7442] bridge_slave_0: left allmulticast mode
[   94.848137][ T7442] bridge_slave_0: left promiscuous mode
[   94.850215][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.511172][ T7459] openvswitch: netlink: Flow key attr not present in new flow.
[   95.807003][ T7465] ip6erspan0: entered allmulticast mode
[   95.936778][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.382344][ T7467] netlink: 'syz.0.401': attribute type 2 has an invalid length.
[   97.455821][ T7467] : entered promiscuous mode
[   97.499706][ T7469] __nla_validate_parse: 7 callbacks suppressed
[   97.499731][ T7469] netlink: 248 bytes leftover after parsing attributes in process `syz.0.402'.
[   97.594184][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'.
[   97.602112][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'.
[   97.650252][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'.
[   97.723645][ T7480] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[   97.786916][ T7477] veth5: entered promiscuous mode
[   97.869109][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'.
[   97.926332][ T7495] netlink: 44 bytes leftover after parsing attributes in process `syz.1.408'.
[   97.963080][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'.
[   97.999203][ T7503] netlink: 508 bytes leftover after parsing attributes in process `syz.2.412'.
[   98.059097][ T7508] xt_hashlimit: size too large, truncated to 1048576
[   98.500144][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   98.989396][ T7553] netlink: 88 bytes leftover after parsing attributes in process `syz.0.422'.
[   99.103308][ T7558] netlink: 'syz.1.424': attribute type 1 has an invalid length.
[   99.126557][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'.
[   99.273213][ T7573] xt_TPROXY: Can be used only with -p tcp or -p udp
[   99.618794][ T7583] netlink: 'syz.0.432': attribute type 13 has an invalid length.
[   99.639387][ T7583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.897726][ T7603] netlink: 'syz.0.438': attribute type 13 has an invalid length.
[   99.900528][ T7603] netlink: 'syz.0.438': attribute type 17 has an invalid length.
[   99.908312][ T7603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.946467][ T7603] lo speed is unknown, defaulting to 1000
[  100.589014][ T7603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.590427][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.627104][ T7607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.689468][ T7616] netlink: 'syz.1.442': attribute type 4 has an invalid length.
[  100.696182][ T7616] netlink: 'syz.1.442': attribute type 4 has an invalid length.
[  100.930753][ T7627] batadv_slave_0: entered promiscuous mode
[  100.933582][ T7628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.971127][ T7628] batadv_slave_0 (unregistering): left promiscuous mode
[  100.974036][ T7628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.028168][ T7629] lo speed is unknown, defaulting to 1000
[  101.165020][ T7603] syz.0.438 (7603) used greatest stack depth: 18856 bytes left
[  101.495254][ T7652] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1768647778)
[  101.500885][ T7652] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  101.561637][ T7657] pimreg: entered allmulticast mode
[  101.572821][ T7657] pimreg: left allmulticast mode
[  101.589550][ T7659] hsr_slave_0: left promiscuous mode
[  101.591990][ T7659] hsr_slave_1: left promiscuous mode
[  101.851339][ T7669] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[  101.877798][ T7669] 8021q: adding VLAN 0 to HW filter on device bond8
[  101.902887][ T7669] 8021q: adding VLAN 0 to HW filter on device bond8
[  101.905744][ T7669] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address
[  101.912174][ T7669] bond8: (slave vxcan5): Error -95 calling set_mac_address
[  101.947538][ T7671] bond3: (slave ip6gretap0): Releasing active interface
[  101.963595][ T7671] bond8: (slave ip6gretap0): making interface the new active one
[  101.969786][ T7671] bond8: (slave ip6gretap0): Enslaving as an active interface with an up link
[  101.984290][ T7669] bond8: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap0
[  102.944430][ T7693] lo speed is unknown, defaulting to 1000
[  102.994002][ T7694] __nla_validate_parse: 11 callbacks suppressed
[  102.994022][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'.
[  103.156983][ T7697] syzkaller1: entered promiscuous mode
[  103.159691][ T7697] syzkaller1: entered allmulticast mode
[  103.379085][  T791] IPVS: starting estimator thread 0...
[  103.425074][ T7709] lo speed is unknown, defaulting to 1000
[  103.485729][ T7708] IPVS: using max 61 ests per chain, 146400 per kthread
[  103.627742][ T7719] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004
[  103.631406][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'.
[  103.631446][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.469'.
[  103.640596][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[  103.648309][ T7719] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004
[  103.652792][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.469'.
[  103.656824][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[  103.734962][ T7723] netlink: 12392 bytes leftover after parsing attributes in process `syz.2.470'.
[  103.741185][ T7723] openvswitch: netlink: Flow key attr not present in new flow.
[  103.830756][ T7725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.920927][ T7729] netlink: 'syz.0.473': attribute type 1 has an invalid length.
[  103.959838][ T7729] 8021q: adding VLAN 0 to HW filter on device bond5
[  103.980245][ T7729] 8021q: adding VLAN 0 to HW filter on device bond5
[  103.983571][ T7729] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  103.990492][ T7729] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  104.074396][ T7735] lo speed is unknown, defaulting to 1000
[  104.080846][ T7735] lo speed is unknown, defaulting to 1000
[  104.084030][ T7735] lo speed is unknown, defaulting to 1000
[  104.258460][ T5901] lo speed is unknown, defaulting to 1000
[  104.264941][ T7735] infiniband syz0: set active
[  104.268028][ T7735] infiniband syz0: added lo
[  104.273848][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'.
[  104.319113][ T7735] RDS/IB: syz0: added
[  104.321161][ T7735] smc: adding ib device syz0 with port count 1
[  104.323417][ T7735] smc:    ib device syz0 port 1 has pnetid 
[  104.328892][ T5901] lo speed is unknown, defaulting to 1000
[  104.339431][ T7735] lo speed is unknown, defaulting to 1000
[  104.355631][ T7744] Set syz1 is full, maxelem 0 reached
[  104.405229][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'.
[  104.426878][ T7748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.575261][ T7735] lo speed is unknown, defaulting to 1000
[  104.704944][ T7759] netlink: 'syz.0.482': attribute type 1 has an invalid length.
[  104.785381][ T7759] 8021q: adding VLAN 0 to HW filter on device bond6
[  104.788986][ T7735] lo speed is unknown, defaulting to 1000
[  104.924766][ T7734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.925473][ T7761] 8021q: adding VLAN 0 to HW filter on device bond6
[  104.932262][ T7761] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  104.939947][ T7761] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  105.012427][ T7769] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  105.285915][ T7777] veth0: entered promiscuous mode
[  105.835908][ T7776] veth0: left promiscuous mode
[  105.888806][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[  106.049154][ T7817] syzkaller0: left promiscuous mode
[  106.050959][ T7817] syzkaller0: left allmulticast mode
[  106.100284][ T7822] wireguard: wg1: Could not create IPv4 socket
[  106.145460][ T7827] netlink: 'syz.1.497': attribute type 3 has an invalid length.
[  106.310157][ T7847] netlink: 'syz.2.504': attribute type 1 has an invalid length.
[  106.428721][ T7855] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  106.436136][ T7855] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  106.531330][ T7862] openvswitch: netlink: Flow key attr not present in new flow.
[  106.632635][ T7871] netlink: 'syz.1.512': attribute type 64 has an invalid length.
[  107.015564][ T7886] netlink: 'syz.1.516': attribute type 83 has an invalid length.
