last executing test programs:

1.090653153s ago: executing program 1 (id=1849):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
poll(0x0, 0x0, 0x7)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @remote, 0x6}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x1, '\x00', [@padn, @generic={0x9}, @ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x16}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x33, 0x4, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x41}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x78}}], 0x2, 0x4040005)
r3 = socket$inet6(0xa, 0x3, 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x184}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r5, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x8, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x1, 0x0, 0x3}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000400, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0xfd, 0xfffffffa, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x80007f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xffdffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x1, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x85, 0x8, 0xba, 0x2, 0xc9, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x20000001, 0x2, 0xf, 0x24b9, 0x39, 0xe01, 0x1, 0x6430, 0xb, 0x8, 0x4000, 0x3, 0x7eb6, 0x3, 0x0, 0x203, 0x4, 0x9, 0xff, 0xa, 0x6, 0xf9, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0xc, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0xfffffffe, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0xc93b7bc0, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff}}, 0xe8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r1, 0x1ad72f7)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

791.196456ms ago: executing program 2 (id=1850):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0xfffffffffffffd76, 0x19, 0x115, 0x70bd2c, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x3, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94) (async)
close(r3) (async)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0xfffffffffffffd76, 0x19, 0x115, 0x70bd2c, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x3, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)

687.306649ms ago: executing program 2 (id=1853):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180))
r1 = socket(0x11, 0x80a, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1)
openat$cgroup_ro(r0, &(0x7f0000000400)='cpuset.effective_mems\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="b17f313e", @ANYRES16=r2, @ANYBLOB="00022abd7000ffdbdf252e0000000c009900ff7f00004a0000000500190107000000"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r3, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
shutdown(0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r4})
close(0x3)
recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/82, 0x52}, 0x1}], 0x1, 0x160, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000140)={'ip6_vti0\x00', {0x2, 0x0, @dev}})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0xfeff, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

487.820923ms ago: executing program 2 (id=1855):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000096482d36aae5a4c15d0c100053d7000000000000000000000000000000000000000000000000fe8000000000000000aa00"/68, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c0000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1}, 0x20040051)
setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000001c0)=0x6, 0x4)

479.821286ms ago: executing program 2 (id=1857):
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @none}, &(0x7f0000000640)=0xe, 0x80000) (async)
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x0, @none}, &(0x7f0000000640)=0xe, 0x80000)
bind$bt_l2cap(r0, &(0x7f0000000680)={0x1f, 0x2, @none, 0x1, 0x1}, 0xe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x9}, 0x20)
socket(0x40000000015, 0x5, 0x0) (async)
r2 = socket(0x40000000015, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000006c0)={0x7, 'netdevsim0\x00', {0x7}, 0x2})
getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f00000002c0)={@private, @remote, @broadcast}, &(0x7f0000000340)=0xc) (async)
getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f00000002c0)={@private, @remote, @broadcast}, &(0x7f0000000340)=0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={<r4=>r1, 0x1, 0x9, 0x3})
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x400c000}, 0x48085)
sendto$l2tp6(r2, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000190000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000190000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000800)="ff", 0x1}], 0x1}}], 0x2, 0x931766f6119eed40) (async)
sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000800)="ff", 0x1}], 0x1}}], 0x2, 0x931766f6119eed40)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x2, 0xad2, 0x6, 0x3ff}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4004001) (async)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x2, 0xad2, 0x6, 0x3ff}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4004001)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f00000003c0), 0x4)
setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4)
sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
socket$inet(0x10, 0x3, 0x0) (async)
r8 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x22}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x400}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0)

430.134824ms ago: executing program 2 (id=1859):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x0, @multicast1}], 0x20)
sendmmsg$inet6(r6, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) (async)
sendmmsg$inet6(r6, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040)
socket$inet(0x2, 0x80000, 0x9)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae00000800010002000000080003000000000800"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae00000800010002000000080003000000000800"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x39, 0x8, 0x1, 0xb, 0x2}, &(0x7f0000000140)=0x14)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000010900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a01080000000000000000070000000900010073797a30000000000c00170f187a532468ae0001140000001000010000000000000000000084000a"], 0xb0}}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x7}, @TCA_RED_PARMS={0x14, 0x1, {0x4, 0x10001, 0xe11, 0xf, 0x1, 0x5, 0x3}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004)

280.618402ms ago: executing program 2 (id=1862):
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1805}, 0x20000080)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f00000000c0)="20e1b5d4ca774ff66b795ea456d05ae0c6aa", 0x12)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
close(r5)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff}, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6)
ioctl$SIOCSIFHWADDR(r3, 0xff01, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e22, 0x7, @loopback, 0x9}, {0xa, 0x4e21, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd0f2}, 0x1, {[0x4, 0x8bd52, 0x1000, 0x6, 0x9, 0x1, 0x0, 0x378daea3]}}, 0x5c)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000001340)={0x40}, 0x10)
sendmsg$tipc(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'gre0\x00', <r11=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$inet(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc3ea}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0xb8}, 0x40000)
shutdown(r9, 0x2)

230.677365ms ago: executing program 1 (id=1864):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, r4, 0xe1a0b80db4190737, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8091}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

189.98084ms ago: executing program 1 (id=1865):
unshare(0x6020400)
r0 = gettid()
syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00')
unshare(0x2020000)
close(0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x100}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xec1}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffff00}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)
socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r6, 0x28, 0x0, 0x0, &(0x7f0000000300))
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)
unshare(0x400)
r7 = socket$rds(0x15, 0x5, 0x0)
r8 = socket(0x6, 0x1, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r11=>r10, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r11, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0xc700, 0x10}})
setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000680)={@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x2}}, {0x0}, 0x0, 0x42}, 0xa0)

129.471801ms ago: executing program 0 (id=1867):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000001000000000300000018000180110001006574683a6d616376746170300000000081f576b5b101ecd890ffec3333dbd60f44f8b6ecb0a52e6f0e47f2bb104140294f772b19e4a83f1886104f562cf41254e72a1bb699d60767541129210edae2e06b84ad811757a4942db3e8436945ec7700"], 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}]}, 0x24}}, 0x4000040)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

125.264608ms ago: executing program 1 (id=1868):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x14, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f933a3c92b", 0x14}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x8081, 0x760, 0x3, 0x9, {{0x20, 0x4, 0x0, 0x1, 0x80, 0x65, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010102, {[@cipso={0x86, 0x10, 0x3, [{0x3, 0xa, "9ccd4ca312571783"}]}, @generic={0x94, 0xd, "c12aaa807dd99416080b5a"}, @rr={0x7, 0x1b, 0xaa, [@broadcast, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote]}, @timestamp_prespec={0x44, 0x34, 0x88, 0x3, 0x3, [{@multicast1, 0x1c98}, {@rand_addr=0x64010101, 0x8}, {@loopback, 0x1000}, {@loopback, 0x3}, {@empty, 0xffff787f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={<r4=>0x0, @broadcast, @remote}, &(0x7f0000000280)=0xc)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000040)="3137a9b01a51ea893c353c04ccb356341f2d5d9d4c010d6649d3e50eb731aa3a50df10cdfe0c2157088e68bedc9af349b69cbc6795a5f1f1", 0x38}], 0x2, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @remote}}}, @ip_tos_u8={{0x11}}], 0x88}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="64010004", @ANYRES16=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3, 0x2}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)

122.627213ms ago: executing program 0 (id=1869):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a000000000000001800088014000100a432634e00000000870004001048a2f5060007000300000008000500", @ANYRES32=r2, @ANYBLOB="461153b4261d8cc9c176e2b3d45a390f13c24992af8123a7498feb14f0d3c0514ca5f7117f1b636993d94c025b1f6f83fa3d93fda698d3cf387e24399d98e6b7da8607b0bc965046fec01a6c705018585b67763217a3e4f2d977d58db5760e47e975fcb941d006829a8bf9247bbbd01885bf9fb1a5344ffa620e29a28557e1ba2fc7d901aa63f75c32ed4071221d1b5d7f31d5226524f20dba4578e60251fcf19723060235f52436ecef8e58c99a6817bd66c09ac76c2f415cea9ebfd59a8ff731ed4fa7a580a9eb3a2f214c520494095b7a50e8"], 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0)

122.275681ms ago: executing program 1 (id=1870):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
socket$unix(0x1, 0x1, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008050) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008050)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x181200, 0x0)
close(r9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}})
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r12, &(0x7f0000000080)={0x1f, @none, 0xd}, 0xa)

70.555394ms ago: executing program 0 (id=1871):
r0 = socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) (async)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
syz_emit_ethernet(0x22, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0)

70.073591ms ago: executing program 0 (id=1872):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={r2, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}}, &(0x7f0000000300)=0x90)
socket$nl_route(0x10, 0x3, 0x0)
unshare(0x22020400)
unshare(0x2c060000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_gact={0x34, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "42ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e, 0x0, 0x10}, 0x4)
write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3, @ANYRES16=r1, @ANYRES64=0x0], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
writev(r5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r6, 0x2)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES64=r0, @ANYRES8=r4], 0x48)
r8 = socket$inet(0x2b, 0x801, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r9, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x80, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0xa9ac}, &(0x7f0000000300)=0x8)
ioctl$int_in(r8, 0x5452, &(0x7f0000000280)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

9.698683ms ago: executing program 0 (id=1873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801408000200ac1414fd0c0002800500010000000000240002800c00028005000100000000001400018008000100ffffffff08000200ac141400080007400000000035d2cdffe865a167af69000c"], 0x70}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000200070000000900010073797a3000000000240002001400018008000100e000000208000200000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000019440)=[{&(0x7f0000000300)=ANY=[], 0x114}], 0x1}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf2507000000140002000000000000000000000000000000000014000300fe8000000000000000000000000000aa"], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r8, 0xfffff000)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r10 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r10, 0x1, 0x5, &(0x7f0000000440)=""/102400, &(0x7f0000000000)=0x19000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0xd, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x7800, 0xf888, 0x9f, 0x400, {{0x32, 0x4, 0x1, 0x28, 0xc8, 0x65, 0x0, 0xbe, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x78, 0x0, [{0x5, 0xd, "436452deaa1c86453e0621"}, {0x5, 0xb, "19c7db5379d93a1e1b"}, {0x2, 0x12, "4e6a285b8a2e3ce159f95e3fba7b1963"}, {0x6, 0x7, "d1a63ad5ff"}, {0x5, 0x12, "780700000000000000e674364d040300"}, {0x6, 0x9, "6d6e1dbbe21a3d"}, {0x1, 0x12, "cb54ec084462078cdf8a33c8038dec87"}, {0x7, 0x3, "af"}, {0x0, 0x9, "f77c90722493c5"}, {0x2, 0x8, "0fd6949fbdc2"}]}, @ssrr={0x89, 0x23, 0x5b, [@dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, @multicast1, @broadcast, @private=0xa010100, @broadcast, @rand_addr=0x64010101, @empty]}, @generic={0x83, 0x2}, @rr={0x7, 0x17, 0xe3, [@remote, @remote, @rand_addr=0x64010101, @private=0xa010101, @loopback]}]}}}}})
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', <r11=>0x0, 0x4, 0x6, 0x0, 0x46, 0xa, @local, @empty, 0x7800, 0x40, 0xffffff81, 0xfffffffd}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000a40)={0x188, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "f2bb723aa2695956de58289c670c406400a0984ae61aaee2935df737e91c5c0bee"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "f29ad8f682811ca6ef6a12f266adfd77331478b02d04"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "af045dd433dc166c608aaa6161622f05e661334980d2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd67}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x700000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20004004}, 0x28010)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x20, 0x10, 0x2, 0x3a71, {{0x1b, 0x4, 0x2, 0x22, 0x6c, 0x64, 0x0, 0xd, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp_prespec={0x44, 0x2c, 0xae, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x11}, 0x7}, {@multicast2}, {@multicast2, 0xf}, {@private=0xa010101, 0x8}, {@empty, 0x99}]}, @rr={0x7, 0x7, 0x96, [@empty]}, @end, @timestamp_prespec={0x44, 0x24, 0x49, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x3}, {@private=0xa010101, 0x6}, {@local, 0x6}, {@multicast1, 0x8}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x20, 0x1, 0xf4b, 0x0, {{0x9, 0x4, 0x0, 0x3, 0x24, 0x68, 0x0, 0x3, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @rr={0x7, 0xb, 0x78, [@remote, @multicast2]}]}}}}})
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0xa0}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000840)={&(0x7f00000198c0)={0x1ec, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x54, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0x39, 0x5, "c78681d74b392654fa9a4dae8c92f4673c71303fd21cd190bbf71d49d030380e6740d91a78f920c75b1193a989d3e79d4de855812c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "5318dca83099e9bf4b25945e175c4316031564ac28e86005310d3ecde748a2fef8bacdad3f07435875eb0c08d25f65a89bc28f7a67c47cdfe39c6775d59069a928823a2f0b681657fdd5be40cdfc0b69ecc46c26bf9bf3f8068a9f69147dd5d35c49e6433fdaec17f062315b0579b73f0b8eb891bf86bb1f7ffcb650a58ac1dd5413e185bd50095324e760f02dd1d7c9b3e986010bbf0388cf4946eaf0c74822a7aa0b71ab80b5dcb8315ec01b35f399b776e2062c71683c2a46a1467f7969dd32"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a7aadf991fd2e9ba10000c0a9000000000000000000000100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0)

2.054385ms ago: executing program 1 (id=1874):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000cc0)=@newsa={0x144, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) (async)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000680)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r4, 0x300, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x74}, 0x20000044)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r5, &(0x7f0000000140)={@val={0x3, 0x17}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @broadcast, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELRULE={0x234, 0x8, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x214, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_EXPR={0x2c, 0x7, 0x0, 0x1, {{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SET_ID={0x8}]}}}]}}}, {0x40, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x17}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x851}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x108, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xf8, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}, @NFTA_TARGET_INFO={0x6d, 0x3, "7371f7b192a04bf5185e9e9fedb614f25bd90451aae9e8e80b2cd59a12e934305d9f9f41bddb4a08da26492bd734c6494ac33ef325a57da2c5456de9429b0652ad4160fd5e8c9d49e5868bec9b89e06aef50707654c6095b171ec57d1f94c5cb257860be420d96ebf1"}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x46, 0x3, "18d4d1c3ea9e9217f24c97e6719383a98197ef25d2eaebecc48876581c58f54a3ced16c2e70e977a12316f6d2b222191afcb077d9220cdbad81d46bbc65f49940a7f"}]}}}, {0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}], {0x14}}, 0x2bc}}, 0x0) (async)
r8 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0}) (async)
r11 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x2c000010)
sendmsg$nl_xfrm(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015000100000000000000df25fe88000000000000000000000000010100000000000000000000000000000001000000004e2300000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b'], 0xb8}}, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000800)=""/198, &(0x7f00000006c0)=0xc6) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x50}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x3c, 0xb2, &(0x7f0000000180)="4362fcf141059e2a2f532f5d78c3ca4d8d964c78115a5dafa485c66d6654069fca6ea9b3b107ed43388d6f8735ad66ab786b334e15ba84554bda9ca7", &(0x7f00000003c0)=""/178, 0x2, 0x0, 0xd3, 0x49, &(0x7f0000000580)="abe7c92140176b6d43f327adb0c8d17501c9b5eaf455f7bbb856494f4dffb9e4a7ad9038f1cc94e96bd5ed596ebb1218d3a4767f9595a4a0b4d81eafff305a770467c9e35c7c4802a414576df715ae2e314e843b8d897f49668dc3e392613c230f4e5e65d3202a4c071f5217e6f49624e1cf3ac5ed5624e4b4442676da11ee19bbc3163279c1dc6f506c6ede1ad7f725252229251983b825dcb3c052cce03b32e480858571a2cab5cd1c9e539c52645b1362c18d0b8413615956bcd759bc2dd4eeb5a64f3675d6746ffbb4b92e507324764d59", &(0x7f00000001c0)="4eb3b8e690566cb6f04a72da061c75762a7e1a840c851929197915155cc34076b92a9f6dd9db383926c38f14f8930b8988f9d089894a98c0ba3246180a7d77787a9b508d1fca30efaa", 0x7, 0x0, 0xb}, 0x50)
ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f0000000080))

0s ago: executing program 0 (id=1875):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f300000600002fb96dbcf706e1050000004305000f1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x40)

kernel console output (not intermixed with test programs):