[  107.025310][ T7896] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.127977][ T7900] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  107.537875][ T7926] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  107.541736][ T7926] macsec1: entered promiscuous mode
[  107.543683][ T7926] macsec1: entered allmulticast mode
[  107.545363][ T7926] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  107.762632][ T7931] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[  107.794970][ T7931] 8021q: adding VLAN 0 to HW filter on device bond9
[  107.815314][ T7931] 8021q: adding VLAN 0 to HW filter on device bond9
[  107.819917][ T7931] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address
[  107.825662][ T7931] bond9: (slave vxcan5): Error -95 calling set_mac_address
[  107.855087][ T7933] bond8: (slave ip6gretap0): Releasing active interface
[  107.867342][ T7933] bond9: (slave ip6gretap0): making interface the new active one
[  107.870251][ T7933] bond9: (slave ip6gretap0): Enslaving as an active interface with an up link
[  107.883328][ T7931] bond9: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of ip6gretap0
[  108.074993][ T7939] 8021q: adding VLAN 0 to HW filter on device bond10
[  108.266099][ T7947] netlink: 'syz.1.532': attribute type 5 has an invalid length.
[  108.508198][ T7949] lo speed is unknown, defaulting to 1000
[  108.513938][ T7949] lo speed is unknown, defaulting to 1000
[  108.745761][ T7953] __nla_validate_parse: 8 callbacks suppressed
[  108.745774][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'.
[  108.757026][ T7953] netlink: 'syz.0.534': attribute type 5 has an invalid length.
[  108.759908][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'.
[  108.770965][ T7953] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0
[  108.773696][ T7953] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0
[  108.777527][ T7953] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0
[  108.780353][ T7953] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0
[  108.783423][ T7953] geneve4: entered promiscuous mode
[  108.785120][ T7953] geneve4: entered allmulticast mode
[  108.833246][ T7955] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  108.865788][ T7957] netlink: 'syz.0.536': attribute type 1 has an invalid length.
[  108.896063][ T7957] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.927942][ T7957] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.930296][ T7957] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  108.934557][ T7957] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  109.028764][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'.
[  109.153931][ T7975] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  109.434771][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'.
[  109.611010][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'.
[  109.801268][ T8029] netlink: 'syz.1.553': attribute type 1 has an invalid length.
[  109.808193][ T8029] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  109.824897][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'.
[  109.863469][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'.
[  110.049978][ T8047] 8021q: adding VLAN 0 to HW filter on device bond12
[  110.193880][ T8058] netlink: 260 bytes leftover after parsing attributes in process `syz.1.561'.
[  110.198740][ T8058] netlink: 44 bytes leftover after parsing attributes in process `syz.1.561'.
[  110.202030][ T8058] netlink: 44 bytes leftover after parsing attributes in process `syz.1.561'.
[  110.275027][ T8063] lo speed is unknown, defaulting to 1000
[  110.279682][ T8063] lo speed is unknown, defaulting to 1000
[  110.292335][ T8068] dvmrp8: entered allmulticast mode
[  110.299640][ T8067] dvmrp8: left allmulticast mode
[  110.469958][ T8071] syzkaller1: entered promiscuous mode
[  110.473067][ T8071] syzkaller1: entered allmulticast mode
[  110.645694][ T8079] netlink: 'syz.2.568': attribute type 1 has an invalid length.
[  110.723156][ T8084] netlink: 'syz.0.570': attribute type 39 has an invalid length.
[  110.915102][ T8096] netlink: 'syz.2.576': attribute type 4 has an invalid length.
[  111.034035][ T8098] netlink: 'syz.1.575': attribute type 30 has an invalid length.
[  111.062926][ T8106] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.065474][ T8107] lo speed is unknown, defaulting to 1000
[  111.070249][ T8107] lo speed is unknown, defaulting to 1000
[  111.078354][ T8106] syzkaller0: entered promiscuous mode
[  111.080165][ T8106] syzkaller0: entered allmulticast mode
[  111.192676][ T8117] netlink: 'syz.1.583': attribute type 2 has an invalid length.
[  111.205690][ T8117] : entered promiscuous mode
[  111.296963][ T8123] lo speed is unknown, defaulting to 1000
[  111.299911][ T8123] lo speed is unknown, defaulting to 1000
[  111.340425][ T8124] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82
[  111.487162][ T8127] syzkaller1: entered promiscuous mode
[  111.489111][ T8127] syzkaller1: entered allmulticast mode
[  111.726065][ T8136] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.853758][ T8140] netlink: 'syz.2.589': attribute type 1 has an invalid length.
[  111.870851][ T8140] 8021q: adding VLAN 0 to HW filter on device bond8
[  111.899125][ T8140] 8021q: adding VLAN 0 to HW filter on device bond8
[  111.901650][ T8140] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address
[  111.919723][ T8140] bond8: (slave vxcan5): Error -95 calling set_mac_address
[  112.165451][ T8147] sctp: [Deprecated]: syz.1.591 (pid 8147) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.165451][ T8147] Use struct sctp_sack_info instead
[  112.320671][ T8160] syz.1.596 uses old SIOCAX25GETINFO
[  112.327178][ T8162] ieee802154 phy0 wpan0: encryption failed: -22
[  112.357725][ T8162] netlink: 'syz.0.595': attribute type 10 has an invalid length.
[  112.435765][ T8169] vxcan4: entered promiscuous mode
[  112.612824][ T8188] netlink: 'syz.1.604': attribute type 39 has an invalid length.
[  112.747928][ T8201] tunl0: entered promiscuous mode
[  112.752795][ T8201] netlink: 'syz.0.608': attribute type 4 has an invalid length.
[  112.979641][ T8213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.094977][ T8224] siw: device registration error -23
[  113.832312][ T8236] __nla_validate_parse: 23 callbacks suppressed
[  113.832325][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'.
[  113.987601][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'.
[  114.008387][ T8254] can: request_module (can-proto-0) failed.
[  114.080819][ T8261] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.202106][ T8271] netlink: 48 bytes leftover after parsing attributes in process `syz.0.618'.
[  114.314876][ T8280] lo speed is unknown, defaulting to 1000
[  114.322339][ T8280] lo speed is unknown, defaulting to 1000
[  114.354852][   T55] Bluetooth: hci2: link tx timeout
[  114.357239][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.492205][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'.
[  114.745621][ T8295] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.833975][ T8297] validate_nla: 2 callbacks suppressed
[  114.833996][ T8297] netlink: 'syz.0.631': attribute type 1 has an invalid length.
[  114.864595][ T8297] 8021q: adding VLAN 0 to HW filter on device bond8
[  114.888398][ T8297] 8021q: adding VLAN 0 to HW filter on device bond8
[  114.908512][ T8297] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  114.914003][ T8297] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  115.060473][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.633'.
[  115.077102][ T8309] xt_cgroup: xt_cgroup: no path or classid specified
[  115.084724][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.087655][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.134225][   T33] audit: type=1107 audit(1752824767.509:2): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+џ-'
[  115.139528][ T8318] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[  115.171318][ T8318] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[  115.190842][ T8318] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[  115.194091][ T8318] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[  115.198021][ T8318] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[  115.204964][ T8318] netlink: 'syz.0.634': attribute type 1 has an invalid length.
[  115.210497][ T8322] bond9: (slave ip6gretap0): Releasing active interface
[  115.218528][ T8322] bond2: (slave gretap1): Releasing active interface
[  115.225096][ T8322] bond5: (slave bond6): Releasing backup interface
[  115.229975][ T8322] bond5: (slave bond6): the permanent HWaddr of slave - 4e:18:15:31:4e:64 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  115.235537][ T8322] bond5: (slave gretap2): making interface the new active one
[  115.244859][ T8322] bond5: (slave gretap2): Releasing backup interface
[  115.259870][ T5867] lo speed is unknown, defaulting to 1000
[  115.316840][ T8322] netlink: 14 bytes leftover after parsing attributes in process `syz.1.636'.
[  115.357609][ T8322] bond0 (unregistering): Released all slaves
[  115.404608][ T8322] syz.1.636 (8322) used greatest stack depth: 16880 bytes left
[  115.451155][ T8334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.639'.
[  115.553857][ T8338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.640'.
[  115.682816][ T8340] lo speed is unknown, defaulting to 1000
[  115.685982][ T8340] lo speed is unknown, defaulting to 1000
[  115.769548][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.641'.
[  116.060977][ T8350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.644'.
[  116.093148][ T8350] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[  116.095836][ T8349] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[  116.416608][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  116.682076][ T8369] netlink: 'syz.2.650': attribute type 13 has an invalid length.
[  116.708290][ T8369] 0{X: left allmulticast mode
[  116.716728][ T8369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.774145][ T8369] lo speed is unknown, defaulting to 1000
[  116.779005][ T8369] lo speed is unknown, defaulting to 1000
[  116.827154][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.896974][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.968398][ T8369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.532358][ T8391] ieee802154 phy0 wpan0: encryption failed: -22
[  117.815005][ T8408] lo speed is unknown, defaulting to 1000
[  117.832075][ T8403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.841417][ T8408] lo speed is unknown, defaulting to 1000
[  117.915085][ T8403] lo speed is unknown, defaulting to 1000
[  117.936384][ T8417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.940507][ T8418] pim6reg1: entered promiscuous mode
[  117.942657][ T8418] pim6reg1: entered allmulticast mode
[  117.996370][ T8417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.007125][ T8417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.018988][ T8403] lo speed is unknown, defaulting to 1000
[  118.093024][ T8418] bond10 (unregistering): Released all slaves
[  118.289759][ T8426] ieee802154 phy0 wpan0: encryption failed: -22
[  118.292082][ T8426] ieee802154 phy0 wpan0: encryption failed: -22
[  119.133436][ T8455] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  119.165056][ T8455] batman_adv: batadv0: Adding interface: ip6gretap1
[  119.167543][ T8455] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.185893][ T8461] __nla_validate_parse: 12 callbacks suppressed
[  119.185907][ T8461] netlink: 76 bytes leftover after parsing attributes in process `syz.1.670'.
[  119.199680][ T8461] tipc: Failed to remove unknown binding: 66,1,1/0:3004022056/3004022058
[  119.206894][ T8455] batman_adv: batadv0: Interface activated: ip6gretap1
[  119.207691][ T8459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.671'.
[  119.250454][ T8455] tipc: Failed to remove unknown binding: 66,1,1/0:3004022056/3004022058
[  119.253294][ T8455] tipc: Failed to remove unknown binding: 66,1,1/0:3004022056/3004022058
[  119.425266][ T8465] lo speed is unknown, defaulting to 1000
[  119.432092][ T8465] lo speed is unknown, defaulting to 1000
[  119.472634][ T8468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.532773][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.595443][ T8468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.650349][ T8475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.654128][ T8475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.657645][ T8475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  119.661810][ T8475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  119.695914][ T8473] bpq0: entered promiscuous mode
[  119.698249][ T8473] bpq0: entered allmulticast mode
[  119.732515][ T8475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.735815][ T8475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.739328][ T8475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  119.746920][ T8475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  119.795324][ T8475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.801697][ T8475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.804978][ T8475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  119.809962][ T8475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  119.819427][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.679'.
[  119.829523][ T8482] ipt_ECN: cannot use operation on non-tcp rule
[  119.868608][ T8475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.871757][ T8475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.875064][ T8475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  119.879458][ T8475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0
[  119.961520][ T8475] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.964238][ T8475] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  119.967938][ T8475] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  119.970868][ T8475] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  119.981014][ T8475] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.983597][ T8475] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  119.986325][ T8475] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  119.988915][ T8475] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  119.999210][ T8475] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.001869][ T8475] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  120.004468][ T8475] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  120.007307][ T8475] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  120.018465][ T8475] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.021857][ T8475] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  120.024586][ T8475] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  120.027467][ T8475] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  120.109218][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'.
[  120.118065][ T8500] openvswitch: netlink: Unknown nsh attribute 0
[  120.120217][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.279908][ T8512] netlink: 48 bytes leftover after parsing attributes in process `syz.0.686'.
[  120.283736][ T8512] netlink: 48 bytes leftover after parsing attributes in process `syz.0.686'.
[  120.384180][ T8519] batadv_slave_1: entered promiscuous mode
[  120.409118][ T8521] netlink: 140 bytes leftover after parsing attributes in process `syz.0.688'.
[  120.415832][    C0] Unknown status report in ack skb
[  120.580044][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'.
[  120.775221][ T8548] xt_TCPMSS: Only works on TCP SYN packets
[  120.889707][ T8558] netlink: 88 bytes leftover after parsing attributes in process `syz.0.695'.
[  121.066842][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'.
[  121.248430][ T8587] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  121.392276][ T8607] ieee802154 phy0 wpan0: encryption failed: -90
[  121.485654][ T8621] validate_nla: 6 callbacks suppressed
[  121.485666][ T8621] netlink: 'syz.2.711': attribute type 23 has an invalid length.
[  121.646865][ T8635] netlink: 'syz.2.717': attribute type 22 has an invalid length.
[  121.820945][ T8658] netlink: 'syz.1.722': attribute type 2 has an invalid length.
[  121.910285][ T8654] x_tables: duplicate underflow at hook 2
[  121.995806][ T8668] netlink: 'syz.2.724': attribute type 1 has an invalid length.
[  122.038320][ T8668] 8021q: adding VLAN 0 to HW filter on device bond9
[  122.069054][ T8668] 8021q: adding VLAN 0 to HW filter on device bond9
[  122.071488][ T8668] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address
[  122.075659][ T8668] bond9: (slave vxcan5): Error -95 calling set_mac_address
[  122.084862][ T8676] netlink: 'syz.0.727': attribute type 1 has an invalid length.
[  122.090783][ T8676] netlink: 'syz.0.727': attribute type 1 has an invalid length.
[  122.093744][ T8677] netlink: 'syz.1.726': attribute type 3 has an invalid length.
[  122.285613][ T8686] tunl0: left promiscuous mode
[  122.337994][ T8692] netlink: 'syz.1.730': attribute type 1 has an invalid length.
[  122.467539][ T8686] veth1_to_team: left allmulticast mode
[  122.604145][ T8686] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  122.610184][ T8686] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  122.613620][ T8686] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  122.617937][ T8686] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  122.642430][ T8686] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  122.725730][ T8686] vxcan5: left allmulticast mode
[  122.734724][ T8686] veth3: left promiscuous mode
[  122.747344][ T8686] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.750993][ T8686] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.754466][ T8686] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.758034][ T8686] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  122.767482][ T8686] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  122.770176][ T8686] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  122.772744][ T8686] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  122.775363][ T8686] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  122.786727][ T8686] ip6gre1: left promiscuous mode
[  122.791216][ T8686] veth5: left promiscuous mode
[  122.793466][ T8686] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  122.795672][ T8686] macsec1: left promiscuous mode
[  122.798416][ T8686] macsec1: left allmulticast mode
[  122.803491][ T8686] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  122.806136][ T8686] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  122.808952][ T8686] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  122.811525][ T8686] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  122.814337][ T8686] geneve4: left promiscuous mode
[  122.815884][ T8686] geneve4: left allmulticast mode
[  122.833061][ T5901] lo speed is unknown, defaulting to 1000
[  122.841610][ T5901] syz1: Port: 1 Link DOWN
[  122.842824][ T8694] veth1_to_bond: entered allmulticast mode
[  122.853786][ T8696] bond_slave_1: entered promiscuous mode
[  122.886730][ T8683] bond_slave_1: left promiscuous mode
[  122.889818][ T8683] veth1_to_bond: left allmulticast mode
[  123.045185][ T8706] bridge0: port 1(gretap0) entered blocking state
[  123.048765][ T8706] bridge0: port 1(gretap0) entered disabled state
[  123.052189][ T8706] gretap0: entered allmulticast mode
[  123.059663][ T8706] gretap0: entered promiscuous mode
[  123.064999][ T8706] bridge0: port 1(gretap0) entered blocking state
[  123.068795][ T8706] bridge0: port 1(gretap0) entered forwarding state
[  123.078539][ T8716] netlink: 'syz.0.738': attribute type 3 has an invalid length.
[  123.122166][ T8724] SET target dimension over the limit!