:syzkaller0>
[   65.630078][ T6896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.632649][ T6896] syzkaller0: entered promiscuous mode
[   65.636479][ T6896] syzkaller0: entered allmulticast mode
[   65.641875][ T6894] tipc: Resetting bearer <eth:syzkaller0>
[   65.652597][ T6894] tipc: Disabling bearer <eth:syzkaller0>
[   65.689070][ T6900] netlink: 'syz.0.259': attribute type 1 has an invalid length.
[   65.692239][ T6900] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.259'.
[   65.699963][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'.
[   65.709153][ T6901] netlink: 60 bytes leftover after parsing attributes in process `syz.0.259'.
[   65.719423][ T6900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'.
[   65.722882][ T6900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.259'.
[   65.852445][ T6918] netlink: 'syz.1.264': attribute type 1 has an invalid length.
[   65.855269][ T6918] netlink: 244 bytes leftover after parsing attributes in process `syz.1.264'.
[   65.959829][ T6925] netlink: 44 bytes leftover after parsing attributes in process `syz.0.266'.
[   66.015834][ T6927] nbd: couldn't find a device at index 0
[   66.107101][ T6937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.110249][ T6937] syzkaller0: entered promiscuous mode
[   66.114694][ T6937] syzkaller0: entered allmulticast mode
[   66.132193][ T6938] tipc: Resetting bearer <eth:syzkaller0>
[   66.138594][ T6938] tipc: Disabling bearer <eth:syzkaller0>
[   66.297259][ T6950] smc: net device bond0 applied user defined pnetid SYZ
[   66.438537][ T6966] netlink: 'syz.0.277': attribute type 3 has an invalid length.
[   66.484062][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.487087][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.552581][ T6967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.619982][ T6967] gtp0: left promiscuous mode
[   66.624262][ T5710] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.634908][ T5710] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.640128][ T5710] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.643971][ T5710] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.005042][ T7004] netlink: 'syz.0.287': attribute type 3 has an invalid length.
[   67.007947][ T7004] netlink: 'syz.0.287': attribute type 1 has an invalid length.
[   67.360891][ T7056] lo speed is unknown, defaulting to 1000
[   67.675024][ T7074] netlink: 'syz.1.301': attribute type 6 has an invalid length.
[   67.677527][ T7074] netlink: 'syz.1.301': attribute type 4 has an invalid length.
[   67.801036][ T7082] net_ratelimit: 31 callbacks suppressed
[   67.801047][ T7082] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   67.985387][ T7105] netlink: 'syz.2.310': attribute type 1 has an invalid length.
[   68.006726][ T7105] bond1: (slave gretap1): making interface the new active one
[   68.013673][ T7105] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   68.027287][ T7105] bond1: (slave gretap2): Enslaving as an active interface with an up link
[   68.042118][ T7105] syz.2.310 (7105) used greatest stack depth: 20040 bytes left
[   68.209443][ T7117] netlink: 'syz.0.314': attribute type 1 has an invalid length.
[   68.267329][ T7121] team0: Port device dummy0 added
[   68.277530][ T7121] team0: Port device dummy0 removed
[   68.289772][ T7121] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   69.277974][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.400434][ T7159] pim6reg: entered allmulticast mode
[   69.511992][ T7168] syzkaller0: entered promiscuous mode
[   69.514159][ T7168] syzkaller0: entered allmulticast mode
[   69.517920][ T7168] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   69.527752][ T7169] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:19993
[   70.127690][ T7178] batman_adv: batadv0: Interface deactivated: dummy0
[   70.131096][ T7178] batman_adv: batadv0: Removing interface: dummy0
[   70.140920][ T7178] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   70.154934][ T7178] batman_adv: batadv0: Removing interface: ip6gretap1
[   70.173136][ T7181] lo speed is unknown, defaulting to 1000
[   70.357985][ T7198] syz_tun: entered allmulticast mode
[   70.362774][ T7199] dvmrp8: entered allmulticast mode
[   70.366101][ T7197] syz_tun: left allmulticast mode
[   70.367884][ T7197] dvmrp8: left allmulticast mode
[   70.435494][ T7205] __nla_validate_parse: 31 callbacks suppressed
[   70.435509][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[   70.436626][ T7206] validate_nla: 3 callbacks suppressed
[   70.436635][ T7206] netlink: 'syz.0.337': attribute type 5 has an invalid length.
[   70.457147][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.333'.
[   70.460835][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.333'.
[   70.652305][ T7222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.340'.
[   70.676511][ T7226] netlink: 14 bytes leftover after parsing attributes in process `syz.0.341'.
[   70.778249][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'.
[   70.787551][ T7233] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   71.047800][ T7238] lo speed is unknown, defaulting to 1000
[   71.085982][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.137156][ T7246] sctp: [Deprecated]: syz.1.348 (pid 7246) Use of int in max_burst socket option.
[   71.137156][ T7246] Use struct sctp_assoc_value instead
[   71.168816][ T7238] netlink: 248 bytes leftover after parsing attributes in process `syz.2.346'.
[   71.439705][ T7281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.442279][ T7281] syzkaller0: entered promiscuous mode
[   71.446040][ T7281] syzkaller0: entered allmulticast mode
[   71.457082][ T7281] tipc: Resetting bearer <eth:syzkaller0>
[   71.462595][ T7280] tipc: Resetting bearer <eth:syzkaller0>
[   71.465694][ T7280] tipc: Disabling bearer <eth:syzkaller0>
[   71.553846][ T7288] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[   71.618738][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[   71.622295][ T7298] macsec0: entered allmulticast mode
[   71.625913][ T7298] veth1_macvtap: entered allmulticast mode
[   71.735538][ T7313] IPVS: Scheduler module ip_vs_sip not found
[   71.745290][ T7313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.363'.
[   71.887887][ T7325] batadv_slave_1: entered promiscuous mode
[   71.908544][ T7324] batadv_slave_1: left promiscuous mode
[   72.031001][ T7334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.368'.
[   72.199685][ T7347] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.206445][ T7347] syzkaller0: entered promiscuous mode
[   72.208600][ T7347] syzkaller0: entered allmulticast mode
[   72.221119][ T7349] netlink: 'syz.2.371': attribute type 30 has an invalid length.
[   72.332462][ T7362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.323632][ T7390] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   73.515172][ T5885] IPVS: starting estimator thread 0...
[   73.516087][ T7423] tipc: Failed to remove unknown binding: 66,1,1/0:1885197248/1885197250
[   73.522639][ T7423] tipc: Failed to remove unknown binding: 66,1,1/0:1885197248/1885197250
[   73.526481][ T7423] tipc: Failed to remove unknown binding: 66,1,1/0:1885197248/1885197250
[   73.571956][ T7428] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   73.599761][ T7432] netlink: 'syz.0.395': attribute type 4 has an invalid length.
[   73.603729][ T7424] IPVS: using max 58 ests per chain, 139200 per kthread
[   73.642017][ T7436] netlink: 'syz.0.397': attribute type 29 has an invalid length.
[   73.646824][ T7436] netlink: 'syz.0.397': attribute type 29 has an invalid length.
[   73.654656][ T7436] unsupported nla_type 58
[   73.752219][ T7454] bridge0: port 3(erspan0) entered blocking state
[   73.755596][ T7454] bridge0: port 3(erspan0) entered disabled state
[   73.757798][ T7454] erspan0: entered allmulticast mode
[   73.760142][ T7454] erspan0: entered promiscuous mode
[   73.769755][ T7454] erspan0: left allmulticast mode
[   73.773784][ T7454] erspan0: left promiscuous mode
[   73.775836][ T7454] bridge0: port 3(erspan0) entered disabled state
[   73.830159][ T7470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.832775][ T7470] syzkaller0: entered promiscuous mode
[   73.835632][ T7470] syzkaller0: entered allmulticast mode
[   73.842005][ T7469] tipc: Resetting bearer <eth:syzkaller0>
[   73.847747][ T7469] tipc: Disabling bearer <eth:syzkaller0>
[   73.852349][ T7473] netlink: 'syz.0.408': attribute type 5 has an invalid length.
[   73.895626][ T7477] netlink: 'syz.0.409': attribute type 3 has an invalid length.
[   73.920797][ T7482] lo speed is unknown, defaulting to 1000
[   73.943767][ T7481] lo speed is unknown, defaulting to 1000
[   73.977102][ T7487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.982917][ T7487] syzkaller0: entered promiscuous mode
[   73.986604][ T7487] syzkaller0: entered allmulticast mode
[   73.989520][ T7487] tipc: Resetting bearer <eth:syzkaller0>
[   74.016077][ T7487] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   74.081588][ T7499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   74.124062][ T7499] tipc: Resetting bearer <eth:syzkaller0>
[   74.130796][ T7501] netlink: 'syz.1.416': attribute type 1 has an invalid length.
[   74.133924][ T7499] lo speed is unknown, defaulting to 1000
[   74.327916][ T7514] netlink: 'syz.2.420': attribute type 1 has an invalid length.
[   74.523606][ T5842] Bluetooth: hci0: command 0x0401 tx timeout
[   74.600458][ T7536] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.605100][ T7536] 8021q: adding VLAN 0 to HW filter on device team0
[   74.611814][ T7536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.687810][ T1088] tipc: Resetting bearer <eth:syzkaller0>
[   74.787277][ T7562] x9: renamed from bridge_slave_0 (while UP)
[   75.103427][ T5308] tipc: Node number set to 3009321643
[   75.649080][   T24] cfg80211: failed to load regulatory.db
[   75.677805][ T7581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.680441][ T7581] syzkaller0: entered promiscuous mode
[   75.682166][ T7581] syzkaller0: entered allmulticast mode
[   75.698295][ T7580] tipc: Resetting bearer <eth:syzkaller0>
[   75.704838][ T7580] tipc: Disabling bearer <eth:syzkaller0>
[   75.794750][ T7596] __nla_validate_parse: 24 callbacks suppressed
[   75.794761][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'.
[   75.831652][ T7583] validate_nla: 4 callbacks suppressed
[   75.831662][ T7583] netlink: 'syz.1.440': attribute type 21 has an invalid length.
[   75.868695][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'.
[   75.932559][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'.
[   75.936433][ T7609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.443'.
[   75.998465][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'.
[   76.081789][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[   76.232451][ T7644] bond0: (slave dummy0): Releasing backup interface
[   76.246688][ T7644] bridge_slave_0: left allmulticast mode
[   76.252591][ T7644] bridge_slave_0: left promiscuous mode
[   76.263033][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.275821][ T7644] bridge_slave_1: left allmulticast mode
[   76.283141][ T7644] bridge_slave_1: left promiscuous mode
[   76.296037][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.314961][ T7644] bond0: (slave bond_slave_0): Releasing backup interface
[   76.325938][ T7644] bond0: (slave bond_slave_1): Releasing backup interface
[   76.330513][ T7644] team0: Port device team_slave_0 removed
[   76.343326][ T7644] team0: Port device team_slave_1 removed
[   76.345926][ T7644] bond0: (slave batadv_slave_0): Releasing backup interface
[   76.350011][ T7644] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.353104][ T7644] bond1: (slave gretap1): Releasing active interface
[   76.355681][ T7644] bond1: (slave gretap1): the permanent HWaddr of slave - d6:bc:af:b6:d9:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   76.361367][ T7644] bond1: (slave gretap2): making interface the new active one
[   76.368713][ T7644] bond1: (slave gretap2): Releasing active interface
[   76.475238][ T7658] batadv_slave_1: entered promiscuous mode
[   76.483723][ T7658] batadv_slave_1: left promiscuous mode
[   76.545340][ T7667] netlink: 'syz.1.457': attribute type 101 has an invalid length.
[   76.547946][ T7667] netlink: 'syz.1.457': attribute type 7 has an invalid length.
[   76.576292][ T7669] ip6gretap0: entered promiscuous mode
[   76.578231][ T7669] macsec1: entered promiscuous mode
[   76.580100][ T7669] macsec1: entered allmulticast mode
[   76.582086][ T7669] ip6gretap0: entered allmulticast mode
[   76.639939][ T7677] netlink: 88 bytes leftover after parsing attributes in process `syz.0.461'.
[   76.671647][ T7679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.676307][ T7679] syzkaller0: entered promiscuous mode
[   76.678245][ T7679] syzkaller0: entered allmulticast mode
[   76.686530][ T7679] tipc: Resetting bearer <eth:syzkaller0>
[   76.691057][ T7679] tipc: Disabling bearer <eth:syzkaller0>
[   76.695423][ T7684] netlink: 'syz.0.463': attribute type 1 has an invalid length.
[   76.698382][ T7684] netlink: 228 bytes leftover after parsing attributes in process `syz.0.463'.
[   76.726464][ T7686] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.464'.
[   76.746348][ T7688] netlink: 'syz.1.465': attribute type 11 has an invalid length.
[   76.749015][ T7688] netlink: 44 bytes leftover after parsing attributes in process `syz.1.465'.
[   76.874044][ T7697] bridge_slave_0: left allmulticast mode
[   76.875815][ T7697] bridge_slave_0: left promiscuous mode
[   76.877547][ T7697] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.881130][ T7697] bridge_slave_1: left allmulticast mode
[   76.882777][ T7697] bridge_slave_1: left promiscuous mode
[   76.884783][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.888602][ T7697] bond0: (slave bond_slave_0): Releasing backup interface
[   76.892563][ T7697] bond0: (slave bond_slave_1): Releasing backup interface
[   76.899083][ T7697] team0: Port device team_slave_0 removed
[   76.903164][ T7697] team0: Port device team_slave_1 removed
[   76.911605][ T7697] team0: Port device bond4 removed
[   76.947333][ T7644] syz.2.450 (7644) used greatest stack depth: 19752 bytes left
[   76.967425][ T7703] .70: renamed from hsr0
[   76.970204][ T7703] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   76.974813][ T7703] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.978553][ T7703] .70: entered allmulticast mode
[   76.980579][ T7703] hsr_slave_0: entered allmulticast mode
[   76.982826][ T7703] hsr_slave_1: entered allmulticast mode
[   76.987726][ T7703] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[   77.074870][ T7712] lo speed is unknown, defaulting to 1000
[   77.890665][ T7743] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.899770][ T7742] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.948065][ T7748] bond0: option mode: unable to set because the bond device is up
[   77.962297][ T7743] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.039572][ T7743] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.080642][ T7743] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.106659][ T7755] lo speed is unknown, defaulting to 1000
[   78.146430][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.157841][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.161915][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.169731][ T5871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.238721][ T7769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.241252][ T7769] syzkaller0: entered promiscuous mode
[   78.243082][ T7769] syzkaller0: entered allmulticast mode
[   78.248175][ T7769] tipc: Resetting bearer <eth:syzkaller0>
[   78.250633][ T7768] tipc: Resetting bearer <eth:syzkaller0>
[   78.253472][ T7768] tipc: Disabling bearer <eth:syzkaller0>
[   78.277261][ T7767] macvlan3: entered allmulticast mode
[   78.278974][ T7767] veth1_vlan: entered allmulticast mode
[   78.281520][ T7767] veth1_vlan: left allmulticast mode
[   78.385707][ T7777] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   78.471278][ T7777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   78.585345][ T7789] netlink: 'syz.0.493': attribute type 12 has an invalid length.
[   78.647738][ T7797] netlink: 'syz.0.494': attribute type 1 has an invalid length.
[   79.152159][ T7825] openvswitch: netlink: IPv4 tun info is not correct
[   79.156264][ T7825] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   79.208832][ T7827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.307894][ T7837] : renamed from wg2 (while UP)
[   79.317175][ T7836] delete_channel: no stack
[   79.436120][ T7850] pim6reg1: entered promiscuous mode
[   79.439574][ T7850] pim6reg1: entered allmulticast mode
[   79.561370][ T7850] 8021q: adding VLAN 0 to HW filter on device bond5
[   79.565452][ T7850] team0: Port device bond5 added
[   79.637980][ T7855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.640637][ T7855] syzkaller0: entered promiscuous mode
[   79.642802][ T7855] syzkaller0: entered allmulticast mode
[   79.650594][ T7855] tipc: Resetting bearer <eth:syzkaller0>
[   79.654392][ T7854] tipc: Resetting bearer <eth:syzkaller0>
[   79.657894][ T7854] tipc: Disabling bearer <eth:syzkaller0>
[   79.807212][ T7868] lo speed is unknown, defaulting to 1000
[   79.809519][ T7868] lo speed is unknown, defaulting to 1000
[   79.812156][ T7868] lo speed is unknown, defaulting to 1000
[   79.819872][ T7868] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   79.832718][ T7868] lo speed is unknown, defaulting to 1000
[   79.835227][ T7868] lo speed is unknown, defaulting to 1000
[   79.837935][ T7868] lo speed is unknown, defaulting to 1000
[   79.855407][ T7868] netlink: 'syz.1.515': attribute type 4 has an invalid length.
[   79.947271][ T7879] netlink: 'syz.2.519': attribute type 1 has an invalid length.
[   79.949976][ T7879] netlink: 'syz.2.519': attribute type 2 has an invalid length.
[   80.007365][ T7881] wg1 speed is unknown, defaulting to 1000
[   80.009336][ T7881] wg1 speed is unknown, defaulting to 1000
[   80.011949][ T7881] wg1 speed is unknown, defaulting to 1000
[   80.017882][ T7881] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   80.027202][ T7881] wg1 speed is unknown, defaulting to 1000
[   80.031835][ T7881] wg1 speed is unknown, defaulting to 1000
[   80.035337][ T7881] wg1 speed is unknown, defaulting to 1000
[   81.227876][ T7937] sctp: [Deprecated]: syz.1.530 (pid 7937) Use of int in max_burst socket option.
[   81.227876][ T7937] Use struct sctp_assoc_value instead
[   81.379218][ T7956] __nla_validate_parse: 21 callbacks suppressed
[   81.379233][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'.
[   81.429914][ T7960] pimreg: entered allmulticast mode
[   81.537084][ T7978] bridge0: port 1(erspan0) entered blocking state
[   81.539085][ T7978] bridge0: port 1(erspan0) entered disabled state
[   81.541152][ T7978] erspan0: entered allmulticast mode
[   81.543145][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'.
[   81.546588][ T7978] erspan0: entered promiscuous mode
[   81.548580][ T7978] bridge0: port 1(erspan0) entered blocking state
[   81.551033][ T7978] bridge0: port 1(erspan0) entered forwarding state
[   81.632424][ T7979] erspan0: left allmulticast mode
[   81.634571][ T7979] erspan0: left promiscuous mode
[   81.636390][ T7979] bridge0: port 1(erspan0) entered disabled state
[   81.733697][ T7987] netlink: 68 bytes leftover after parsing attributes in process `syz.1.538'.
[   81.757271][ T7987] lo speed is unknown, defaulting to 1000
[   81.760345][ T7987] wg1 speed is unknown, defaulting to 1000
[   81.791310][ T7987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.798462][ T7986] tipc: Disabling bearer <eth:syzkaller0>
[   81.924281][ T7993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.927108][ T7993] IPv6: NLM_F_CREATE should be set when creating new route
[   82.021966][ T7997] netlink: 76 bytes leftover after parsing attributes in process `syz.1.542'.
[   82.029510][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'.
[   82.036139][ T7997] geneve0: entered promiscuous mode
[   82.038272][ T7997] geneve0: entered allmulticast mode
[   82.154295][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'.
[   82.191147][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'.
[   82.223839][ T8004] lo speed is unknown, defaulting to 1000
[   82.226915][ T8004] wg1 speed is unknown, defaulting to 1000
[   82.262803][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'.
[   82.266710][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.545'.
[   82.274519][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'.
[   82.303051][ T8010] validate_nla: 1 callbacks suppressed
[   82.303067][ T8010] netlink: 'syz.1.546': attribute type 1 has an invalid length.
[   82.466049][ T8024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.468563][ T8024] syzkaller0: entered promiscuous mode
[   82.470417][ T8024] syzkaller0: entered allmulticast mode
[   82.474856][ T8024] netlink: 'syz.2.550': attribute type 1 has an invalid length.
[   82.479384][ T8023] tipc: Resetting bearer <eth:syzkaller0>
[   82.482700][ T8023] tipc: Disabling bearer <eth:syzkaller0>
[   82.732508][ T8056] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   82.837315][ T8074] vlan2: entered allmulticast mode
[   82.839447][ T8074] bridge_slave_0: entered allmulticast mode
[   82.959933][ T8087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.966671][ T8087] syzkaller0: entered promiscuous mode
[   82.969150][ T8087] syzkaller0: entered allmulticast mode
[   82.990793][ T8087] tipc: Resetting bearer <eth:syzkaller0>
[   82.994107][ T8086] tipc: Resetting bearer <eth:syzkaller0>
[   82.998476][ T8086] tipc: Disabling bearer <eth:syzkaller0>
[   83.117839][ T8098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.121168][ T8098] syzkaller0: entered promiscuous mode
[   83.124158][ T8098] syzkaller0: entered allmulticast mode
[   83.134067][ T8098] tipc: Resetting bearer <eth:syzkaller0>
[   83.137519][ T8097] tipc: Resetting bearer <eth:syzkaller0>
[   83.140853][ T8097] tipc: Disabling bearer <eth:syzkaller0>
[   83.250066][ T8102] team0: Port device bond5 removed
[   83.268569][ T8102] team0: Mode changed to "loadbalance"
[   83.417106][ T8113] netlink: 'syz.1.574': attribute type 2 has an invalid length.
[   83.428060][ T8113] 8021q: adding VLAN 0 to HW filter on device team0
[   83.431548][ T8113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.436512][ T7802] lo speed is unknown, defaulting to 1000
[   83.438368][ T7802] syz2: Port: 1 Link ACTIVE
[   83.638750][ T8125] syzkaller0: left promiscuous mode
[   83.640549][ T8125] syzkaller0: left allmulticast mode
[   83.642670][ T8125] tipc: Resetting bearer <eth:syzkaller0>
[   83.741762][ T8132] siw: device registration error -23
[   83.826760][ T8142] netlink: 'syz.0.583': attribute type 11 has an invalid length.
[   83.830915][ T8143] netlink: 'syz.0.583': attribute type 11 has an invalid length.
[   83.846136][ T8145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.974692][ T8169] netlink: 'syz.0.588': attribute type 58 has an invalid length.
[   83.988835][ T8168] syzkaller1: entered promiscuous mode
[   83.990615][ T8168] syzkaller1: entered allmulticast mode
[   84.060288][ T5871] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.063414][ T5871] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.066240][ T5871] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.073344][ T5871] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.163295][ T8191] bridge2: port 1(veth3) entered blocking state
[   84.165749][ T8191] bridge2: port 1(veth3) entered disabled state
[   84.168343][ T8191] veth3: entered allmulticast mode
[   84.171324][ T8191] veth3: entered promiscuous mode
[   84.193930][ T8194] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.245772][ T8196] vlan0: entered allmulticast mode
[   84.247571][ T8196] veth1: entered allmulticast mode
[   84.249826][ T8196] bridge2: port 2(vlan0) entered blocking state
[   84.252218][ T8196] bridge2: port 2(vlan0) entered disabled state
[   84.256160][ T8196] vlan0: entered promiscuous mode
[   84.258234][ T8196] veth1: entered promiscuous mode
[   84.354495][ T8206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.380944][ T8213] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   84.381505][ T8211] netlink: 'syz.1.601': attribute type 1 has an invalid length.
[   84.385219][ T8212] IPVS: stopping master sync thread 8213 ...
[   84.398081][ T8211] 8021q: adding VLAN 0 to HW filter on device bond6
[   84.411364][ T8211] 8021q: adding VLAN 0 to HW filter on device bond6
[   84.415480][ T8211] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[   84.419542][ T8211] bond6: (slave vxcan3): Error -95 calling set_mac_address
[   84.462144][ T8221] veth5: entered promiscuous mode
[   84.466218][ T8221] bond6: (slave veth5): Enslaving as an active interface with a down link
[   84.476725][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.479881][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.481287][ T8223] rdma_rxe: rxe_newlink: failed to add vxcan1
[   84.490316][ T8223] netlink: 'syz.0.604': attribute type 21 has an invalid length.
[   85.719585][ T8285] ip6gre1: entered promiscuous mode
[   85.746445][ T8295] pim6reg1: entered promiscuous mode
[   85.748381][ T8295] pim6reg1: entered allmulticast mode
[   85.817163][ T8295] 8021q: adding VLAN 0 to HW filter on device bond4
[   85.824081][ T8295] team0: Port device bond4 added
[   85.864437][ T8298] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   86.058843][ T8310] netlink: 'syz.0.630': attribute type 39 has an invalid length.
[   86.218752][ T8320] netlink: 'syz.0.635': attribute type 2 has an invalid length.
[   86.231055][ T8320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.380997][ T8340] 8021q: adding VLAN 0 to HW filter on device bond5
[   86.439762][ T8343] ipvlan2: entered allmulticast mode
[   86.441555][ T8343] bond5: entered allmulticast mode
[   86.444783][ T8343] __nla_validate_parse: 50 callbacks suppressed
[   86.444791][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.0.640'.
[   87.359232][ T8374] lo speed is unknown, defaulting to 1000
[   87.362479][ T8374] wg1 speed is unknown, defaulting to 1000
[   87.409051][ T8376] bridge3: entered promiscuous mode
[   87.411345][ T8376] bridge3: entered allmulticast mode
[   87.418481][ T8376] team0: Port device bridge3 added
[   87.540560][ T8381] validate_nla: 3 callbacks suppressed
[   87.540576][ T8381] netlink: 'syz.2.650': attribute type 12 has an invalid length.
[   87.546862][ T8383] netlink: 'syz.1.651': attribute type 1 has an invalid length.
[   87.548204][ T8381] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.650'.
[   87.565102][ T8383] bond7: entered promiscuous mode
[   87.567237][ T8383] 8021q: adding VLAN 0 to HW filter on device bond7
[   87.599334][ T8383] 8021q: adding VLAN 0 to HW filter on device bond7
[   87.602307][ T8383] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[   87.608196][ T8383] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   87.617048][ T8383] bond7: (slave wireguard0): making interface the new active one
[   87.619823][ T8383] wireguard0: entered promiscuous mode
[   87.623050][ T8383] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[   87.632654][ T8383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.635121][ T8383] IPv6: NLM_F_CREATE should be set when creating new route
[   87.637850][ T8383] IPv6: NLM_F_CREATE should be set when creating new route
[   87.640526][ T8387] lo speed is unknown, defaulting to 1000
[   87.644134][ T8383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   87.652572][ T8383] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[   87.658908][ T8383] bond7: (slave wireguard1): Enslaving as a backup interface with an up link
[   87.661991][ T8387] wg1 speed is unknown, defaulting to 1000
[   87.910067][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.655'.
[   87.917336][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.655'.
[   87.975355][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'.
[   87.988823][ T8411] delete_channel: no stack
[   88.047488][ T8417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.054655][ T8417] syzkaller0: entered promiscuous mode
[   88.056488][ T8417] syzkaller0: entered allmulticast mode
[   88.061971][ T8417] syzkaller0: mtu greater than device maximum
[   88.068795][ T8416] tipc: Resetting bearer <eth:syzkaller0>
[   88.078440][ T8416] tipc: Disabling bearer <eth:syzkaller0>
[   88.236063][ T8427] netlink: 284 bytes leftover after parsing attributes in process `syz.1.659'.
[   88.239611][ T8427] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   88.492246][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'.
[   88.495439][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'.
[   88.602640][ T8450] netlink: 'syz.0.665': attribute type 2 has an invalid length.
[   88.610175][ T8450] netlink: 'syz.0.665': attribute type 2 has an invalid length.
[   88.632599][ T8451] netlink: 'syz.0.665': attribute type 2 has an invalid length.
[   88.660502][ T8451] netlink: 'syz.0.665': attribute type 2 has an invalid length.
[   88.666950][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'.
[   88.677167][ T8450] netlink: 32 bytes leftover after parsing attributes in process `syz.0.665'.
[   89.237762][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   89.241500][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   89.251132][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   89.261265][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   89.317994][ T8531] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   89.726061][ T8560] syzkaller0: entered promiscuous mode
[   89.727805][ T8560] syzkaller0: entered allmulticast mode
[   89.738572][ T8560] tipc: Resetting bearer <eth:syzkaller0>
[   89.881938][ T8577] openvswitch: netlink: nsh attr 2560 is out of range max 3
[   89.884881][ T8577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.953521][ T8586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.977859][ T8597] netlink: 'syz.0.701': attribute type 21 has an invalid length.
[   89.985276][ T8597] netlink: 'syz.0.701': attribute type 5 has an invalid length.
[   89.988542][ T8597] netlink: 'syz.0.701': attribute type 6 has an invalid length.
[   90.173488][ T8632] lo speed is unknown, defaulting to 1000
[   90.175592][ T8632] wg1 speed is unknown, defaulting to 1000
[   90.204398][ T5885] IPVS: starting estimator thread 0...
[   90.298280][ T8638] IPVS: using max 92 ests per chain, 220800 per kthread
[   90.400907][ T8663] netlink: 'syz.0.711': attribute type 9 has an invalid length.
[   91.097901][ T5871] IPVS: stop unused estimator thread 0...
[   91.356713][ T5308] lo speed is unknown, defaulting to 1000
[   91.358674][ T5308] syz2: Port: 1 Link DOWN
[   91.397263][ T8709] syzkaller0: entered promiscuous mode
[   91.399119][ T8709] syzkaller0: entered allmulticast mode
[   91.407351][ T8711] 0X: renamed from caif0
[   91.410246][ T8711] 0X: entered allmulticast mode
[   91.412452][ T8711] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   91.441057][ T8713] syz_tun: entered allmulticast mode
[   91.537686][ T8721] lo speed is unknown, defaulting to 1000
[   91.539996][ T8721] wg1 speed is unknown, defaulting to 1000
[   91.618245][ T8721] __nla_validate_parse: 15 callbacks suppressed
[   91.618262][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'.
[   91.627839][ T8721] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   91.649832][ T8723] lo speed is unknown, defaulting to 1000
[   91.652838][ T8723] wg1 speed is unknown, defaulting to 1000
[   91.819956][ T8728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.724'.
[   91.823590][ T8728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   91.826002][ T8728] IPv6: NLM_F_CREATE should be set when creating new route
[   91.906530][ T8740] 8021q: adding VLAN 0 to HW filter on device bond4
[   91.918955][ T8740] 8021q: adding VLAN 0 to HW filter on device bond4
[   91.922128][ T8740] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   91.927358][ T8740] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   92.086292][ T8748] syzkaller1: entered promiscuous mode
[   92.088545][ T8748] syzkaller1: entered allmulticast mode
[   92.197677][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'.
[   92.269959][ T8712] syz_tun: left allmulticast mode
[   92.739341][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'.
[   92.761884][ T5308] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   92.773712][ T5308] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   92.784501][ T5308] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[   92.788884][ T5308] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   92.800950][ T8780] netlink: 52 bytes leftover after parsing attributes in process `syz.1.737'.
[   92.821044][ T8780] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   92.829453][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'.
[   92.835218][ T8780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.737'.
[   92.845736][ T8780] geneve2: entered allmulticast mode
[   92.950509][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.744'.
[   92.959012][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.2.744'.
[   92.990721][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'.
[   93.020455][ T8816] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   93.038189][ T8818] erspan0: entered promiscuous mode
[   93.056150][ T8816] syzkaller0: mtu less than device minimum
[   93.078880][ T8823] validate_nla: 5 callbacks suppressed
[   93.078896][ T8823] netlink: 'syz.2.749': attribute type 1 has an invalid length.
[   93.104352][ T8826] netlink: 'syz.0.750': attribute type 10 has an invalid length.
[   93.107583][ T8826] netlink: 'syz.0.750': attribute type 10 has an invalid length.
[   93.142509][ T8829] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   93.170692][ T8829] sctp: [Deprecated]: syz.0.751 (pid 8829) Use of int in max_burst socket option deprecated.
[   93.170692][ T8829] Use struct sctp_assoc_value instead
[   96.305615][ T8859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.377071][ T8861] netem: invalid attributes len -16
[   96.379386][ T8861] netem: change failed
[   96.451184][ T8874] tipc: Invalid UDP bearer configuration
[   96.451217][ T8874] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   96.489923][ T8878] sctp: [Deprecated]: syz.0.768 (pid 8878) Use of int in max_burst socket option.
[   96.489923][ T8878] Use struct sctp_assoc_value instead
[   96.698189][ T8907] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[   96.748034][ T8917] syz_tun: entered allmulticast mode
[   96.758726][ T8921] syz_tun: left allmulticast mode
[   96.785739][ T8920] lo speed is unknown, defaulting to 1000
[   96.788808][ T8920] wg1 speed is unknown, defaulting to 1000
[   96.845362][ T8933] tipc: Enabled bearer <eth:gre0>, priority 10
[   96.847520][ T8934] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[   96.925893][ T8939] syzkaller0: entered promiscuous mode
[   96.927678][ T8939] syzkaller0: entered allmulticast mode
[   97.258933][ T8944] __nla_validate_parse: 11 callbacks suppressed
[   97.258944][ T8944] netlink: 156 bytes leftover after parsing attributes in process `syz.2.787'.
[   97.339364][ T8946] netlink: 48 bytes leftover after parsing attributes in process `syz.2.788'.
[   97.936002][ T8958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.793'.
[   97.941049][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.793'.
[   97.949371][ T8958] vlan2: entered allmulticast mode
[   97.951472][ T8958] bridge_slave_0: entered allmulticast mode
[   98.005451][ T8960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.792'.
[   98.011182][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'.
[   98.257851][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'.
[   98.368311][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   99.142486][ T9009] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.806'.
[   99.146388][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'.
[   99.251585][ T9025] syzkaller1: entered promiscuous mode
[   99.254668][ T9025] syzkaller1: entered allmulticast mode
[   99.258752][ T9019] netlink: 'syz.0.809': attribute type 10 has an invalid length.
[   99.316624][ T9030] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.813'.
[   99.364784][ T9038] tap0: tun_chr_ioctl cmd 2148553947
[   99.558872][ T9061] openvswitch: netlink: Flow actions attr not present in new flow.
[   99.607135][ T9071] netlink: 'syz.1.825': attribute type 1 has an invalid length.