[  123.128653][ T8724] netlink: 'syz.0.741': attribute type 1 has an invalid length.
[  123.345521][ T8744] bridge0: port 1(gretap0) entered disabled state
[  123.391362][ T8744] batadv_slave_1: left promiscuous mode
[  123.396781][ T8744] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  123.428197][ T8744] ip6erspan0: left allmulticast mode
[  123.450045][ T8744] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  123.462167][  T791] lo speed is unknown, defaulting to 1000
[  123.463995][  T791] syz0: Port: 1 Link DOWN
[  123.476853][  T791] lo speed is unknown, defaulting to 1000
[  123.502457][ T8754] openvswitch: netlink: IP tunnel dst address not specified
[  124.488419][ T8796] __nla_validate_parse: 17 callbacks suppressed
[  124.488434][ T8796] netlink: 312 bytes leftover after parsing attributes in process `syz.2.762'.
[  124.493677][ T8795] netlink: 312 bytes leftover after parsing attributes in process `syz.2.762'.
[  124.596533][ T8798] xt_CT: No such helper "snmp"
[  124.759573][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'.
[  124.769758][ T8810] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4)
[  124.774668][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'.
[  124.778018][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'.
[  124.871491][ T8816] IPv6: sit1: Disabled Multicast RS
[  125.470695][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'.
[  125.499473][ T8828] 8021q: adding VLAN 0 to HW filter on device bond10
[  125.758235][ T8844] dvmrp8: entered allmulticast mode
[  125.763478][ T8843] dvmrp8: left allmulticast mode
[  125.887254][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.775'.
[  126.022308][ T8852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.032161][ T5886] lo speed is unknown, defaulting to 1000
[  126.036660][ T5886] syz0: Port: 1 Link ACTIVE
[  126.038798][ T5886] lo speed is unknown, defaulting to 1000
[  126.069753][ T8847] lo speed is unknown, defaulting to 1000
[  126.074412][ T8847] lo speed is unknown, defaulting to 1000
[  126.077841][ T8851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.777'.
[  126.329180][ T8856] lo speed is unknown, defaulting to 1000
[  126.331886][ T8856] lo speed is unknown, defaulting to 1000
[  126.753608][ T8867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.780'.
[  126.761792][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'.
[  127.162497][ T8885] openvswitch: netlink: IPv4 tun info is not correct
[  127.612854][ T8914] nbd: must specify a size in bytes for the device
[  127.936649][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.966403][ T8931] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  127.969312][ T8931] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  127.972098][ T8931] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  127.974830][ T8931] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  128.003298][ T8931] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  128.024774][ T8931] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  128.232210][ T8949] validate_nla: 6 callbacks suppressed
[  128.232224][ T8949] netlink: 'syz.1.807': attribute type 2 has an invalid length.
[  128.237007][ T8949] netlink: 'syz.1.807': attribute type 1 has an invalid length.
[  128.313502][ T8951] gretap0: entered promiscuous mode
[  128.315197][ T8951] gretap0: entered allmulticast mode
[  128.899759][ T8972] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.902430][ T8972] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.905106][ T8972] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.909930][ T8972] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.913026][ T8972] geneve2: entered promiscuous mode
[  128.947365][ T8974] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  128.993521][ T8979] IPVS: Unknown mcast interface: vlan0
[  129.224847][ T8998] netlink: 'syz.2.820': attribute type 1 has an invalid length.
[  129.255104][ T8998] 8021q: VLANs not supported on ip6gre0
[  129.396161][ T9006] gtp0: entered promiscuous mode
[  129.492139][ T9010] xt_HMARK: spi-set and port-set can't be combined
[  129.523256][ T9010] syzkaller0: Caught tx_queue_len zero misconfig
[  129.676864][ T9020] __nla_validate_parse: 23 callbacks suppressed
[  129.676884][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  129.721984][ T9022] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.829'.
[  129.853407][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.832'.
[  129.912441][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.832'.
[  129.915397][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.832'.
[  130.101048][ T9044] lo speed is unknown, defaulting to 1000
[  130.104770][ T9044] lo speed is unknown, defaulting to 1000
[  130.210772][ T9051] netlink: 48 bytes leftover after parsing attributes in process `syz.0.835'.
[  130.221554][ T9051] bond2: (slave veth3): Releasing active interface
[  130.231984][ T9051] bond3: (slave geneve3): Releasing active interface
[  130.234932][ T9051] bond3: (slave geneve3): the permanent HWaddr of slave - ca:7d:fe:1a:ce:65 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  130.241614][ T9051] bond3: (slave ip6gretap1): making interface the new active one
[  130.252293][ T9051] bond3: (slave ip6gretap1): Releasing active interface
[  130.488749][ T9058] netlink: 'syz.1.838': attribute type 83 has an invalid length.
[  130.598955][ T9062] lo speed is unknown, defaulting to 1000
[  130.607618][ T9062] lo speed is unknown, defaulting to 1000
[  130.699836][ T9068] netlink: 48 bytes leftover after parsing attributes in process `syz.1.840'.
[  130.741084][ T9068] netlink: 14 bytes leftover after parsing attributes in process `syz.1.840'.
[  130.979841][ T9078] ksmbd: Unknown IPC event: 3, ignore.
[  131.109329][ T9082] bond0: (slave batadv0): Releasing backup interface
[  131.128632][ T9082] bond0: (slave 1@): Releasing backup interface
[  131.133874][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'.
[  131.157928][ T9082] bond0: (slave bond_slave_1): Releasing backup interface
[  131.204879][ T9082] team0: Port device team_slave_0 removed
[  131.220209][ T9082] team0: Port device team_slave_1 removed
[  131.223730][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.227816][ T9082] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.257555][ T9082] team0: Port device bond1 removed
[  131.267276][  T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.375903][ T9083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'.
[  131.519194][ T9099] xt_l2tp: v2 tid > 0xffff: 4294967295
[  131.802258][ T9112] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  131.805185][ T9112] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  131.855120][ T9122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.865113][ T9124] netlink: 'syz.0.858': attribute type 83 has an invalid length.
[  131.917514][ T9129] openvswitch: netlink: Tunnel attr 13 has unexpected len 1 expected 16
[  131.918218][ T9127] x_tables: duplicate entry at hook 1
[  131.936500][ T8700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.032566][ T9133] block nbd2: NBD_DISCONNECT
[  132.323534][ T9151] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  132.344990][ T9151] 8021q: adding VLAN 0 to HW filter on device bond10
[  132.422241][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.712160][ T9169] netlink: 'syz.1.869': attribute type 13 has an invalid length.
[  132.749992][ T9168] lo speed is unknown, defaulting to 1000
[  132.754147][ T9168] lo speed is unknown, defaulting to 1000
[  132.978250][ T9167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.120692][ T9173] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  133.124388][ T9173] gretap1: entered promiscuous mode
[  133.126167][ T9173] gretap1: entered allmulticast mode
[  133.809457][ T9198] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.865133][ T9198] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.959125][ T9198] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.007574][ T9198] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.093935][ T9198] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.105790][ T9198] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.122308][ T9198] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.137391][ T9198] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.158537][ T9217] netlink: 'syz.0.881': attribute type 1 has an invalid length.
[  134.180292][ T9217] 8021q: adding VLAN 0 to HW filter on device bond11
[  134.197678][ T9217] 8021q: adding VLAN 0 to HW filter on device bond11
[  134.200088][ T9217] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  134.204520][ T9217] bond11: (slave vxcan1): Error -95 calling set_mac_address
[  134.241967][ T9222] bond11: (slave ip6gretap0): making interface the new active one
[  134.245143][ T9222] bond11: (slave ip6gretap0): Enslaving as an active interface with an up link
[  134.255533][ T9222] bond11: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of ip6gretap0
[  134.305949][ T9228] netlink: 'syz.2.884': attribute type 1 has an invalid length.