[   99.612765][ T9071] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[   99.749100][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[   99.762118][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[   99.765217][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[   99.768969][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[   99.846597][ T9092] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   99.858834][ T9097] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   99.959402][ T9106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.962448][ T9106] syzkaller0: entered promiscuous mode
[   99.965210][ T9106] syzkaller0: entered allmulticast mode
[   99.969673][ T9104] tipc: Resetting bearer <eth:syzkaller0>
[   99.974333][ T9104] tipc: Disabling bearer <eth:syzkaller0>
[  100.039802][ T9108] netlink: 'syz.0.837': attribute type 2 has an invalid length.
[  100.187683][ T9118] syz_tun: entered allmulticast mode
[  100.191696][ T9118] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  100.195656][ T9117] syz_tun: left allmulticast mode
[  100.401085][ T9134] syzkaller1: entered promiscuous mode
[  100.403037][ T9134] syzkaller1: entered allmulticast mode
[  100.617414][ T9144] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  100.717066][ T9155] netlink: 'syz.1.852': attribute type 99 has an invalid length.
[  100.820992][ T9169] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  100.932388][ T9174] netlink: 'syz.1.858': attribute type 23 has an invalid length.
[  100.997539][ T9184] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  101.046972][ T9193] openvswitch: netlink: Flow key attr not present in new flow.
[  101.132074][ T9197] lo speed is unknown, defaulting to 1000
[  101.135472][ T9197] wg1 speed is unknown, defaulting to 1000
[  101.297334][ T9201] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.316003][ T9201] can: request_module (can-proto-4) failed.
[  101.407053][ T9210] sctp: [Deprecated]: syz.2.867 (pid 9210) Use of int in max_burst socket option.
[  101.407053][ T9210] Use struct sctp_assoc_value instead
[  101.485710][ T9213] sctp: [Deprecated]: syz.2.868 (pid 9213) Use of int in maxseg socket option.
[  101.485710][ T9213] Use struct sctp_assoc_value instead
[  101.628182][ T9228] lo speed is unknown, defaulting to 1000
[  101.630379][ T9228] wg1 speed is unknown, defaulting to 1000
[  101.658922][ T9232] bond6: (slave veth5): Releasing active interface
[  101.664901][ T9232] bond7: (slave wireguard0): Releasing backup interface
[  101.667566][ T9232] wireguard0: left promiscuous mode
[  101.669693][ T9232] bond7: (slave wireguard1): making interface the new active one
[  101.672068][ T9232] wireguard1: entered promiscuous mode
[  101.677672][ T9232] bond7: (slave wireguard1): Releasing backup interface
[  101.679959][ T9232] wireguard1: left promiscuous mode
[  101.704607][ T9235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.708215][ T9235] syzkaller0: entered promiscuous mode
[  101.709963][ T9235] syzkaller0: entered allmulticast mode
[  101.770485][ T9227] tipc: Resetting bearer <eth:syzkaller0>
[  101.775973][ T9227] tipc: Disabling bearer <eth:syzkaller0>
[  101.888951][ T9259] netlink: 'syz.2.881': attribute type 1 has an invalid length.
[  101.892537][ T9259] netlink: 'syz.2.881': attribute type 1 has an invalid length.
[  101.902564][ T9259] pimreg3: entered allmulticast mode
[  101.958846][ T9268] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  102.326372][ T9286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.329567][ T9286] syzkaller0: entered promiscuous mode
[  102.331756][ T9286] syzkaller0: entered allmulticast mode
[  102.943614][ T9283] tipc: Resetting bearer <eth:syzkaller0>
[  102.950401][ T9283] tipc: Disabling bearer <eth:syzkaller0>
[  102.954383][ T9291] bond0: entered promiscuous mode
[  102.956123][ T9291] bond0: entered allmulticast mode
[  102.960936][ T9291] openvswitch: netlink: IP tunnel dst address not specified
[  102.990074][ T9293] __nla_validate_parse: 87 callbacks suppressed
[  102.990088][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'.
[  103.011448][ T9293] bridge4: port 1(veth9) entered blocking state
[  103.014560][ T9293] bridge4: port 1(veth9) entered disabled state
[  103.016941][ T9293] veth9: entered allmulticast mode
[  103.020104][ T9293] veth9: entered promiscuous mode
[  103.026019][ T9293] bridge4: port 2(veth0_to_bond) entered blocking state
[  103.028410][ T9293] bridge4: port 2(veth0_to_bond) entered disabled state
[  103.030725][ T9293] veth0_to_bond: entered allmulticast mode
[  103.033630][ T9293] veth0_to_bond: entered promiscuous mode
[  103.039576][ T9293] vlan0: entered allmulticast mode
[  103.041325][ T9293] veth1: entered allmulticast mode
[  103.043115][ T9293] bridge4: port 3(vlan0) entered blocking state
[  103.045780][ T9293] bridge4: port 3(vlan0) entered disabled state
[  103.048415][ T9293] vlan0: entered promiscuous mode
[  103.050117][ T9293] veth1: entered promiscuous mode
[  103.067722][ T9297] netlink: 56 bytes leftover after parsing attributes in process `syz.1.892'.
[  103.071473][ T9297] tipc: Failed to remove unknown binding: 66,1,1/1278658916:3972048632/3972048634
[  103.075329][ T9297] tipc: Failed to remove unknown binding: 66,1,1/1278658916:3972048632/3972048634
[  103.078653][ T9297] tipc: Failed to remove unknown binding: 66,1,1/1278658916:3972048632/3972048634
[  103.078920][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'.
[  103.081910][ T9297] netlink: 56 bytes leftover after parsing attributes in process `syz.1.892'.
[  103.090123][ T9299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.893'.
[  103.090436][ T9297] netlink: 56 bytes leftover after parsing attributes in process `syz.1.892'.
[  103.098873][ T9297] netlink: 56 bytes leftover after parsing attributes in process `syz.1.892'.
[  103.100920][ T9299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.893'.
[  103.102366][ T9297] netlink: 56 bytes leftover after parsing attributes in process `syz.1.892'.
[  103.106168][ T9299] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  103.109395][ T9297] netlink: 56 bytes leftover after parsing attributes in process `syz.1.892'.
[  103.276209][ T9313] bridge5: the hash_elasticity option has been deprecated and is always 16
[  103.381055][ T9318] netlink: 'syz.1.898': attribute type 1 has an invalid length.
[  103.662019][ T9330] netlink: 'syz.1.904': attribute type 1 has an invalid length.
[  103.682726][ T9332] netlink: 'syz.1.905': attribute type 7 has an invalid length.
[  103.823130][ T9349] 8021q: adding VLAN 0 to HW filter on device bond8
[  103.855400][ T9355] ip6gre1: entered promiscuous mode
[  103.928269][ T9362] dvmrp8: entered allmulticast mode
[  103.937655][ T9354] dvmrp8: left allmulticast mode
[  103.948889][ T5710] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.955301][ T5710] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.958734][ T5710] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.961782][ T5710] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.044105][ T9370] syzkaller0: entered promiscuous mode
[  104.046146][ T9370] syzkaller0: entered allmulticast mode
[  104.194934][ T9379] IPVS: Error connecting to the multicast addr
[  104.346373][ T9388] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  104.351016][ T9389] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  104.511055][ T9402] sctp: [Deprecated]: syz.2.929 (pid 9402) Use of int in max_burst socket option.
[  104.511055][ T9402] Use struct sctp_assoc_value instead
[  104.614175][ T9417] validate_nla: 8 callbacks suppressed
[  104.614190][ T9417] netlink: 'syz.2.933': attribute type 30 has an invalid length.
[  104.628828][ T5871] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.633004][ T5871] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.636497][ T5871] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.639360][ T5871] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.661212][ T9421] !: renamed from dummy0 (while UP)
[  104.744551][ T9427] wg1 speed is unknown, defaulting to 1000
[  105.263929][ T9479] netlink: 'syz.0.936': attribute type 32 has an invalid length.
[  105.267221][ T9479] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  105.439422][ T9492] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  105.441810][ T9492] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  105.491718][ T9499] netlink: 'syz.1.941': attribute type 12 has an invalid length.
[  105.515073][ T9497] nbd: couldn't find a device at index 0
[  105.549482][ T9509] syzkaller0: entered promiscuous mode
[  105.551709][ T9510] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  105.551801][ T9509] syzkaller0: entered allmulticast mode
[  105.583517][ T9519] netlink: 'syz.0.946': attribute type 1 has an invalid length.
[  105.661183][ T9525] netlink: 'syz.0.949': attribute type 30 has an invalid length.
[  105.676702][ T9530] sctp: [Deprecated]: syz.1.951 (pid 9530) Use of int in max_burst socket option deprecated.
[  105.676702][ T9530] Use struct sctp_assoc_value instead
[  105.726839][ T9537] netlink: 'syz.1.953': attribute type 13 has an invalid length.
[  105.733250][ T9537] netlink: 'syz.1.953': attribute type 17 has an invalid length.
[  105.746952][ T9540] bond10: entered promiscuous mode
[  105.749037][ T9540] bond10: entered allmulticast mode
[  105.750951][ T9540] 8021q: adding VLAN 0 to HW filter on device bond10
[  105.767430][ T9537] bond0: left promiscuous mode
[  105.769022][ T9537] bond0: left allmulticast mode
[  105.777217][ T9537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.785767][ T9546] batadv0: entered promiscuous mode
[  105.787809][ T9546] batadv0: entered allmulticast mode
[  105.824106][ T9537] wg1 speed is unknown, defaulting to 1000
[  105.912109][ T9560] netlink: 'syz.1.960': attribute type 3 has an invalid length.
[  105.920459][ T9557] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  105.961975][ T9565] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  106.056790][ T9576] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  106.060013][ T9576] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  106.064603][ T9576] rdma_rxe: rxe_newlink: failed to add lo
[  106.218609][ T9593] netlink: 'syz.1.971': attribute type 4 has an invalid length.
[  106.228024][ T9593] netlink: 'syz.1.971': attribute type 4 has an invalid length.
[  107.024686][ T9632] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.150940][ T9641] 8021q: VLANs not supported on vxcan1
[  107.235279][ T9643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.239275][ T9643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.294528][ T9643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.301596][ T9643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.348047][ T9643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.351328][ T9643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.424209][ T9643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.428435][ T9643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.489403][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.492754][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.499974][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.503151][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.516677][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.519978][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.535260][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.538520][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.559079][ T9639] wg1 speed is unknown, defaulting to 1000
[  107.601984][ T9676] delete_channel: no stack
[  107.735360][ T9698] can: request_module (can-proto-5) failed.
[  108.211907][ T9717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.215434][ T9717] syzkaller0: entered promiscuous mode
[  108.217743][ T9717] syzkaller0: entered allmulticast mode
[  108.225959][ T9717] tipc: Resetting bearer <eth:syzkaller0>
[  108.229736][ T9716] tipc: Resetting bearer <eth:syzkaller0>
[  108.233944][ T9716] tipc: Disabling bearer <eth:syzkaller0>
[  108.320737][ T9720] __nla_validate_parse: 85 callbacks suppressed
[  108.320753][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1005'.
[  108.598814][ T9740] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  108.604762][ T9740] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  108.609043][ T9740] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  108.711725][ T9747] IPVS: stopping backup sync thread 9268 ...
[  109.097754][ T9773] syzkaller1: entered promiscuous mode
[  109.099714][ T9773] syzkaller1: entered allmulticast mode
[  109.159332][ T9776] sctp: [Deprecated]: syz.0.1021 (pid 9776) Use of int in max_burst socket option deprecated.
[  109.159332][ T9776] Use struct sctp_assoc_value instead
[  109.170288][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'.
[  109.350498][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1025'.
[  109.370757][ T9802] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1026'.
[  109.377043][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'.
[  109.380786][ T9802] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1026'.
[  109.427397][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'.
[  109.450190][ T9809] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1029'.
[  109.557895][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'.
[  109.561445][ T9817] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  109.606437][ T9823] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (809004142)
[  109.609670][ T9823] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  109.655005][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1035'.
[  109.763945][ T9841] syzkaller0: left promiscuous mode
[  109.766343][ T9841] syzkaller0: left allmulticast mode
[  109.768798][ T9841] tipc: Resetting bearer <eth:syzkaller0>
[  109.810040][ T9843] syzkaller0: entered promiscuous mode
[  109.812370][ T9843] syzkaller0: entered allmulticast mode
[  109.815616][ T9843] tipc: Resetting bearer <eth:syzkaller0>
[  110.523343][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  110.751754][ T9875] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  110.756553][ T9875] tipc: Resetting bearer <eth:syzkaller0>
[  111.676907][ T9903] bond8 (unregistering): Released all slaves
[  111.791382][ T9924] syzkaller1: entered promiscuous mode
[  111.794438][ T9924] syzkaller1: entered allmulticast mode
[  112.140702][ T9938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.149842][ T9939] syzkaller0: entered promiscuous mode
[  112.152200][ T9939] syzkaller0: entered allmulticast mode
[  112.201656][ T9929] tipc: Resetting bearer <eth:syzkaller0>
[  112.206786][ T9929] tipc: Disabling bearer <eth:syzkaller0>
[  112.348033][ T5871] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  113.105611][ T9964] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  113.141669][ T9968] wg1 speed is unknown, defaulting to 1000
[  113.195819][ T9976] validate_nla: 4 callbacks suppressed
[  113.195830][ T9976] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  113.201120][ T9976] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  113.209342][ T9976] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  113.212803][ T9976] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  113.216133][ T9976] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  113.219263][ T9976] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  113.222250][ T9976] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  113.226271][ T9976] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  113.236210][ T9976] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  113.241264][ T9976] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  113.326906][ T9995] __nla_validate_parse: 145 callbacks suppressed
[  113.326924][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'.
[  113.329741][ T9997] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1080'.
[  113.337963][ T9997] openvswitch: netlink: Flow key attr not present in new flow.
[  113.547467][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'.
[  113.615425][T10020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.695927][T10029] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1088'.
[  113.701854][T10029] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1088'.
[  113.715912][T10020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.777201][T10020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.828305][T10020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.866848][T10033] tipc: Can't bind to reserved service type 1
[  113.878339][ T5710] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.885157][ T5710] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.895509][ T5710] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.898764][ T5710] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.051191][T10043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.062510][T10043] bond0: entered promiscuous mode
[  114.065479][T10043] batadv0: entered promiscuous mode
[  114.068174][T10043] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  114.071792][T10043] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  114.076392][T10043] 8021q: adding VLAN 0 to HW filter on device hsr0
[  114.116558][T10045] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  114.181486][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'.
[  114.229144][T10055] bond0: entered allmulticast mode
[  114.231972][T10055] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.263140][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'.
[  114.287763][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'.
[  114.291938][T10060] netlink: 204124 bytes leftover after parsing attributes in process `syz.2.1098'.
[  114.377107][T10065] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1099'.
[  114.616871][T10078] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  114.801736][T10095] veth0_to_bond: left allmulticast mode
[  114.804116][T10095] veth0_to_bond: left promiscuous mode
[  114.806517][T10095] bridge4: port 2(veth0_to_bond) entered disabled state
[  114.817291][T10095] veth9: left allmulticast mode
[  114.818860][T10095] veth9: left promiscuous mode
[  114.820579][T10095] bridge4: port 1(veth9) entered disabled state
[  114.825355][T10095] vlan0: left allmulticast mode
[  114.827043][T10095] veth1: left allmulticast mode
[  114.828871][T10095] bridge4: port 3(vlan0) entered disabled state