[  134.397039][ T9236] xt_CT: No such helper "snmp"
[  134.418079][ T9236] xt_CT: No such helper "snmp"
[  134.472633][ T9247] C: renamed from lo
[  134.476700][ T9247] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  134.632497][ T9259] netlink: 'syz.0.892': attribute type 1 has an invalid length.
[  134.648682][ T9259] 8021q: adding VLAN 0 to HW filter on device bond12
[  134.673390][ T9259] 8021q: adding VLAN 0 to HW filter on device bond12
[  134.676956][ T9259] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  134.682536][ T9259] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  134.709576][ T9266] bond11: (slave ip6gretap0): Releasing active interface
[  134.711317][ T9268] No such timeout policy "syz0"
[  134.722009][ T9266] bond12: (slave ip6gretap0): making interface the new active one
[  134.725779][ T9266] bond12: (slave ip6gretap0): Enslaving as an active interface with an up link
[  134.731991][ T9269] __nla_validate_parse: 13 callbacks suppressed
[  134.732003][ T9269] netlink: 176 bytes leftover after parsing attributes in process `syz.2.894'.
[  134.752174][ T9259] bond12: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of ip6gretap0
[  134.884396][ T9279] netlink: 248 bytes leftover after parsing attributes in process `syz.2.897'.
[  135.047023][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'.
[  135.089523][ T9299] netlink: 'syz.0.903': attribute type 1 has an invalid length.
[  135.136104][ T9299] 8021q: adding VLAN 0 to HW filter on device bond13
[  135.168582][ T9299] 8021q: adding VLAN 0 to HW filter on device bond13
[  135.171421][ T9299] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  135.175617][ T9299] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  135.209010][ T9310] bond12: (slave ip6gretap0): Releasing active interface
[  135.229645][ T9310] bond13: (slave ip6gretap0): making interface the new active one
[  135.236996][ T9310] bond13: (slave ip6gretap0): Enslaving as an active interface with an up link
[  135.241939][ T9312] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  135.261940][ T9299] bond13: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of ip6gretap0
[  135.442932][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'.
[  135.653911][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'.
[  135.657871][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'.
[  136.062026][ T9358] netlink: 'syz.0.918': attribute type 1 has an invalid length.
[  136.145507][ T9358] 8021q: adding VLAN 0 to HW filter on device bond14
[  136.230668][ T9360] 8021q: adding VLAN 0 to HW filter on device bond14
[  136.234346][ T9360] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address
[  136.238936][ T9360] bond14: (slave vxcan1): Error -95 calling set_mac_address
[  136.255576][ T9358] bond13: (slave ip6gretap0): Releasing active interface
[  136.293327][ T9358] bond14: (slave ip6gretap0): making interface the new active one
[  136.296096][ T9358] bond14: (slave ip6gretap0): Enslaving as an active interface with an up link
[  136.306824][ T9361] bond14: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of ip6gretap0
[  136.489535][ T9366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.920'.
[  136.539687][ T9364] netlink: 14 bytes leftover after parsing attributes in process `syz.1.919'.
[  136.542855][ T9364] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode
[  136.631716][ T9377] x_tables: duplicate underflow at hook 2
[  136.872162][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.925'.
[  136.911375][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.928'.
[  137.055241][ T9410] pimreg: entered allmulticast mode
[  137.172123][ T9422] raw_sendmsg: syz.1.932 forgot to set AF_INET. Fix it!
[  137.326775][ T9427] netlink: 'syz.1.933': attribute type 25 has an invalid length.
[  137.575814][ T9454] tipc: Started in network mode
[  137.578593][ T9454] tipc: Node identity ac14140f, cluster identity 4711
[  137.581064][ T9454] tipc: New replicast peer: 255.255.255.255
[  137.583888][ T9454] tipc: Enabled bearer <udp:syz2>, priority 6
[  137.586042][ T9453] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  137.626163][ T9456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.902254][ T9474] netlink: 'syz.0.951': attribute type 32 has an invalid length.
[  138.043130][ T9485] sctp: [Deprecated]: syz.1.954 (pid 9485) Use of int in max_burst socket option.
[  138.043130][ T9485] Use struct sctp_assoc_value instead
[  138.108776][ T9479] xt_CT: No such helper "pptp"
[  138.148503][ T9479] xt_CT: No such helper "pptp"
[  138.182225][ T9479] xt_CT: No such helper "pptp"
[  138.215661][ T9479] xt_CT: No such helper "pptp"
[  138.254761][ T9479] xt_CT: No such helper "pptp"
[  138.280568][ T9479] xt_CT: No such helper "pptp"
[  138.311200][ T9479] xt_CT: No such helper "pptp"
[  138.319034][ T9506] syzkaller1: entered promiscuous mode
[  138.326970][ T9506] syzkaller1: entered allmulticast mode
[  138.350979][ T9479] xt_CT: No such helper "pptp"
[  138.403518][ T9507] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  138.441659][ T9513] syzkaller1: entered promiscuous mode
[  138.443379][ T9513] syzkaller1: entered allmulticast mode
[  138.447003][ T9513] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40
[  138.606576][ T8699] tipc: Node number set to 2886997007
[  138.855347][ T9551] netlink: 'syz.1.966': attribute type 1 has an invalid length.
[  138.955721][ T9554] netlink: 'syz.0.967': attribute type 4 has an invalid length.
[  139.055118][ T9558] lo speed is unknown, defaulting to 1000
[  139.067013][ T9558] lo speed is unknown, defaulting to 1000
[  139.067916][ T9560] netlink: 'syz.1.968': attribute type 29 has an invalid length.
[  139.175681][ T9568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.230193][ T8699] IPVS: starting estimator thread 0...
[  139.264429][ T9570] lo speed is unknown, defaulting to 1000
[  139.288800][ T9570] lo speed is unknown, defaulting to 1000
[  139.336433][ T9572] IPVS: using max 61 ests per chain, 146400 per kthread
[  139.512040][ T9578] lo speed is unknown, defaulting to 1000
[  139.515187][ T9578] lo speed is unknown, defaulting to 1000
[  139.788139][ T9584] __nla_validate_parse: 50 callbacks suppressed
[  139.788154][ T9584] netlink: 32 bytes leftover after parsing attributes in process `syz.2.974'.
[  139.917266][ T9587] tipc: Resetting bearer <eth:syzkaller0>
[  139.919527][ T9587] tipc: Resetting bearer <eth:syzkaller0>
[  140.299513][ T9584] tipc: Resetting bearer <eth:syzkaller0>
[  140.314724][ T9584] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.318403][ T9584] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.321775][ T9584] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.325035][ T9584] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.368156][ T9584] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.371516][ T9584] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.374899][ T9584] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.379401][ T9584] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.577661][ T9600] validate_nla: 1 callbacks suppressed
[  140.577676][ T9600] netlink: 'syz.2.976': attribute type 1 has an invalid length.
[  140.596150][ T9600] 8021q: adding VLAN 0 to HW filter on device bond14
[  140.621323][ T9600] veth5: entered promiscuous mode
[  140.630064][ T9600] bond14: (slave veth5): Enslaving as an active interface with a down link
[  140.638030][ T9600] erspan0: entered allmulticast mode
[  140.643282][ T9600] bond14: (slave erspan0): making interface the new active one
[  140.648788][ T9600] erspan0: entered promiscuous mode
[  140.651000][ T9600] bond14: (slave erspan0): Enslaving as an active interface with an up link
[  140.809826][ T9613] netlink: 'syz.2.980': attribute type 4 has an invalid length.
[  140.849620][ T9616] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  140.874229][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'.
[  141.804691][ T9643] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3045008590/3045008592
[  141.821759][ T9643] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3045008590/3045008592
[  141.825464][ T9643] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3045008590/3045008592
[  141.851620][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'.
[  141.900343][ T9650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.987504][ T9658] netlink: 'syz.2.991': attribute type 1 has an invalid length.