[  114.866218][T10103] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  114.895243][T10107] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.898115][T10107] bond0: (slave wlan1): Opening slave failed
[  114.908341][T10107] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  114.911675][T10107] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  114.957013][T10113] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.962300][T10113] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.008309][T10113] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.011898][T10113] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.020098][T10115] 8021q: adding VLAN 0 to HW filter on device team0
[  115.023934][T10115] 0X: left allmulticast mode
[  115.026069][T10115] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  115.057050][T10113] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.062975][T10113] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.097269][T10113] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.101297][T10113] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.167899][ T5710] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.171274][ T5710] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.180118][ T5710] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.183542][ T5710] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.189755][ T5710] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.192728][ T5710] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.198616][ T5710] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.201777][ T5710] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.313081][T10138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.319444][T10138] syzkaller0: entered promiscuous mode
[  115.321611][T10138] syzkaller0: entered allmulticast mode
[  115.337711][T10138] tipc: Resetting bearer <eth:syzkaller0>
[  115.376373][T10137] tipc: Resetting bearer <eth:syzkaller0>
[  115.382344][T10137] tipc: Disabling bearer <eth:syzkaller0>
[  115.518220][T10160] openvswitch: netlink: Message has 4 unknown bytes.
[  115.743390][T10167] nbd1: detected capacity change from 0 to 63
[  115.762967][ T7007] block nbd1: Send control failed (result -32)
[  115.767763][ T7007] block nbd1: Request send failed, requeueing
[  115.772448][ T1118] block nbd1: Dead connection, failed to find a fallback
[  115.773314][   T56] block nbd1: Receive control failed (result -32)
[  115.774866][ T1118] block nbd1: shutting down sockets
[  115.778738][ T1118] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.782137][ T1118] Buffer I/O error on dev nbd1, logical block 0, async page read
[  115.784930][ T7007] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.790222][ T7007] Buffer I/O error on dev nbd1, logical block 1, async page read
[  115.794047][ T7007] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.797380][ T7007] Buffer I/O error on dev nbd1, logical block 2, async page read
[  115.799922][ T7007] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.802822][ T7007] Buffer I/O error on dev nbd1, logical block 3, async page read
[  115.806402][ T7007] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.809304][ T7007] Buffer I/O error on dev nbd1, logical block 0, async page read
[  115.812046][ T7007] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.815100][ T7007] Buffer I/O error on dev nbd1, logical block 1, async page read
[  115.817858][ T7007] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.821217][ T7007] Buffer I/O error on dev nbd1, logical block 2, async page read
[  115.824358][ T7007] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.827452][ T7007] Buffer I/O error on dev nbd1, logical block 3, async page read
[  115.830388][ T7007] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.833825][ T7007] Buffer I/O error on dev nbd1, logical block 0, async page read
[  115.837056][ T7007] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.840626][ T7007] Buffer I/O error on dev nbd1, logical block 1, async page read
[  115.850897][ T7007] ldm_validate_partition_table(): Disk read failed.
[  115.857399][ T7007] Dev nbd1: unable to read RDB block 0
[  115.860827][ T7007]  nbd1: unable to read partition table
[  115.945642][ T7007] ldm_validate_partition_table(): Disk read failed.
[  115.948536][ T7007] Dev nbd1: unable to read RDB block 0
[  115.951414][ T7007]  nbd1: unable to read partition table
[  116.153170][T10187] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  116.405795][T10195] syzkaller0: left promiscuous mode
[  116.407872][T10195] syzkaller0: left allmulticast mode
[  116.410059][T10195] tipc: Resetting bearer <eth:syzkaller0>
[  116.496581][T10198] wg1 speed is unknown, defaulting to 1000
[  116.985975][T10204] wg1 speed is unknown, defaulting to 1000
[  117.156149][T10233] Bluetooth: MGMT ver 1.23
[  117.295480][T10247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.298633][T10247] syzkaller0: entered promiscuous mode
[  117.300767][T10247] syzkaller0: entered allmulticast mode
[  117.316530][T10247] tipc: Resetting bearer <eth:syzkaller0>
[  117.387314][T10259] openvswitch: netlink: IP tunnel TTL not specified.
[  117.455296][T10246] tipc: Resetting bearer <eth:syzkaller0>
[  117.458951][T10246] tipc: Disabling bearer <eth:syzkaller0>
[  117.577431][T10269] veth1_macvtap: left allmulticast mode
[  117.579729][T10269] veth1_macvtap: left promiscuous mode
[  118.434524][T10281] __nla_validate_parse: 27 callbacks suppressed
[  118.434542][T10281] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1169'.
[  118.493139][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1170'.
[  118.550822][T10283] syzkaller0: entered promiscuous mode
[  118.562745][T10283] syzkaller0: entered allmulticast mode
[  118.826640][T10287] wg1 speed is unknown, defaulting to 1000
[  118.885285][T10292] wg1 speed is unknown, defaulting to 1000
[  118.995447][T10298] validate_nla: 97 callbacks suppressed
[  118.995466][T10298] netlink: 'syz.1.1175': attribute type 10 has an invalid length.
[  119.092719][T10316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1179'.
[  119.170587][T10321] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1182'.
[  119.267344][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.277638][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.283462][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.286657][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.290231][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.295026][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.298886][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.302089][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.305329][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.308680][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.312157][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.321361][T10336] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.329115][T10335] syzkaller0: entered promiscuous mode
[  119.331569][T10335] syzkaller0: entered allmulticast mode
[  119.335999][T10335] tipc: Resetting bearer <eth:syzkaller0>
[  119.339085][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'.
[  119.366644][T10341] team1: entered promiscuous mode
[  119.368803][T10341] team1: entered allmulticast mode
[  119.370894][T10341] 8021q: adding VLAN 0 to HW filter on device team1
[  119.413680][T10343] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1187'.
[  119.417950][T10345] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.421579][T10345] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.447404][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'.
[  119.777177][T10304] delete_channel: no stack
[  119.911611][   T33] audit: type=1107 audit(1756439875.308:2): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='iͤ8bv*䜺Nubjpsfha}:$~YfRްKj[c<45=ʙz#w5̶cNjG6ְ
[  119.911611][   T33] XQа#R[dx6+- ȝLNdDLLwIRCK|
[  119.911611][   T33] I;)i@6Y͐9suуq:uJ'-.$At)dde쳻nXk#V89e
[  119.911611][   T33] k*"Vб'1zͿxf^W9`Swԝ"k%}'r^JN̓Y"|a"AMK[+ݭ[y62I#]聵DT^c35, CI1հ&2ti"|=|AN&,S͇wq,TZ3iEj+_1zLB/t6l(]`ĠuبY,fb&b	@0"JiqBCH~<\"(7y/,՛8eshuh#ssc'b]vXҋ'
[  119.959396][T10365] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1193'.
[  119.968431][T10365] netlink: 608 bytes leftover after parsing attributes in process `syz.2.1193'.
[  119.972503][T10365] netlink: 'syz.2.1193': attribute type 39 has an invalid length.
[  120.165450][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'.
[  120.261442][T10376] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  120.265718][T10376] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  120.275648][T10376] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  120.280492][T10376] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  120.338000][T10384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.341357][T10384] syzkaller0: entered promiscuous mode
[  120.343715][T10384] syzkaller0: entered allmulticast mode
[  120.348114][T10388] netlink: 'syz.0.1202': attribute type 4 has an invalid length.
[  120.349596][T10384] tipc: Resetting bearer <eth:syzkaller0>
[  120.362338][T10388] netlink: 'syz.0.1202': attribute type 4 has an invalid length.
[  120.366681][T10386] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.369676][T10386] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.374932][T10383] tipc: Resetting bearer <eth:syzkaller0>
[  120.378335][T10383] tipc: Disabling bearer <eth:syzkaller0>
[  120.402252][T10393] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  120.408850][T10386] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.412704][T10386] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.476761][T10386] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.480961][T10386] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.517283][T10386] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.520479][T10386] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.599560][ T5871] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.602161][ T5871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.612110][ T5871] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.614974][ T5871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.623850][ T5710] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.628199][ T5710] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.635936][ T5710] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.643625][ T5710] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.943515][T10424] syzkaller0: entered allmulticast mode
[  120.951970][T10424] netlink: 'syz.1.1212': attribute type 1 has an invalid length.
[  121.366570][T10437] netlink: 'syz.1.1216': attribute type 1 has an invalid length.
[  121.369933][T10437] netlink: 'syz.1.1216': attribute type 4 has an invalid length.
[  122.067959][T10501] xfrm1: entered promiscuous mode
[  122.070021][T10501] xfrm1: entered allmulticast mode
[  122.156898][T10504] IPVS: Scheduler module ip_vs_ not found
[  122.419969][T10516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  122.453526][T10526] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  122.459591][T10528] syzkaller0: entered promiscuous mode
[  122.462274][T10528] syzkaller0: entered allmulticast mode
[  122.641359][T10550] netlink: 'syz.2.1247': attribute type 4 has an invalid length.
[  122.652181][T10550] netlink: 'syz.2.1247': attribute type 4 has an invalid length.
[  122.684826][T10552] tap0: tun_chr_ioctl cmd 1074025680
[  122.688350][T10552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.692608][T10552] D: renamed from syzkaller0
[  122.695949][T10552] tipc: Disabling bearer <eth:syzkaller0>
[  122.990439][T10563] netlink: 'syz.0.1251': attribute type 1 has an invalid length.
[  123.295851][T10570] batadv0: entered promiscuous mode
[  123.297734][T10570] batadv0: entered allmulticast mode
[  123.529846][T10575] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.593063][T10582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.650249][T10584] syzkaller1: entered promiscuous mode
[  123.652047][T10584] syzkaller1: entered allmulticast mode
[  123.735285][T10599] batman_adv: batadv0: Adding interface: dummy0
[  123.737511][T10599] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.749495][T10599] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  123.756266][T10597] wg1 speed is unknown, defaulting to 1000
[  123.758809][T10599] batman_adv: batadv0: Adding interface: ip6gretap1
[  123.761060][T10599] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.768917][T10599] batman_adv: batadv0: Interface activated: ip6gretap1
[  123.799986][T10605] __nla_validate_parse: 22 callbacks suppressed
[  123.800004][T10605] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1263'.
[  123.845512][T10597] geneve0: entered promiscuous mode
[  123.851373][T10608] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1264'.
[  123.998940][T10614] openvswitch: netlink: IPv4 tun info is not correct
[  124.039555][T10620] validate_nla: 2 callbacks suppressed
[  124.039574][T10620] netlink: 'syz.0.1267': attribute type 2 has an invalid length.
[  124.047360][T10620] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  124.050402][T10620] netlink: 'syz.0.1267': attribute type 2 has an invalid length.
[  124.055505][T10620] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  124.058608][T10620] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  124.061622][T10620] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  124.064619][T10620] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  124.099826][T10629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.108792][T10632] sctp: [Deprecated]: syz.2.1270 (pid 10632) Use of int in maxseg socket option.
[  124.108792][T10632] Use struct sctp_assoc_value instead
[  124.230263][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'.
[  124.233127][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  124.236872][T10644] netlink: 'syz.0.1273': attribute type 11 has an invalid length.
[  124.267980][T10646] netlink: 'syz.0.1274': attribute type 11 has an invalid length.
[  124.330920][T10648] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1275'.
[  124.551654][T10661] team0: Port device bond0 removed
[  124.555053][T10661] tipc: Resetting bearer <eth:syzkaller0>
[  124.557988][T10661] veth3: left allmulticast mode
[  124.559714][T10661] veth3: left promiscuous mode
[  124.561629][T10661] bridge2: port 1(veth3) entered disabled state
[  124.568122][T10661] vlan0: left promiscuous mode
[  124.570104][T10661] veth1: left promiscuous mode
[  124.572078][T10661] bridge2: port 2(vlan0) entered disabled state
[  124.579708][T10661] team0: Port device bond4 removed
[  124.585081][T10661] team0: Port device bridge3 removed
[  124.866906][T10668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.870153][T10668] syzkaller0: entered promiscuous mode
[  124.872284][T10668] syzkaller0: entered allmulticast mode
[  124.888275][T10667] tipc: Resetting bearer <eth:syzkaller0>
[  124.895889][T10667] tipc: Disabling bearer <eth:syzkaller0>
[  125.028161][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'.
[  125.065169][T10691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1287'.
[  125.070816][T10691] netlink: 'syz.2.1287': attribute type 10 has an invalid length.
[  125.075632][T10691] bond0: (slave wlan1): Opening slave failed
[  125.164929][T10698] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.168101][T10698] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.216074][T10698] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.219139][T10698] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.266679][T10698] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.269944][T10698] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.298671][T10706] batadv_slave_1: entered promiscuous mode
[  125.301502][T10706] batadv_slave_1: left promiscuous mode
[  125.322842][T10698] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  125.329327][T10698] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.375749][ T5871] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  125.379932][ T5871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.388078][T10711] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.1294'.
[  125.395003][ T5710] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  125.397798][ T5710] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.400587][ T5710] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  125.404032][ T5710] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.411752][ T5710] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  125.425859][ T5710] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.431937][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1295'.
[  125.435959][T10713] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1295'.
[  125.436190][T10711] syzkaller1: entered allmulticast mode
[  125.581479][T10721] batadv0: entered promiscuous mode
[  125.584893][T10721] batadv0: entered allmulticast mode
[  125.699386][T10724] openvswitch: netlink: Flow key attr not present in new flow.
[  125.757689][T10729] erspan0: mtu less than device minimum
[  125.792614][T10732] tipc: Resetting bearer <eth:syzkaller0>
[  125.806834][T10732] rdma_op ffff888039d931f0 conn xmit_rdma 0000000000000000
[  125.835608][T10741] 8021q: VLANs not supported on vxcan1
[  125.844284][T10737] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  125.898076][T10752] 8021q: adding VLAN 0 to HW filter on device bond5
[  125.906421][T10737] dvmrp8: entered allmulticast mode
[  125.912587][T10752] bond5: (slave geneve3): making interface the new active one
[  125.918435][T10752] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  125.925572][ T5710] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.930151][ T5710] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.933943][ T5710] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.936814][ T5710] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.939864][T10736] dvmrp8: left allmulticast mode
[  125.944178][T10752] syz.2.1309 (10752) used greatest stack depth: 17904 bytes left
[  125.994687][T10757] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.051153][T10767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.054513][T10767] syzkaller0: entered promiscuous mode
[  126.056679][T10767] syzkaller0: entered allmulticast mode
[  126.061271][T10767] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  126.066923][T10767] tipc: Resetting bearer <eth:syzkaller0>