[  142.022459][ T9658] bond15: entered promiscuous mode
[  142.024728][ T9658] 8021q: adding VLAN 0 to HW filter on device bond15
[  142.071810][ T9658] 8021q: adding VLAN 0 to HW filter on device bond15
[  142.074773][ T9658] bond15: (slave vcan0): The slave device specified does not support setting the MAC address
[  142.078254][ T9658] bond15: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  142.083823][ T9658] bond15: (slave vcan0): making interface the new active one
[  142.087101][ T9658] vcan0: entered promiscuous mode
[  142.089722][ T9658] bond15: (slave vcan0): Enslaving as an active interface with an up link
[  142.177432][ T9667] bridge6: entered promiscuous mode
[  142.280614][ T9672] lo speed is unknown, defaulting to 1000
[  142.284430][ T9672] lo speed is unknown, defaulting to 1000
[  142.534693][ T9688] lo speed is unknown, defaulting to 1000
[  142.612301][ T9688] lo speed is unknown, defaulting to 1000
[  143.281096][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1005'.
[  143.410550][ T9725] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.413423][ T9725] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.416510][ T9725] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.419162][ T9725] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.422011][ T9725] geneve5: entered promiscuous mode
[  143.455743][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1009'.
[  143.466679][ T9727] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1009'.
[  143.473329][ T9728] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1009'.
[  144.148472][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'.
[  144.165874][ T9741] smc: removing ib device syz0
[  144.303468][ T9744] netlink: 'syz.1.1014': attribute type 13 has an invalid length.
[  144.306026][ T9744] netlink: 'syz.1.1014': attribute type 17 has an invalid length.
[  144.313013][ T9744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.388333][ T9744] lo speed is unknown, defaulting to 1000
[  144.777207][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'.
[  144.778525][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'.
[  144.817241][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'.
[  144.891133][ T9758] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1019'.
[  145.069215][ T9768] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1022'.
[  145.072623][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  145.113167][ T9768] netlink: 'syz.0.1022': attribute type 10 has an invalid length.
[  145.118094][ T9768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1022'.
[  145.121725][ T9768] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  145.236197][ T9785] netlink: 'syz.2.1024': attribute type 13 has an invalid length.
[  145.240568][ T9785] netlink: 'syz.2.1024': attribute type 17 has an invalid length.
[  145.268923][ T9785] erspan0: left allmulticast mode
[  145.294769][ T9785] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.309207][ T9785] 8021q: adding VLAN 0 to HW filter on device team0
[  145.318700][ T9790] x_tables: duplicate underflow at hook 2
[  145.326453][ T9785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.362501][ T9775] lo speed is unknown, defaulting to 1000
[  145.421289][ T9779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1024'.
[  145.501151][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'.
[  145.540643][ T9805] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  145.591915][ T9812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1028'.
[  145.596004][ T9811] netlink: 'syz.2.1034': attribute type 1 has an invalid length.
[  145.596766][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'.
[  145.610577][ T9811] netlink: 'syz.2.1034': attribute type 8 has an invalid length.
[  145.618399][ T9811] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1034'.
[  145.624398][ T9811] 8021q: adding VLAN 0 to HW filter on device bond16
[  145.645913][ T9811] veth7: entered promiscuous mode
[  145.650763][ T9811] bond16: (slave veth7): Enslaving as a backup interface with a down link
[  145.909486][ T9838] IPVS: Error joining to the multicast group
[  145.993639][ T9842] xt_l2tp: v2 doesn't support IP mode
[  146.004086][ T9845] macvlan0: entered allmulticast mode
[  146.006605][ T9845] veth1_vlan: entered allmulticast mode
[  146.170370][ T9854] lo speed is unknown, defaulting to 1000
[  146.349542][ T9874] siw: device registration error -23
[  146.436572][ T9877] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  146.440893][ T9877] syzkaller1: entered allmulticast mode
[  146.545387][ T9888] bridge_slave_0: entered allmulticast mode
[  147.216969][   T40] tipc: Resetting bearer <eth:syzkaller0>
[  147.442264][ T9909] netlink: 'syz.0.1062': attribute type 1 has an invalid length.
[  147.468837][ T9909] 8021q: adding VLAN 0 to HW filter on device bond15
[  147.472355][ T9907] pim6reg1: entered promiscuous mode
[  147.474538][ T9907] pim6reg1: entered allmulticast mode
[  147.499651][ T9909] 8021q: adding VLAN 0 to HW filter on device bond15
[  147.502960][ T9909] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address
[  147.509823][ T9909] bond15: (slave vxcan1): Error -95 calling set_mac_address
[  147.550669][ T9917] bond14: (slave ip6gretap0): Releasing active interface
[  147.570789][ T9917] bond15: (slave ip6gretap0): making interface the new active one
[  147.574731][ T9917] bond15: (slave ip6gretap0): Enslaving as an active interface with an up link
[  147.584347][ T9919] syzkaller0: left promiscuous mode
[  147.590853][ T9919] syzkaller0: left allmulticast mode
[  147.593724][ T9919] tipc: Resetting bearer <eth:syzkaller0>
[  147.606184][ T9909] bond15: (slave vlan3): the slave hw address is in use by the bond; giving it the hw address of ip6gretap0
[  147.749928][ T9924] team0: Port device gtp1 added
[  147.832697][ T9933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.377566][ T9969] netlink: 'syz.1.1075': attribute type 1 has an invalid length.
[  148.802424][ T9970] bond0 (unregistering): Released all slaves
[  148.872076][ T9969] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  149.084651][ T9987] xt_nfacct: accounting object `syz0' does not exists
[  149.121734][ T9989] netlink: 'syz.2.1079': attribute type 1 has an invalid length.
[  149.362665][T10003] netlink: 'syz.2.1083': attribute type 4 has an invalid length.
[  149.365802][T10003] : renamed from bond0 (while UP)
[  149.727184][T10005] netlink: 'syz.0.1084': attribute type 1 has an invalid length.
[  149.784158][T10005] 8021q: adding VLAN 0 to HW filter on device bond16
[  149.860189][T10009] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  149.878323][T10009] syzkaller0: entered promiscuous mode
[  149.880529][T10009] syzkaller0: entered allmulticast mode
[  149.882708][T10009] tipc: Resetting bearer <eth:syzkaller0>
[  149.889368][T10009] tipc: Resetting bearer <eth:syzkaller0>
[  150.024158][T10016] __nla_validate_parse: 23 callbacks suppressed
[  150.024175][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1088'.
[  150.095743][T10018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1090'.
[  150.100957][T10018] netlink: 'syz.0.1090': attribute type 26 has an invalid length.
[  150.143031][T10020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1091'.
[  150.286191][T10028] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.291578][T10028] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  150.302170][T10028] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  150.305835][T10028] tipc: Resetting bearer <eth:syzkaller0>
[  150.317615][T10028] tipc: Resetting bearer <eth:syzkaller0>
[  150.338579][T10026] netlink: 'syz.2.1092': attribute type 10 has an invalid length.
[  150.365094][T10026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.392322][T10026] : (slave batadv0): Enslaving as an active interface with an up link
[  150.481946][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'.
[  150.484357][T10038] tipc: Resetting bearer <eth:syzkaller0>
[  150.500632][T10038] tipc: Resetting bearer <eth:syzkaller0>
[  150.568838][T10047] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.578802][T10047] D: renamed from syzkaller0 (while UP)
[  150.591707][T10047] tipc: Disabling bearer <eth:syzkaller0>
[  150.601975][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'.
[  150.605713][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'.
[  150.656709][T10064] netlink: 'syz.2.1104': attribute type 6 has an invalid length.
[  150.660038][T10064] netlink: 'syz.2.1104': attribute type 7 has an invalid length.
[  150.663611][T10064] netlink: 'syz.2.1104': attribute type 8 has an invalid length.
[  150.933674][T10082] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1111'.
[  150.937989][T10082] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1111'.
[  151.147535][T10101] netlink: 'syz.0.1116': attribute type 13 has an invalid length.