[  126.069636][T10766] tipc: Resetting bearer <eth:syzkaller0>
[  126.074748][T10766] tipc: Disabling bearer <eth:syzkaller0>
[  126.267450][T10784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.915935][T10809] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.918740][T10808] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.220692][T10823] syzkaller1: entered promiscuous mode
[  127.223045][T10823] syzkaller1: entered allmulticast mode
[  127.376298][T10835] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  127.381845][T10835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.388129][T10835] syzkaller0: entered promiscuous mode
[  127.390417][T10835] syzkaller0: entered allmulticast mode
[  127.397628][T10835] tipc: Resetting bearer <eth:syzkaller0>
[  127.400844][T10834] tipc: Resetting bearer <eth:syzkaller0>
[  127.405880][T10834] tipc: Disabling bearer <eth:syzkaller0>
[  127.606166][T10845] Unsupported xt match
[  127.606180][T10845] unable to load match
[  127.813523][T10852] wg1 speed is unknown, defaulting to 1000
[  127.935418][T10867] 8021q: adding VLAN 0 to HW filter on device bond12
[  127.940280][T10867] ipvlan3: entered allmulticast mode
[  127.942006][T10867] bond12: entered allmulticast mode
[  127.948733][T10867] bond12: (slave gretap2): making interface the new active one
[  127.951168][T10867] gretap2: entered allmulticast mode
[  127.954767][T10867] bond12: (slave gretap2): Enslaving as an active interface with an up link
[  127.959359][T10867] syz.0.1341 (10867) used greatest stack depth: 17680 bytes left
[  128.536772][T10880] xfrm2: entered allmulticast mode
[  128.607010][T10887] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  128.611024][T10887] xfrm0: entered promiscuous mode
[  128.613077][T10887] xfrm0: entered allmulticast mode
[  128.924153][T10903] __nla_validate_parse: 24 callbacks suppressed
[  128.924200][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'.
[  128.929897][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'.
[  128.933580][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'.
[  128.996324][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'.
[  129.007330][T10913] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1355'.
[  129.036565][T10915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1356'.
[  129.040025][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'.
[  129.545729][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'.
[  129.549063][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1358'.
[  129.553873][T10923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1358'.
[  129.917518][T10931] validate_nla: 16 callbacks suppressed
[  129.917535][T10931] netlink: 'syz.0.1361': attribute type 1 has an invalid length.
[  129.923003][T10931] netlink: 'syz.0.1361': attribute type 1 has an invalid length.
[  130.018063][T10937] erspan0: entered promiscuous mode
[  130.049408][T10941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  130.342494][T10973] netlink: 'syz.1.1370': attribute type 9 has an invalid length.
[  130.527791][T10981] netlink: 'syz.2.1372': attribute type 3 has an invalid length.
[  130.538507][T10981] netlink: 'syz.2.1372': attribute type 3 has an invalid length.
[  130.609793][T10987] vlan2: entered allmulticast mode
[  130.611858][T10987] bond6: entered allmulticast mode
[  130.615491][T10987] bond6: (slave vlan2): Opening slave failed
[  130.760689][T11008] wg1 speed is unknown, defaulting to 1000
[  130.889194][T11008] netlink: 'syz.2.1379': attribute type 2 has an invalid length.
[  130.977561][T11024] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  131.830176][T11050] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  131.835206][T11049] IPVS: stopping backup sync thread 11050 ...
[  131.921925][T11060] Unsupported ieee802154 address type: 0
[  131.973641][T11066] netlink: 'syz.2.1399': attribute type 29 has an invalid length.
[  131.978339][T11066] netlink: 'syz.2.1399': attribute type 29 has an invalid length.
[  132.201539][T11081] chnl_net:caif_netlink_parms(): no params data found
[  132.331730][T11080] wg1: left promiscuous mode
[  132.335360][T11080] wg1: left allmulticast mode
[  132.417517][T11080] tipc: Resetting bearer <eth:ipvlan1>
[  132.434540][T11080] gretap1: left promiscuous mode
[  132.449336][T11080] tipc: Resetting bearer <eth:syzkaller0>
[  132.452992][T11080] syzkaller0: left promiscuous mode
[  132.455220][T11080] syzkaller0: left allmulticast mode
[  132.458383][T11080] ip6gretap0: left allmulticast mode
[  132.460868][T11080] macsec1: left promiscuous mode
[  132.462637][T11080] macsec1: left allmulticast mode
[  132.505657][T11080] vlan0: left allmulticast mode
[  132.507768][T11080] veth1: left allmulticast mode
[  132.510478][T11080] ip6gre1: left promiscuous mode
[  132.516764][T11080] ipvlan2: left allmulticast mode
[  132.518865][T11080] bond5: left allmulticast mode
[  132.520957][T11080] bridge3: left promiscuous mode
[  132.522787][T11080] bridge3: left allmulticast mode
[  132.536556][T11080] bond10: left promiscuous mode
[  132.539443][T11080] bond10: left allmulticast mode
[  132.543980][T11080] xfrm1: left promiscuous mode
[  132.545882][T11080] xfrm1: left allmulticast mode
[  132.549252][T11080] ipvlan3: left allmulticast mode
[  132.551045][T11080] bond12: left allmulticast mode
[  132.552624][T11080] gretap2: left allmulticast mode
[  132.563303][T11085] macsec0: entered allmulticast mode
[  132.566674][ T5710] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.569823][ T5710] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.572531][ T5710] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.575652][ T5710] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.578816][ T5710] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.581783][ T5710] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.585742][ T5710] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.588984][ T5710] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.670686][T11095] netlink: 'syz.2.1408': attribute type 1 has an invalid length.
[  132.699142][T11099] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  132.767374][T11104] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.771153][T11104] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.805336][T11110] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  132.830089][T11111] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.832833][T11111] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  132.839035][T11104] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.842828][T11104] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.886532][T11104] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.890478][T11104] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.928000][T11104] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  132.931366][T11104] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.997530][ T5710] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.001381][ T5710] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.016351][ T5710] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.019208][ T5710] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.034771][ T5710] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.042388][ T5710] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.046400][ T5710] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.049632][ T5710] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.088998][T11122] syzkaller0: entered promiscuous mode
[  133.090782][T11122] syzkaller0: entered allmulticast mode
[  133.104678][T11124] netlink: 'syz.0.1417': attribute type 5 has an invalid length.
[  133.135220][T11128] wg1 speed is unknown, defaulting to 1000
[  133.279476][T11138] syzkaller1: entered promiscuous mode
[  133.281630][T11138] syzkaller1: entered allmulticast mode
[  133.411273][T11143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.436099][T11145] tc_dump_action: action bad kind
[  133.531516][T11153] pim6reg1: entered promiscuous mode
[  133.535565][T11153] pim6reg1: entered allmulticast mode
[  133.756051][T11182] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  133.760206][T11182] syzkaller0: entered promiscuous mode
[  133.761969][T11182] syzkaller0: entered allmulticast mode
[  133.765740][T11182] tipc: Resetting bearer <eth:syzkaller0>
[  133.911170][T11203] wg1 speed is unknown, defaulting to 1000
[  134.168105][T11216] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  134.172163][T11216] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  134.175741][T11216] bond9: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  134.357720][T11222] __nla_validate_parse: 31 callbacks suppressed
[  134.357733][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1444'.
[  134.363003][T11222] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1444'.
[  134.397121][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1445'.
[  134.425518][T11227] syzkaller1: entered promiscuous mode
[  134.427416][T11227] syzkaller1: entered allmulticast mode
[  134.434302][T11227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1446'.
[  134.545394][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1447'.
[  135.540098][T11245] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1451'.
[  135.543055][T11245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1451'.
[  135.548652][T11245] syzkaller1: entered promiscuous mode
[  135.550918][T11245] syzkaller1: entered allmulticast mode
[  135.681904][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1453'.
[  135.721539][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1455'.
[  135.722569][T11251] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1454'.
[  135.761281][T11255] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.765607][T11255] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.789499][T11256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.798388][T11255] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.802139][T11255] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.875651][T11255] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.879342][T11255] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.935447][T11255] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.938626][T11255] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.993671][ T5871] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.996990][ T5871] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.005559][ T5871] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.008700][ T5871] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.016484][ T5871] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.019839][ T5871] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.027792][ T5871] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.031131][ T5871] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.167468][T11268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.171280][T11268] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  136.174427][T11268] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  136.182692][T11268] tipc: Resetting bearer <eth:syzkaller0>
[  136.382363][T11284] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  136.599107][T11308] wg1 speed is unknown, defaulting to 1000
[  136.674082][T11314] validate_nla: 6 callbacks suppressed
[  136.674098][T11314] netlink: 'syz.0.1473': attribute type 1 has an invalid length.
[  137.163428][ T5885] tipc: Node number set to 642710312
[  137.196623][T11323] syzkaller1: entered promiscuous mode
[  137.198399][T11323] syzkaller1: entered allmulticast mode
[  137.516199][T11339] pim6reg: entered allmulticast mode
[  138.020552][T11346] syzkaller1: entered promiscuous mode
[  138.022545][T11346] syzkaller1: entered allmulticast mode
[  138.025682][T11346] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  138.110371][T11350] wg1 speed is unknown, defaulting to 1000
[  138.209839][T11356] vlan2: entered promiscuous mode
[  138.211644][T11356] vlan2: entered allmulticast mode
[  138.309120][T11363] bridge_slave_0: default FDB implementation only supports local addresses
[  138.315034][T11363] netlink: 'syz.2.1488': attribute type 6 has an invalid length.
[  138.501921][T11390] tap0: tun_chr_ioctl cmd 35108
[  138.504730][T11390] netlink: 'syz.0.1496': attribute type 1 has an invalid length.
[  138.518623][T11390] bond13: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  138.596386][T11396] netlink: 'syz.0.1498': attribute type 1 has an invalid length.
[  138.713107][T11426] netlink: 'syz.2.1507': attribute type 7 has an invalid length.
[  138.718035][T11426] netlink: 'syz.2.1507': attribute type 8 has an invalid length.
[  138.722569][T11426] dummy0: entered promiscuous mode
[  138.725099][T11426] team0: entered promiscuous mode
[  138.728155][T11426] dummy0: left promiscuous mode
[  138.733445][T11426] team0: left promiscuous mode
[  138.917556][T11453] bond14: entered promiscuous mode
[  138.929223][T11453] bond14: entered allmulticast mode
[  138.940539][T11453] 8021q: adding VLAN 0 to HW filter on device bond14
[  139.170220][T11465] tipc: New replicast peer: 255.255.255.255
[  139.172505][T11465] tipc: Enabled bearer <udp:s>, priority 10
[  139.263020][T11480] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  139.578318][T11501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.621793][T11505] syz_tun: entered promiscuous mode
[  139.625073][T11505] batadv_slave_0: entered promiscuous mode
[  139.627930][T11505] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  139.631255][T11505] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  139.635466][T11505] hsr1: entered allmulticast mode
[  139.637368][T11505] syz_tun: entered allmulticast mode
[  139.639196][T11505] batadv_slave_0: entered allmulticast mode
[  139.646965][T11505] : renamed from wg2
[  139.649929][T11505] sctp: [Deprecated]: syz.2.1529 (pid 11505) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.649929][T11505] Use struct sctp_sack_info instead
[  139.937552][T11473] delete_channel: no stack
[  139.953850][T11518] __nla_validate_parse: 21 callbacks suppressed
[  139.953867][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'.
[  139.959782][T11518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1533'.
[  139.964880][T11518] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  139.971428][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'.
[  139.976879][T11519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1533'.
[  140.078093][T11530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1537'.
[  140.161417][T11542] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1539'.
[  140.189286][T11545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1540'.
[  140.228906][T11547] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  140.319242][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'.
[  140.484619][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'.
[  140.490584][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'.
[  140.564261][T11587] syzkaller1: entered promiscuous mode
[  140.566012][T11587] syzkaller1: entered allmulticast mode
[  140.592105][T11589] netlink: 'syz.2.1555': attribute type 1 has an invalid length.
[  140.602541][T11589] 8021q: adding VLAN 0 to HW filter on device bond10
[  140.722581][T11589] erspan0: entered allmulticast mode
[  140.864543][T11610] sctp: [Deprecated]: syz.0.1561 (pid 11610) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.864543][T11610] Use struct sctp_sack_info instead
[  140.869632][T11610] sctp: [Deprecated]: syz.0.1561 (pid 11610) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.869632][T11610] Use struct sctp_sack_info instead
[  140.879890][T11610] syzkaller1: entered promiscuous mode
[  140.881580][T11610] syzkaller1: entered allmulticast mode
[  141.041152][T11622] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.084401][ T5842] Bluetooth: hci2: link tx timeout
[  141.086302][ T5842] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  141.088995][ T5842] Bluetooth: hci2: link tx timeout
[  141.090682][ T5842] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.217490][T11640] netlink: 'syz.0.1570': attribute type 21 has an invalid length.
[  141.220860][T11640] netlink: 'syz.0.1570': attribute type 5 has an invalid length.
[  141.224655][T11640] netlink: 'syz.0.1570': attribute type 6 has an invalid length.
[  141.283731][T11653] team0: Mode changed to "loadbalance"
[  141.298686][T11649] wg1 speed is unknown, defaulting to 1000
[  141.323512][ T5842] Bluetooth: hci0: command tx timeout
[  141.344406][T11658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.430904][T11665] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.482818][T11669] bond0: (slave wlan1): Opening slave failed
[  141.657384][T11680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.678875][T11680] wg1 speed is unknown, defaulting to 1000
[  142.006953][T11687] tipc: Resetting bearer <eth:gre0>
[  142.043944][T11687] tipc: Resetting bearer <ib:ip6gre0>
[  142.201101][T11687] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  142.204541][T11687] bond1: left promiscuous mode
[  142.206236][T11687] bond1: left allmulticast mode
[  142.210056][T11687] bond3: left promiscuous mode
[  142.271184][T11687] geneve0: left promiscuous mode
[  142.274742][T11687] geneve0: left allmulticast mode
[  142.291401][T11687] veth5: left promiscuous mode
[  142.294392][T11687] bond7: left promiscuous mode
[  142.310928][T11687] vlan0: left promiscuous mode
[  142.313799][T11687] veth1: left promiscuous mode
[  142.315977][T11687] ip6gre1: left promiscuous mode
[  142.335348][T11687] team1: left promiscuous mode
[  142.337347][T11687] team1: left allmulticast mode
[  142.352915][ T5710] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.356285][ T5710] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.375152][ T5710] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.378756][ T5710] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.381864][ T5710] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.386562][ T5710] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.390100][ T5710] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.394089][ T5710] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.590305][T11708] sctp: [Deprecated]: syz.1.1591 (pid 11708) Use of int in maxseg socket option.
[  142.590305][T11708] Use struct sctp_assoc_value instead
[  143.163352][ T5842] Bluetooth: hci2: command 0x0405 tx timeout