[  151.149948][T10101] netlink: 'syz.0.1116': attribute type 17 has an invalid length.
[  151.154119][T10101] gretap0: left promiscuous mode
[  151.167554][T10101] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.173752][T10101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.179077][T10103] netlink: 'syz.2.1117': attribute type 1 has an invalid length.
[  151.182910][   T47] lo speed is unknown, defaulting to 1000
[  151.187929][   T47] syz1: Port: 1 Link ACTIVE
[  151.212578][T10103] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.239016][T10103] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.242436][T10103] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address
[  151.249016][T10103] bond0: (slave vxcan5): Error -95 calling set_mac_address
[  151.271507][T10105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.275597][T10101] lo speed is unknown, defaulting to 1000
[  151.336165][T10105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.402961][T10101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.587307][T10118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1121'.
[  151.672098][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'.
[  151.678613][T10126] trusted_key: syz.2.1125 sent an empty control message without MSG_MORE.
[  151.698300][T10128] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  151.720144][T10130] openvswitch: netlink: IP tunnel TTL not specified.
[  151.738762][T10132] dvmrp0: entered allmulticast mode
[  151.804180][T10138] netlink: 'syz.2.1131': attribute type 1 has an invalid length.
[  151.826105][T10138] 8021q: adding VLAN 0 to HW filter on device bond17
[  151.836131][T10138] ipvlan0: entered allmulticast mode
[  151.838133][T10138] bond17: entered allmulticast mode
[  151.849570][T10138] bond17: (slave gretap2): making interface the new active one
[  151.852070][T10138] gretap2: entered allmulticast mode
[  151.854571][T10138] 
[  151.855392][T10138] ============================================
[  151.857321][T10138] WARNING: possible recursive locking detected
[  151.859241][T10138] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[  151.862321][T10138] --------------------------------------------
[  151.864815][T10138] syz.2.1131/10138 is trying to acquire lock:
[  151.866922][T10138] ffff88801faf9158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  151.870660][T10138] 
[  151.870660][T10138] but task is already holding lock:
[  151.873487][T10138] ffff888106077558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  151.877269][T10138] 
[  151.877269][T10138] other info that might help us debug this:
[  151.880414][T10138]  Possible unsafe locking scenario:
[  151.880414][T10138] 
[  151.883269][T10138]        CPU0
[  151.884560][T10138]        ----
[  151.885820][T10138]   lock(&qdisc_xmit_lock_key#4);
[  151.887783][T10138]   lock(&qdisc_xmit_lock_key#4);
[  151.889821][T10138] 
[  151.889821][T10138]  *** DEADLOCK ***
[  151.889821][T10138] 
[  151.892407][T10138]  May be due to missing lock nesting notation
[  151.892407][T10138] 
[  151.894961][T10138] 8 locks held by syz.2.1131/10138:
[  151.896491][T10138]  #0: ffffffff8fa376e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  151.899402][T10138]  #1: ffffffff8f51bb48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  151.902726][T10138]  #2: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  151.906523][T10138]  #3: ffff88810fe02258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  151.910974][T10138]  #4: ffff888106077558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  151.915086][T10138]  #5: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  151.918361][T10138]  #6: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  151.921437][T10138]  #7: ffff88812525d258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  151.925256][T10138] 
[  151.925256][T10138] stack backtrace:
[  151.927099][T10138] CPU: 1 UID: 0 PID: 10138 Comm: syz.2.1131 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  151.927112][T10138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.927119][T10138] Call Trace:
[  151.927126][T10138]  <TASK>
[  151.927146][T10138]  dump_stack_lvl+0x189/0x250
[  151.927161][T10138]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.927171][T10138]  ? __pfx__printk+0x10/0x10
[  151.927185][T10138]  ? print_lock_name+0xde/0x100
[  151.927197][T10138]  print_deadlock_bug+0x28b/0x2a0
[  151.927208][T10138]  validate_chain+0x1a3f/0x2140
[  151.927218][T10138]  ? validate_xmit_xfrm+0xbf/0x1130
[  151.927229][T10138]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  151.927237][T10138]  ? unwind_next_frame+0xa5/0x2390
[  151.927249][T10138]  __lock_acquire+0xab9/0xd20
[  151.927260][T10138]  ? sch_direct_xmit+0x153/0x4b0
[  151.927270][T10138]  lock_acquire+0x120/0x360
[  151.927277][T10138]  ? sch_direct_xmit+0x153/0x4b0
[  151.927289][T10138]  _raw_spin_lock+0x2e/0x40
[  151.927304][T10138]  ? sch_direct_xmit+0x153/0x4b0
[  151.927313][T10138]  sch_direct_xmit+0x153/0x4b0
[  151.927324][T10138]  ? __pfx_sch_direct_xmit+0x10/0x10
[  151.927336][T10138]  __dev_queue_xmit+0x17b6/0x3a70
[  151.927347][T10138]  ? __dev_queue_xmit+0x27e/0x3a70
[  151.927357][T10138]  ? neigh_resolve_output+0x438/0x750
[  151.927367][T10138]  ? __pfx___dev_queue_xmit+0x10/0x10
[  151.927375][T10138]  ? read_seqbegin+0x122/0x250
[  151.927384][T10138]  ? neigh_resolve_output+0x438/0x750
[  151.927393][T10138]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.927401][T10138]  ? read_seqbegin+0x1ac/0x250
[  151.927410][T10138]  ? __pfx_read_seqbegin+0x10/0x10
[  151.927419][T10138]  ? __local_bh_enable_ip+0x12d/0x1c0
[  151.927428][T10138]  ? eth_header+0x11b/0x200
[  151.927439][T10138]  ? __asan_memcpy+0x40/0x70
[  151.927450][T10138]  ? eth_header+0x11b/0x200
[  151.927462][T10138]  ? __pfx_eth_header+0x10/0x10
[  151.927473][T10138]  ? neigh_resolve_output+0x624/0x750
[  151.927485][T10138]  ip_finish_output2+0xd40/0x1160
[  151.927496][T10138]  ? ip_skb_dst_mtu+0x147/0xc50
[  151.927505][T10138]  ? ip_finish_output2+0x452/0x1160
[  151.927513][T10138]  ? __pfx_ip_finish_output2+0x10/0x10
[  151.927522][T10138]  ? ip_skb_dst_mtu+0x147/0xc50
[  151.927529][T10138]  ? ip_skb_dst_mtu+0x147/0xc50
[  151.927537][T10138]  ? ip_skb_dst_mtu+0x970/0xc50
[  151.927545][T10138]  ? ip_finish_output+0x33a/0x3f0
[  151.927553][T10138]  iptunnel_xmit+0x571/0xa00
[  151.927566][T10138]  ip_tunnel_xmit+0x1c3c/0x2380
[  151.927580][T10138]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  151.927588][T10138]  ? gre_build_header+0x3fd/0xa40
[  151.927597][T10138]  ? __pfx_gre_build_header+0x10/0x10
[  151.927606][T10138]  gre_tap_xmit+0x590/0x7a0
[  151.927619][T10138]  ? __pfx_gre_tap_xmit+0x10/0x10
[  151.927654][T10138]  ? __lock_acquire+0xab9/0xd20
[  151.927666][T10138]  dev_hard_start_xmit+0x2d7/0x830
[  151.927678][T10138]  sch_direct_xmit+0x241/0x4b0
[  151.927689][T10138]  ? __pfx_sch_direct_xmit+0x10/0x10
[  151.927698][T10138]  ? netlink_rcv_skb+0x208/0x470
[  151.927712][T10138]  __dev_queue_xmit+0x17b6/0x3a70
[  151.927722][T10138]  ? __dev_queue_xmit+0x27e/0x3a70
[  151.927732][T10138]  ? __pfx___dev_queue_xmit+0x10/0x10