[  143.253999][T11720] unsupported nlmsg_type 40
[  143.563133][T11729] vti0: entered promiscuous mode
[  143.595896][T11733] tipc: New replicast peer: 0.0.0.0
[  143.598289][T11733] tipc: Enabled bearer <udp:syz2>, priority 10
[  143.602307][T11733] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  143.745290][T11698] Set syz1 is full, maxelem 65536 reached
[  143.816177][T11744] validate_nla: 3 callbacks suppressed
[  143.816193][T11744] netlink: 'syz.2.1602': attribute type 1 has an invalid length.
[  143.848642][T11744] 8021q: adding VLAN 0 to HW filter on device bond12
[  143.851528][T11744] bond11: (slave bond12): making interface the new active one
[  143.854968][T11744] bond11: (slave bond12): Enslaving as an active interface with an up link
[  143.860207][T11744] netlink: 'syz.2.1602': attribute type 13 has an invalid length.
[  143.902555][T11753] veth0: entered promiscuous mode
[  143.907229][T11752] veth0: left promiscuous mode
[  144.012006][T11759] tipc: Bearer <ib:lo>: already 2 bearers with priority 10
[  144.015396][T11759] tipc: Bearer <ib:lo>: trying with adjusted priority
[  144.018208][T11759] tipc: Enabling of bearer <ib:lo> rejected, max 3 bearers permitted
[  144.074922][T11763] wg1 speed is unknown, defaulting to 1000
[  144.155830][T11763] netlink: 'syz.2.1608': attribute type 2 has an invalid length.
[  144.158422][T11763] netlink: 'syz.2.1608': attribute type 2 has an invalid length.
[  144.223470][T11767] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.261749][T11769] netlink: 'syz.2.1610': attribute type 2 has an invalid length.
[  144.267797][T11769] netlink: 'syz.2.1610': attribute type 2 has an invalid length.
[  144.385380][T11776] netlink: 'syz.2.1612': attribute type 21 has an invalid length.
[  144.390289][T11776] ipvlan3: entered promiscuous mode
[  144.392566][T11776] bridge0: port 1(ipvlan3) entered blocking state
[  144.395861][T11776] bridge0: port 1(ipvlan3) entered disabled state
[  144.398228][T11776] ipvlan3: entered allmulticast mode
[  144.400260][T11776] gretap0: entered allmulticast mode
[  144.402898][T11776] ipvlan3: left allmulticast mode
[  144.405132][T11776] gretap0: left allmulticast mode
[  144.642786][T11794] bridge4: entered promiscuous mode
[  144.748418][T11801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.755978][T11801] tipc: Failed to remove unknown binding: 66,1,1/3009321643:2721615493/2721615495
[  144.761560][T11801] tipc: Failed to remove unknown binding: 66,1,1/3009321643:2721615493/2721615495
[  144.767577][T11801] tipc: Failed to remove unknown binding: 66,1,1/3009321643:2721615493/2721615495
[  144.823936][T11803] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.829420][T11803] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.867577][T11814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.882663][T11803] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.887074][T11803] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.925914][T11803] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.929720][T11803] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.057663][T11803] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  145.061538][T11803] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.111245][ T5870] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.114827][ T5870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.121319][ T5870] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.124848][ T5870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.125115][T11824] netlink: 'syz.1.1627': attribute type 1 has an invalid length.
[  145.139393][T11824] 8021q: adding VLAN 0 to HW filter on device bond8
[  145.142491][ T5870] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.146207][ T5870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.157389][ T5710] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.160077][ T5710] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.162866][T11824] __nla_validate_parse: 21 callbacks suppressed
[  145.162876][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'.
[  145.171238][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1627'.
[  145.191528][T11827] veth1_to_bond: entered allmulticast mode
[  145.194226][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'.
[  145.200372][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'.
[  145.204815][T11829] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  145.205442][T11827] veth1_to_bond (unregistering): left allmulticast mode
[  145.208006][T11829] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.245069][ T5842] Bluetooth: hci2: command 0x0405 tx timeout
[  145.283455][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'.
[  145.289570][T11837] netlink: 'syz.1.1631': attribute type 9 has an invalid length.
[  145.292475][T11838] vlan3: entered allmulticast mode
[  145.295131][T11838] bridge0: entered allmulticast mode
[  145.497572][T11857] wg1 speed is unknown, defaulting to 1000
[  145.538901][T11857] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1638'.
[  145.544656][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'.
[  145.548628][T11860] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  145.566877][T11857] wg1 speed is unknown, defaulting to 1000
[  145.819544][T11892] netlink: 'syz.0.1647': attribute type 10 has an invalid length.
[  145.878590][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1653'.
[  145.887350][T11900] hsr_slave_1 (unregistering): left promiscuous mode
[  145.932871][T11902] lo speed is unknown, defaulting to 1000
[  145.935693][T11902] lo speed is unknown, defaulting to 1000
[  145.937993][T11902] lo speed is unknown, defaulting to 1000
[  145.943085][T11902] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  145.960595][T11902] lo speed is unknown, defaulting to 1000
[  145.965079][T11902] lo speed is unknown, defaulting to 1000
[  145.967471][T11902] lo speed is unknown, defaulting to 1000
[  145.970463][T11902] lo speed is unknown, defaulting to 1000
[  146.114046][T11910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1656'.
[  146.123160][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1656'.
[  146.138471][T11910] hsr_slave_1 (unregistering): left promiscuous mode
[  146.158180][T11912] sctp: [Deprecated]: syz.1.1657 (pid 11912) Use of int in max_burst socket option.
[  146.158180][T11912] Use struct sctp_assoc_value instead
[  146.270733][T11925] wg1 speed is unknown, defaulting to 1000
[  146.274097][T11925] lo speed is unknown, defaulting to 1000
[  146.786223][T11956] erspan0: left allmulticast mode
[  146.794590][T11956] xfrm0: left promiscuous mode
[  146.796779][T11956] xfrm0: left allmulticast mode
[  146.798480][T11956] .70: left allmulticast mode
[  146.800010][T11956] hsr_slave_0: left allmulticast mode
[  146.802481][T11956] macsec0: left allmulticast mode
[  146.811465][T11956] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  146.829528][T11956] xfrm2: left allmulticast mode
[  146.835693][T11956] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  146.839103][T11956] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  146.848386][T11956] vlan2: left promiscuous mode
[  146.850336][T11956] vlan2: left allmulticast mode
[  146.852204][T11956] bond0: left allmulticast mode
[  146.854560][T11956] hsr1: left allmulticast mode
[  146.856530][T11956] syz_tun: left allmulticast mode
[  146.858167][T11956] batadv_slave_0: left allmulticast mode
[  146.862286][T11956] vti0: left promiscuous mode
[  146.868145][T11956] bridge4: left promiscuous mode
[  146.872072][T11956] vlan3: left allmulticast mode
[  146.873953][T11956] bridge0: left allmulticast mode
[  146.875938][ T5905] lo speed is unknown, defaulting to 1000
[  146.875976][ T5871] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.877705][ T5905] syz1: Port: 1 Link DOWN
[  146.882339][ T5871] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.885219][ T5871] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.888348][ T5871] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.891676][ T5871] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.895267][ T5871] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.901628][ T5871] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.905408][ T5871] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  147.099960][T11995] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  147.102752][T11995] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  147.359760][T11997] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  147.363735][T11997] tipc: Resetting bearer <eth:syzkaller0>
[  147.369454][T11997] syzkaller0: left promiscuous mode
[  147.371618][T11997] syzkaller0: left allmulticast mode
[  147.402233][T11997] bond14: left promiscuous mode
[  147.404435][T11997] bond14: left allmulticast mode
[  147.538460][T11997] Set syz1 is full, maxelem 65536 reached
[  147.632484][T12007] syzkaller1: entered promiscuous mode
[  147.634363][T12007] syzkaller1: entered allmulticast mode
[  147.828635][T12023] syzkaller0: entered allmulticast mode
[  147.926725][T11994] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  147.929289][T11994] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  147.937999][T11994] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  147.942978][T11994] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  148.037527][T12036] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  148.277642][T12068] 8021q: adding VLAN 0 to HW filter on device team0
[  148.280898][T12068] team0: entered promiscuous mode
[  148.283156][T12068] bond0: (slave team0): Enslaving as an active interface with an up link
[  148.314449][T12070] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.318636][T12070] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  148.321855][T12070] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  148.435151][T12083] vlan4: entered promiscuous mode
[  148.436879][T12083] bridge0: entered promiscuous mode
[  148.599783][T12102] geneve2: entered promiscuous mode
[  148.603101][ T5870] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.608511][ T5870] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.611610][ T5870] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.615087][ T5870] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.618663][T12102] syzkaller0: entered promiscuous mode
[  148.625050][T12102] syzkaller0: entered allmulticast mode
[  148.628285][T12102] tipc: Resetting bearer <eth:syzkaller0>
[  148.666872][T12112] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.852511][T12134] validate_nla: 10 callbacks suppressed
[  148.852526][T12134] netlink: 'syz.2.1724': attribute type 5 has an invalid length.
[  148.892210][T12136] openvswitch: netlink: IPv4 tun info is not correct
[  148.975675][T12142] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  149.122965][T12148] netlink: 'syz.2.1731': attribute type 10 has an invalid length.
[  149.125786][T12148] batman_adv: batadv0: Removing interface: dummy0
[  149.130471][T12148] dummy0: entered promiscuous mode
[  149.133124][T12148] team0: Failed to send options change via netlink (err -105)
[  149.137483][T12148] team0: Port device dummy0 added
[  149.141220][T12148] netlink: 'syz.2.1731': attribute type 10 has an invalid length.
[  149.144264][T12148] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  149.148735][T12148] dummy0: left promiscuous mode
[  149.152855][T12148] team0: Failed to send options change via netlink (err -105)
[  149.157124][T12148] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  149.161806][T12148] team0: Port device dummy0 removed
[  149.167516][T12148] dummy0: entered promiscuous mode
[  149.170324][T12148] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  149.195496][T12150] wg1 speed is unknown, defaulting to 1000
[  149.197940][T12150] lo speed is unknown, defaulting to 1000
[  152.250765][T12176] netlink: 'syz.1.1738': attribute type 5 has an invalid length.
[  152.261233][T12183] netlink: 'syz.2.1739': attribute type 4 has an invalid length.
[  152.271678][T12177] __nla_validate_parse: 29 callbacks suppressed
[  152.271691][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'.
[  152.271680][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'.
[  152.317170][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'.
[  152.320597][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'.
[  152.331715][T12194] netlink: 'syz.0.1744': attribute type 4 has an invalid length.
[  152.334226][T12194] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1744'.
[  152.376882][T12202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1745'.
[  152.386996][T12198] pim6reg: left allmulticast mode
[  152.471995][T12213] wg1 speed is unknown, defaulting to 1000
[  152.474773][T12213] lo speed is unknown, defaulting to 1000
[  152.484896][T12214] pim6reg1: entered promiscuous mode
[  152.487097][T12214] pim6reg1: entered allmulticast mode
[  152.515794][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'.
[  152.550928][T12221] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.715685][T12247] netlink: 'syz.1.1756': attribute type 9 has an invalid length.
[  152.718719][T12247] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1756'.
[  152.764024][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'.
[  152.797501][T12253] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1759'.
[  152.812137][T12257] netlink: 'syz.2.1760': attribute type 10 has an invalid length.
[  152.819650][T12257] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  152.833171][T12260] tipc: Bearer <eth:macvtap0>: already 2 bearers with priority 10
[  152.841296][T12260] tipc: Bearer <eth:macvtap0>: trying with adjusted priority
[  152.846106][T12260] tipc: Enabled bearer <eth:macvtap0>, priority 9
[  152.854689][T12260] netlink: 'syz.1.1761': attribute type 1 has an invalid length.
[  152.885852][T12267] sctp: [Deprecated]: syz.1.1763 (pid 12267) Use of int in maxseg socket option.
[  152.885852][T12267] Use struct sctp_assoc_value instead
[  153.007176][T12284] bond0: (slave team0): Releasing backup interface
[  153.010043][T12284] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  153.017504][T12284] team0 (unregistering): left promiscuous mode
[  153.108635][T12289] tipc: Bearer <eth:macvtap0>: already 2 bearers with priority 10
[  153.111666][T12289] tipc: Bearer <eth:macvtap0>: trying with adjusted priority
[  153.116791][T12289] tipc: Enabling of bearer <eth:macvtap0> rejected, max 3 bearers permitted
[  153.121814][T12289] netlink: 'syz.2.1770': attribute type 1 has an invalid length.
[  153.150234][T12291] bond9: entered promiscuous mode
[  153.673635][T12324] tipc: Resetting bearer <eth:syzkaller0>
[  153.675967][T12324] bond12: (slave gretap2): Releasing active interface
[  153.680108][T12324] bond13: (slave ip6gretap3): Releasing backup interface
[  153.684401][T12324] rdma_op ffff888039a5e9f0 conn xmit_rdma 0000000000000000
[  154.728703][T12368] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  154.731771][T12368] syzkaller0: entered promiscuous mode
[  154.733794][T12368] syzkaller0: entered allmulticast mode
[  154.752366][T12370] veth7: entered allmulticast mode
[  154.845117][T12374] validate_nla: 2 callbacks suppressed
[  154.845128][T12374] netlink: 'syz.1.1798': attribute type 3 has an invalid length.
[  154.851761][T12376] tipc: Resetting bearer <eth:syzkaller0>
[  154.859394][T12376] netlink: 'syz.0.1799': attribute type 8 has an invalid length.
[  154.877244][T12376] team0: Failed to send options change via netlink (err -105)
[  154.880484][T12376] team0: Mode changed to "loadbalance"
[  155.840426][T12409] pim6reg1: entered promiscuous mode
[  155.848292][T12409] pim6reg1: entered allmulticast mode
[  155.858658][T12412] netlink: 'syz.0.1808': attribute type 1 has an invalid length.
[  155.909941][T12412] 8021q: adding VLAN 0 to HW filter on device bond15
[  155.967720][T12422] pim6reg1: entered promiscuous mode
[  155.969614][T12422] pim6reg1: entered allmulticast mode
[  156.047438][T12422] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  156.049881][T12422] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  156.076560][T12422] bond13 (unregistering): Released all slaves
[  156.182910][T12446] sctp: [Deprecated]: syz.2.1818 (pid 12446) Use of int in maxseg socket option.
[  156.182910][T12446] Use struct sctp_assoc_value instead
[  156.233307][T12455] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  156.257357][T12455] syzkaller0: entered promiscuous mode
[  156.259354][T12455] syzkaller0: entered allmulticast mode
[  156.298818][T12459] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  156.377407][T12463] syzkaller1: entered promiscuous mode
[  156.379204][T12463] syzkaller1: entered allmulticast mode
[  156.581246][T12485] netlink: 'syz.0.1830': attribute type 1 has an invalid length.
[  156.600801][T12485] bond16: entered promiscuous mode
[  156.602615][T12485] 8021q: adding VLAN 0 to HW filter on device bond16
[  156.618675][T12489] netlink: 'syz.2.1831': attribute type 10 has an invalid length.
[  156.620834][T12485] 8021q: adding VLAN 0 to HW filter on device bond16
[  156.625226][T12485] bond16: (slave wireguard0): The slave device specified does not support setting the MAC address
[  156.628718][T12485] bond16: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  156.633942][T12485] bond16: (slave wireguard0): making interface the new active one
[  156.636490][T12485] wireguard0: entered promiscuous mode
[  156.639103][T12485] bond16: (slave wireguard0): Enslaving as an active interface with an up link
[  156.645214][T12493] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  156.660858][T12485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.663117][T12485] IPv6: NLM_F_CREATE should be set when creating new route
[  156.665424][T12485] IPv6: NLM_F_CREATE should be set when creating new route
[  156.668072][T12485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.675867][T12493] bond10: entered promiscuous mode
[  156.677454][T12493] bond10: entered allmulticast mode
[  156.679272][T12493] 8021q: adding VLAN 0 to HW filter on device bond10
[  156.698882][T12498] wg1 speed is unknown, defaulting to 1000
[  156.711688][T12498] lo speed is unknown, defaulting to 1000
[  156.731995][T12503] netlink: 'syz.0.1835': attribute type 1 has an invalid length.
[  156.740539][T12503] 8021q: adding VLAN 0 to HW filter on device bond17
[  156.747454][T12503] bond17: (slave gretap4): making interface the new active one
[  156.750259][T12503] bond17: (slave gretap4): Enslaving as an active interface with an up link
[  156.873571][T12527] netlink: 'syz.0.1841': attribute type 62 has an invalid length.
[  158.016196][T12571] tipc: Resetting bearer <eth:syzkaller0>
[  158.186473][T12581] __nla_validate_parse: 35 callbacks suppressed
[  158.186489][T12581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1855'.
[  158.310253][T12605] vlan3: entered promiscuous mode
[  158.312748][T12605] hsr_slave_1: entered promiscuous mode
[  158.345207][T12605] vlan3: entered allmulticast mode
[  158.347122][T12605] hsr_slave_1: entered allmulticast mode
[  158.460349][T12618] netlink: 'syz.1.1864': attribute type 10 has an invalid length.
[  158.464329][T12618] 8021q: adding VLAN 0 to HW filter on device team0
[  158.467256][T12618] bond0: (slave team0): Enslaving as an active interface with an up link
[  158.588552][T12634] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  158.591551][T12634] syzkaller0: entered promiscuous mode
[  158.593805][T12634] syzkaller0: entered allmulticast mode
[  158.601188][T12635] syzkaller0: left promiscuous mode
[  158.603306][T12635] syzkaller0: left allmulticast mode
[  158.628025][T12640] netlink: 'syz.0.1872': attribute type 7 has an invalid length.
[  158.631044][T12640] netlink: 'syz.0.1872': attribute type 8 has an invalid length.
[  158.664429][T12642] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1873'.
[  158.668048][T12642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1873'.
[  158.678088][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1873'.
[  158.681099][T12642] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  158.707541][T12644] ==================================================================
[  158.710742][T12644] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  158.713953][T12644] Read of size 1 at addr ffff8881124ae2b0 by task syz.1.1874/12644
[  158.718180][T12644] 
[  158.719162][T12644] CPU: 0 UID: 0 PID: 12644 Comm: syz.1.1874 Not tainted syzkaller #0 PREEMPT(full) 
[  158.719181][T12644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.719190][T12644] Call Trace:
[  158.719210][T12644]  <TASK>
[  158.719216][T12644]  dump_stack_lvl+0x189/0x250
[  158.719237][T12644]  ? __virt_addr_valid+0x1c8/0x5c0
[  158.719254][T12644]  ? rcu_is_watching+0x15/0xb0
[  158.719268][T12644]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.719290][T12644]  ? rcu_is_watching+0x15/0xb0
[  158.719301][T12644]  ? lock_release+0x4b/0x3e0
[  158.719319][T12644]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  158.719339][T12644]  ? __virt_addr_valid+0x1c8/0x5c0
[  158.719355][T12644]  ? __virt_addr_valid+0x4a5/0x5c0
[  158.719371][T12644]  print_report+0xca/0x240
[  158.719385][T12644]  ? __xfrm_state_insert+0x8af/0x1450
[  158.719399][T12644]  kasan_report+0x118/0x150
[  158.719417][T12644]  ? __xfrm_state_insert+0x8af/0x1450
[  158.719431][T12644]  __xfrm_state_insert+0x8af/0x1450
[  158.719447][T12644]  ? xfrm_state_insert+0x44/0x60
[  158.719461][T12644]  xfrm_state_insert+0x54/0x60
[  158.719474][T12644]  ipcomp6_init_state+0x655/0x900
[  158.719491][T12644]  __xfrm_init_state+0xa76/0x13f0
[  158.719507][T12644]  ? __xfrm_init_state+0x7ef/0x13f0
[  158.719524][T12644]  xfrm_add_sa+0x2f5b/0x4070
[  158.719544][T12644]  ? __pfx_xfrm_add_sa+0x10/0x10
[  158.719558][T12644]  ? apparmor_capable+0x137/0x1b0
[  158.719576][T12644]  ? __nla_parse+0x40/0x60
[  158.719596][T12644]  xfrm_user_rcv_msg+0x7a3/0xab0
[  158.719614][T12644]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  158.719643][T12644]  ? __pfx___mutex_trylock_common+0x10/0x10
[  158.719658][T12644]  ? kasan_save_track+0x4f/0x80
[  158.719674][T12644]  ? rcu_is_watching+0x15/0xb0
[  158.719687][T12644]  ? trace_contention_end+0x39/0x120
[  158.719701][T12644]  ? __mutex_lock+0x335/0x1350
[  158.719715][T12644]  netlink_rcv_skb+0x208/0x470
[  158.719736][T12644]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  158.719752][T12644]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  158.719775][T12644]  ? lock_release+0x4b/0x3e0
[  158.719792][T12644]  ? net_generic+0x1e/0x240
[  158.719807][T12644]  ? net_generic+0x1e/0x240
[  158.719823][T12644]  ? netlink_deliver_tap+0x2e/0x1b0
[  158.719843][T12644]  xfrm_netlink_rcv+0x79/0x90
[  158.719859][T12644]  netlink_unicast+0x82f/0x9e0
[  158.719879][T12644]  ? __pfx_netlink_unicast+0x10/0x10
[  158.719898][T12644]  ? netlink_sendmsg+0x642/0xb30
[  158.719908][T12644]  ? skb_put+0x11b/0x210
[  158.719923][T12644]  netlink_sendmsg+0x805/0xb30
[  158.719938][T12644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.719951][T12644]  ? futex_unqueue+0x22/0x240
[  158.719965][T12644]  ? aa_sock_msg_perm+0xf1/0x1d0
[  158.719978][T12644]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  158.719993][T12644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  158.720037][T12644]  __sock_sendmsg+0x21c/0x270
[  158.720056][T12644]  ____sys_sendmsg+0x505/0x830
[  158.720072][T12644]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.720089][T12644]  ? import_iovec+0x74/0xa0
[  158.720104][T12644]  ___sys_sendmsg+0x21f/0x2a0
[  158.720119][T12644]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.720134][T12644]  ? futex_wait+0x285/0x360
[  158.720162][T12644]  ? __fget_files+0x2a/0x420
[  158.720174][T12644]  ? __fget_files+0x3a0/0x420
[  158.720189][T12644]  __x64_sys_sendmsg+0x19b/0x260
[  158.720204][T12644]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  158.720222][T12644]  ? rcu_is_watching+0x15/0xb0
[  158.720236][T12644]  ? rcu_is_watching+0x15/0xb0
[  158.720250][T12644]  do_syscall_64+0xfa/0x3b0
[  158.720264][T12644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.720282][T12644]  ? exc_page_fault+0x9f/0xf0
[  158.720302][T12644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.720315][T12644] RIP: 0033:0x7f333bd8ebe9
[  158.720329][T12644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.720341][T12644] RSP: 002b:00007f333cb4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  158.720357][T12644] RAX: ffffffffffffffda RBX: 00007f333bfb5fa0 RCX: 00007f333bd8ebe9
[  158.720368][T12644] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 0000000000000005
[  158.720377][T12644] RBP: 00007f333be11e19 R08: 0000000000000000 R09: 0000000000000000
[  158.720385][T12644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.720393][T12644] R13: 00007f333bfb6038 R14: 00007f333bfb5fa0 R15: 00007ffeb630bba8
[  158.720410][T12644]  </TASK>
[  158.720415][T12644] 
[  158.870273][T12644] Allocated by task 9328:
[  158.871978][T12644]  kasan_save_track+0x3e/0x80
[  158.873613][T12644]  __kasan_slab_alloc+0x6c/0x80
[  158.875205][T12644]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  158.876910][T12644]  xfrm_state_alloc+0x24/0x2f0
[  158.878355][T12644]  __find_acq_core+0x8a7/0x1c00
[  158.880149][T12644]  xfrm_find_acq+0x78/0xa0
[  158.881581][T12644]  xfrm_alloc_userspi+0x6b3/0xc90
[  158.883051][T12644]  xfrm_user_rcv_msg+0x7a3/0xab0
[  158.884679][T12644]  netlink_rcv_skb+0x208/0x470
[  158.886470][T12644]  xfrm_netlink_rcv+0x79/0x90
[  158.888143][T12644]  netlink_unicast+0x82f/0x9e0
[  158.889923][T12644]  netlink_sendmsg+0x805/0xb30
[  158.891443][T12644]  __sock_sendmsg+0x21c/0x270
[  158.893054][T12644]  ____sys_sendmsg+0x505/0x830
[  158.894611][T12644]  ___sys_sendmsg+0x21f/0x2a0
[  158.896186][T12644]  __x64_sys_sendmsg+0x19b/0x260
[  158.897804][T12644]  do_syscall_64+0xfa/0x3b0
[  158.899321][T12644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.901241][T12644] 
[  158.902034][T12644] Freed by task 5308:
[  158.903329][T12644]  kasan_save_track+0x3e/0x80
[  158.905041][T12644]  kasan_save_free_info+0x46/0x50
[  158.906772][T12644]  __kasan_slab_free+0x5b/0x80
[  158.908509][T12644]  kmem_cache_free+0x18f/0x400
[  158.910349][T12644]  xfrm_state_gc_task+0x52d/0x6b0
[  158.912261][T12644]  process_scheduled_works+0xae1/0x17b0
[  158.914367][T12644]  worker_thread+0x8a0/0xda0
[  158.916135][T12644]  kthread+0x711/0x8a0
[  158.917523][T12644]  ret_from_fork+0x3fc/0x770
[  158.919008][T12644]  ret_from_fork_asm+0x1a/0x30
[  158.920757][T12644] 
[  158.921601][T12644] The buggy address belongs to the object at ffff8881124adf80
[  158.921601][T12644]  which belongs to the cache xfrm_state of size 928
[  158.925948][T12644] The buggy address is located 816 bytes inside of
[  158.925948][T12644]  freed 928-byte region [ffff8881124adf80, ffff8881124ae320)
[  158.931035][T12644] 
[  158.931939][T12644] The buggy address belongs to the physical page:
[  158.934281][T12644] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1124ac
[  158.937442][T12644] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  158.940586][T12644] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  158.943309][T12644] page_type: f5(slab)
[  158.944812][T12644] raw: 057ff00000000040 ffff88801bb3fc80 dead000000000122 0000000000000000
[  158.947865][T12644] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  158.950675][T12644] head: 057ff00000000040 ffff88801bb3fc80 dead000000000122 0000000000000000
[  158.953757][T12644] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  158.957110][T12644] head: 057ff00000000002 ffffea0004492b01 00000000ffffffff 00000000ffffffff
[  158.960471][T12644] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  158.963814][T12644] page dumped because: kasan: bad access detected
[  158.966376][T12644] page_owner tracks the page as allocated
[  158.968638][T12644] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5984, tgid 5979 (syz.0.27), ts 50022529370, free_ts 50016939683
[  158.975126][T12644]  post_alloc_hook+0x240/0x2a0
[  158.976631][T12644]  get_page_from_freelist+0x21e4/0x22c0
[  158.978321][T12644]  __alloc_frozen_pages_noprof+0x181/0x370
[  158.980103][T12644]  alloc_pages_mpol+0x232/0x4a0
[  158.981663][T12644]  allocate_slab+0x8a/0x370
[  158.983377][T12644]  ___slab_alloc+0xbeb/0x1410
[  158.985274][T12644]  kmem_cache_alloc_noprof+0x283/0x3c0
[  158.987412][T12644]  xfrm_state_alloc+0x24/0x2f0
[  158.989287][T12644]  xfrm_add_sa+0x17d1/0x4070
[  158.990803][T12644]  xfrm_user_rcv_msg+0x7a3/0xab0
[  158.992463][T12644]  netlink_rcv_skb+0x208/0x470
[  158.994032][T12644]  xfrm_netlink_rcv+0x79/0x90
[  158.995487][T12644]  netlink_unicast+0x82f/0x9e0
[  158.997076][T12644]  netlink_sendmsg+0x805/0xb30
[  158.998859][T12644]  __sock_sendmsg+0x21c/0x270
[  159.000577][T12644]  ____sys_sendmsg+0x505/0x830
[  159.002146][T12644] page last free pid 5980 tgid 5979 stack trace:
[  159.004258][T12644]  __free_frozen_pages+0xbc4/0xd30
[  159.005928][T12644]  stack_depot_save_flags+0x436/0x860
[  159.007553][T12644]  ref_tracker_free+0xfe/0x7d0
[  159.009028][T12644]  __sk_destruct+0x568/0x660
[  159.010523][T12644]  sctp_endpoint_destroy_rcu+0xa1/0xf0
[  159.012665][T12644]  rcu_core+0xcab/0x1770
[  159.014415][T12644]  handle_softirqs+0x286/0x870
[  159.016328][T12644]  do_softirq+0xec/0x180
[  159.017872][T12644]  __local_bh_enable_ip+0x17d/0x1c0
[  159.019533][T12644]  netif_napi_add_weight_locked+0x614/0x970
[  159.021391][T12644]  tun_attach+0x8d3/0x1610
[  159.022928][T12644]  tun_net_init+0x309/0x3d0
[  159.024285][T12644]  register_netdevice+0x6bf/0x1ae0
[  159.025995][T12644]  tun_set_iff+0x844/0xf00
[  159.027634][T12644]  __tun_chr_ioctl+0x788/0x1df0
[  159.029404][T12644]  __se_sys_ioctl+0xfc/0x170
[  159.031140][T12644] 
[  159.032068][T12644] Memory state around the buggy address:
[  159.034063][T12644]  ffff8881124ae180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.036638][T12644]  ffff8881124ae200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.039223][T12644] >ffff8881124ae280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.041709][T12644]                                      ^
[  159.043470][T12644]  ffff8881124ae300: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  159.045923][T12644]  ffff8881124ae380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  159.048374][T12644] ==================================================================
[  159.051378][T12644] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  159.054161][T12644] CPU: 0 UID: 0 PID: 12644 Comm: syz.1.1874 Not tainted syzkaller #0 PREEMPT(full) 
[  159.057404][T12644] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.060536][T12644] Call Trace:
[  159.061576][T12644]  <TASK>
[  159.062460][T12644]  dump_stack_lvl+0x99/0x250
[  159.064069][T12644]  ? __asan_memcpy+0x40/0x70
[  159.065728][T12644]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.067511][T12644]  ? __pfx__printk+0x10/0x10
[  159.069162][T12644]  vpanic+0x281/0x750
[  159.070418][T12644]  ? __pfx_vpanic+0x10/0x10
[  159.071894][T12644]  ? rcu_is_watching+0x15/0xb0
[  159.073675][T12644]  panic+0xb9/0xc0
[  159.075001][T12644]  ? __pfx_panic+0x10/0x10
[  159.076510][T12644]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  159.078519][T12644]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  159.080353][T12644]  ? is_module_address+0x17/0xf0
[  159.081890][T12644]  ? __xfrm_state_insert+0x8af/0x1450
[  159.083647][T12644]  check_panic_on_warn+0x89/0xb0
[  159.085226][T12644]  ? __xfrm_state_insert+0x8af/0x1450
[  159.086881][T12644]  end_report+0x78/0x160
[  159.088413][T12644]  kasan_report+0x129/0x150
[  159.089885][T12644]  ? __xfrm_state_insert+0x8af/0x1450
[  159.091456][T12644]  __xfrm_state_insert+0x8af/0x1450
[  159.093262][T12644]  ? xfrm_state_insert+0x44/0x60
[  159.095043][T12644]  xfrm_state_insert+0x54/0x60
[  159.096489][T12644]  ipcomp6_init_state+0x655/0x900
[  159.098039][T12644]  __xfrm_init_state+0xa76/0x13f0
[  159.099593][T12644]  ? __xfrm_init_state+0x7ef/0x13f0
[  159.101343][T12644]  xfrm_add_sa+0x2f5b/0x4070
[  159.103160][T12644]  ? __pfx_xfrm_add_sa+0x10/0x10
[  159.105193][T12644]  ? apparmor_capable+0x137/0x1b0
[  159.107201][T12644]  ? __nla_parse+0x40/0x60
[  159.109019][T12644]  xfrm_user_rcv_msg+0x7a3/0xab0
[  159.111011][T12644]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  159.113179][T12644]  ? __pfx___mutex_trylock_common+0x10/0x10
[  159.115430][T12644]  ? kasan_save_track+0x4f/0x80
[  159.117387][T12644]  ? rcu_is_watching+0x15/0xb0
[  159.119262][T12644]  ? trace_contention_end+0x39/0x120
[  159.121335][T12644]  ? __mutex_lock+0x335/0x1350
[  159.123071][T12644]  netlink_rcv_skb+0x208/0x470
[  159.124691][T12644]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  159.126424][T12644]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  159.128046][T12644]  ? lock_release+0x4b/0x3e0
[  159.129484][T12644]  ? net_generic+0x1e/0x240
[  159.131010][T12644]  ? net_generic+0x1e/0x240
[  159.132663][T12644]  ? netlink_deliver_tap+0x2e/0x1b0
[  159.134643][T12644]  xfrm_netlink_rcv+0x79/0x90
[  159.136217][T12644]  netlink_unicast+0x82f/0x9e0
[  159.137690][T12644]  ? __pfx_netlink_unicast+0x10/0x10
[  159.139529][T12644]  ? netlink_sendmsg+0x642/0xb30
[  159.141360][T12644]  ? skb_put+0x11b/0x210
[  159.142949][T12644]  netlink_sendmsg+0x805/0xb30
[  159.144794][T12644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.146766][T12644]  ? futex_unqueue+0x22/0x240
[  159.148541][T12644]  ? aa_sock_msg_perm+0xf1/0x1d0
[  159.150364][T12644]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  159.152324][T12644]  ? __pfx_netlink_sendmsg+0x10/0x10
[  159.154265][T12644]  __sock_sendmsg+0x21c/0x270
[  159.156079][T12644]  ____sys_sendmsg+0x505/0x830
[  159.157990][T12644]  ? __pfx_____sys_sendmsg+0x10/0x10
[  159.159897][T12644]  ? import_iovec+0x74/0xa0
[  159.161426][T12644]  ___sys_sendmsg+0x21f/0x2a0
[  159.163110][T12644]  ? __pfx____sys_sendmsg+0x10/0x10
[  159.165183][T12644]  ? futex_wait+0x285/0x360
[  159.166759][T12644]  ? __fget_files+0x2a/0x420
[  159.168202][T12644]  ? __fget_files+0x3a0/0x420
[  159.169983][T12644]  __x64_sys_sendmsg+0x19b/0x260
[  159.171726][T12644]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  159.173908][T12644]  ? rcu_is_watching+0x15/0xb0
[  159.175655][T12644]  ? rcu_is_watching+0x15/0xb0
[  159.177110][T12644]  do_syscall_64+0xfa/0x3b0
[  159.178659][T12644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.181093][T12644]  ? exc_page_fault+0x9f/0xf0
[  159.182555][T12644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.184396][T12644] RIP: 0033:0x7f333bd8ebe9
[  159.185995][T12644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.192508][T12644] RSP: 002b:00007f333cb4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  159.195524][T12644] RAX: ffffffffffffffda RBX: 00007f333bfb5fa0 RCX: 00007f333bd8ebe9
[  159.198434][T12644] RDX: 0000000000004800 RSI: 00002000000035c0 RDI: 0000000000000005
[  159.201166][T12644] RBP: 00007f333be11e19 R08: 0000000000000000 R09: 0000000000000000
[  159.203767][T12644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  159.206103][T12644] R13: 00007f333bfb6038 R14: 00007f333bfb5fa0 R15: 00007ffeb630bba8
[  159.208568][T12644]  </TASK>
[  159.210209][T12644] Kernel Offset: disabled
[  159.211795][T12644] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:58:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900031ee9f0
R8 =ffff888020278237 R9 =1ffff1100404f046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb902 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f333cb4e6c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000035c0 CR3=000000011960e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f333bf87498 00007f333bf87470 XMM03=00007f333bf874a8 00007f333bf874a0
XMM04=00007f333caed100 00007f333bf87460 XMM05=00007f333bf87478 00007f333bf874c0
XMM06=00007f333bf874b8 00007f333bf874b0 XMM07=00007f333bf874a8 00007f333bf874a0
XMM08=0000000000000000 00007f333be12ee7 XMM09=0000000000000000 00007f333be12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=1ffff11009608341 RCX=ffff88801b34d640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000433f6c0 RSP=ffffc9000433f540
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44cd8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555669a0500 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f76d34e56c0 CR3=0000000028550000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000030657267
XMM02=0001000a80010060 8002000400000000 XMM03=4001000c80020050 00000074696d696c
XMM04=0100000040040008 0800000000000000 XMM05=0100110000001407 0000000000000040
XMM06=01000c0000000000 0000004002000cba XMM07=0f00004003000809 0000000000000040
XMM08=02000c0180000000 0000004001000c01 XMM09=0000000000000000 00007fd5e1a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