[  151.927740][T10138]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  151.927751][T10138]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  151.927763][T10138]  ? __build_skb_around+0x257/0x3e0
[  151.927775][T10138]  ? __alloc_skb+0x1bc/0x2d0
[  151.927785][T10138]  ? __netdev_alloc_skb+0x119/0x970
[  151.927796][T10138]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  151.927807][T10138]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  151.927819][T10138]  ? alb_send_lp_vid+0x139/0x510
[  151.927830][T10138]  alb_send_lp_vid+0x324/0x510
[  151.927839][T10138]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  151.927849][T10138]  ? __pfx_alb_set_slave_mac_addr+0x10/0x10
[  151.927859][T10138]  alb_send_learning_packets+0x10d/0x2c0
[  151.927868][T10138]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  151.927877][T10138]  ? alb_swap_mac_addr+0x221/0x320
[  151.927885][T10138]  ? dev_addr_check+0x20/0x250
[  151.927897][T10138]  alb_fasten_mac_swap+0x665/0xfa0
[  151.927908][T10138]  bond_alb_handle_active_change+0xc10/0xec0
[  151.927918][T10138]  ? __pfx_bond_alb_handle_active_change+0x10/0x10
[  151.927930][T10138]  ? __local_bh_enable_ip+0x12d/0x1c0
[  151.927941][T10138]  bond_change_active_slave+0x1048/0x3770
[  151.927953][T10138]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  151.927961][T10138]  ? __pfx_bond_change_active_slave+0x10/0x10
[  151.927968][T10138]  ? __queue_work+0x103/0xfe0
[  151.927979][T10138]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  151.927989][T10138]  ? mod_delayed_work_on+0x128/0x200
[  151.927998][T10138]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.928007][T10138]  ? mod_delayed_work_on+0x1ac/0x200
[  151.928016][T10138]  ? netdev_change_features+0x8d/0xd0
[  151.928026][T10138]  bond_select_active_slave+0x8e2/0xd00
[  151.928036][T10138]  ? __pfx_bond_select_active_slave+0x10/0x10
[  151.928044][T10138]  ? __pfx_bond_set_carrier+0x10/0x10
[  151.928051][T10138]  ? netdev_is_rx_handler_busy+0x6e/0x140
[  151.928059][T10138]  ? __pfx_bond_handle_frame+0x10/0x10
[  151.928068][T10138]  bond_enslave+0x229c/0x3a20
[  151.928088][T10138]  ? __pfx_bond_enslave+0x10/0x10
[  151.928099][T10138]  ? __pfx___dev_notify_flags+0x10/0x10
[  151.928112][T10138]  ? mutex_is_locked+0x17/0x50
[  151.928123][T10138]  do_set_master+0x533/0x6d0
[  151.928138][T10138]  rtnl_newlink_create+0x677/0xb00
[  151.928151][T10138]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  151.928162][T10138]  ? rtnl_newlink+0x8db/0x1c70
[  151.928172][T10138]  ? __pfx___mutex_lock+0x10/0x10
[  151.928182][T10138]  ? ns_capable+0x8a/0xf0
[  151.928192][T10138]  rtnl_newlink+0x16d6/0x1c70
[  151.928202][T10138]  ? netlink_sendmsg+0x805/0xb30
[  151.928214][T10138]  ? __pfx_rtnl_newlink+0x10/0x10
[  151.928228][T10138]  ? kasan_quarantine_put+0xdd/0x220
[  151.928238][T10138]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.928247][T10138]  ? nlmon_xmit+0xb0/0x100
[  151.928257][T10138]  ? kmem_cache_free+0x18f/0x400
[  151.928268][T10138]  ? __local_bh_enable_ip+0x12d/0x1c0
[  151.928277][T10138]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.928285][T10138]  ? __local_bh_enable_ip+0x12d/0x1c0
[  151.928293][T10138]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  151.928302][T10138]  ? __dev_queue_xmit+0x27e/0x3a70
[  151.928313][T10138]  ? __lock_acquire+0xab9/0xd20
[  151.928325][T10138]  ? __pfx_rtnl_newlink+0x10/0x10
[  151.928334][T10138]  rtnetlink_rcv_msg+0x7cf/0xb70
[  151.928345][T10138]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  151.928354][T10138]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  151.928363][T10138]  ? ref_tracker_free+0x63a/0x7d0
[  151.928372][T10138]  ? __copy_skb_header+0xa7/0x550
[  151.928384][T10138]  ? __pfx_ref_tracker_free+0x10/0x10
[  151.928392][T10138]  ? __skb_clone+0x63/0x7a0
[  151.928400][T10138]  netlink_rcv_skb+0x208/0x470
[  151.928411][T10138]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  151.928421][T10138]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  151.928434][T10138]  ? netlink_deliver_tap+0x2e/0x1b0
[  151.928444][T10138]  ? netlink_deliver_tap+0x2e/0x1b0
[  151.928455][T10138]  netlink_unicast+0x75c/0x8e0
[  151.928467][T10138]  netlink_sendmsg+0x805/0xb30
[  151.928480][T10138]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.928491][T10138]  ? aa_sock_msg_perm+0x94/0x160
[  151.928500][T10138]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  151.928510][T10138]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.928520][T10138]  __sock_sendmsg+0x21c/0x270
[  151.928530][T10138]  ____sys_sendmsg+0x505/0x830
[  151.928543][T10138]  ? __pfx_____sys_sendmsg+0x10/0x10
[  151.928556][T10138]  ? import_iovec+0x74/0xa0
[  151.928567][T10138]  ___sys_sendmsg+0x21f/0x2a0
[  151.928579][T10138]  ? __pfx____sys_sendmsg+0x10/0x10
[  151.928597][T10138]  ? __fget_files+0x2a/0x420
[  151.928604][T10138]  ? __fget_files+0x3a0/0x420
[  151.928613][T10138]  __x64_sys_sendmsg+0x19b/0x260
[  151.928625][T10138]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  151.928666][T10138]  ? rcu_is_watching+0x15/0xb0
[  151.928678][T10138]  ? do_syscall_64+0xbe/0x3b0
[  151.928689][T10138]  do_syscall_64+0xfa/0x3b0
[  151.928698][T10138]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.928706][T10138]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.928715][T10138]  ? exc_page_fault+0x9f/0xf0
[  151.928723][T10138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.928732][T10138] RIP: 0033:0x7f80b958e929
[  151.928744][T10138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.928766][T10138] RSP: 002b:00007f80ba336038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  151.928776][T10138] RAX: ffffffffffffffda RBX: 00007f80b97b5fa0 RCX: 00007f80b958e929
[  151.928782][T10138] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003
[  151.928788][T10138] RBP: 00007f80b9610ca1 R08: 0000000000000000 R09: 0000000000000000
[  151.928793][T10138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.928799][T10138] R13: 0000000000000000 R14: 00007f80b97b5fa0 R15: 00007fffd8f63678
[  151.928808][T10138]  </TASK>
[  152.276853][T10138] bond17: (slave gretap2): Enslaving as an active interface with an up link
[  152.357077][ T5866] erspan0: left promiscuous mode

VM DIAGNOSIS:
07:46:44  Registers:
info registers vcpu 0

CPU#0
RAX=aa2cfe90b2c42d00 RBX=ffffffff81976c78 RCX=aa2cfe90b2c42d00 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d64d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbce57e0440 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=7269642065676e61 68632074276e6163 XMM01=2e36312e3627206f 742079726f746365
XMM02=2d72656c6c616b7a 79732d3563722d30 XMM03=3866366235333766 39672d3231323030
XMM04=2779747269642d37 3761386636623533 XMM05=376639672d323132 30302d72656c6c61
XMM06=6b7a79732d356372 2d302e36312e3627 XMM07=206f742079726f74 6365726964206567
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000021efc RDI=0000000000021efd RBP=00000000000003f8 RSP=ffffc9000311cdb0
R8 =ffff888107a60237 R9 =1ffff11020f4c046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee887 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f80ba3366c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000110abc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f80b9611df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
