last executing test programs:

1.379114055s ago: executing program 1 (id=1918):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
write$cgroup_devices(r0, 0x0, 0xffdd) (async)
r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async)
write$bt_hci(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="054cfbec820416bff344377844d4c27ae86acfecb30f226818313b3a53880e59b547b57906b2df7cf67c8fc5400dec8638ba4429c2c64b1073a583f0769440a21373d07c2842c323762ec8a6d9fc8e94dd765e2d4b9218f3b85195378c0a886a85c52cb40c7447dc9a9eb893dd38f4014af27b576400fa1978c1de92a5163fdc5011c542faaf97637928d9e69759b60ce9591259eaf0e81a1f570fa85109220f01ecf2577db006adf6ad3ac507497f74414552e973f7d3a85682e87ce447b283ac11d4c9e3342c0cedced5fd91078f73934f23c587bb7c47e5b448ac03d74bb585dd77f428284d74af9fda76ba45e59db06718328820558a324d8d17d05893fe52e215693c22351a6d06a32c1f53bf0ee5f92c5c6f8779d73da98bf5b5bbd7469e0cb1a701b0488f8acfc0c11a74ddab6f8e6153db7047d6675116a12e669af70ba0154eb920a7f6219a28a436005e3af31a490beda2c350a3cd08f2e76c3a6d10de151da54c14af7a76f9"], 0x5f) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0xfff, 0x8000, 0x6, 0x201, 0x1, 0xc5a, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x221, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@restrict={0x8, 0x0, 0x0, 0xb, 0x2}, @struct={0x10, 0x1, 0x0, 0x4, 0x0, 0x2, [{0x5, 0x5, 0x6}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xc}, {0x8, 0x3}]}, @float={0x6, 0x0, 0x0, 0x10, 0xc}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc, 0x3}]}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @ptr={0xb, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x2e]}}, &(0x7f00000003c0)=""/75, 0x9b, 0x4b, 0x1, 0xe}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x1000, 0x0, r3, 0x2, '\x00', r5, r6, 0x0, 0x2, 0x3}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1}, 0x4) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0xffffffffffffffff, 0x1ff, 0x20}, 0xc) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003"], 0x54}}, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/164, 0xa4}], 0x1) (async)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9)
ioctl$sock_netdev_private(r7, 0x8924, &(0x7f0000000000))

1.299764242s ago: executing program 1 (id=1923):
unshare(0x6a040000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000ccfc47df78b3b6050a03000000000000000000020000000c00024000000000000000010900010073797a30000000001400000014000000110001000000000000"], 0x68}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) (async)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2000, @loopback}, 0x1c) (async)
sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc"}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x4048884) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='rseq_update\x00', r3, 0x0, 0x5}, 0x18)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='f2fs_truncate_data_blocks_range\x00', r5}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000009c0)={<r8=>0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000b40)={r8, @in6={{0xa, 0x4e20, 0x4, @private0, 0xff}}}, 0x84) (async)
sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a507333f8", 0x5c}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010)
socket$nl_generic(0x10, 0x3, 0x10)

887.652532ms ago: executing program 1 (id=1929):
unshare(0x6a040000)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206fdfffd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)

826.775119ms ago: executing program 0 (id=1931):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x9c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200))
r3 = getpid()
r4 = syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/mnt\x00')
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2, 0x1}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x27, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r6, &(0x7f0000000480), &(0x7f0000000580)=@tcp}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r6, &(0x7f0000000600), &(0x7f0000000340)=@udp6, 0x1}, 0x20)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x28}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)

819.647022ms ago: executing program 0 (id=1933):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0xfe, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0)

726.70888ms ago: executing program 1 (id=1934):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100"], 0x36)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x2, 0x0, "b86b2d", 0x74, 0x6})
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0xfffffffffffffcd8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000060000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x1000000000021, 0x0, 0xfdf0)
ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100))
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, &(0x7f0000000700)="38000300010003dfe88797695bf97a338e6cfaa135cb51db5fce07bd6f0400000031923375d56b5cb13a4b63e79e2e9f73ffb022cec30330bd101330a79fc0ccca64ea2832b44eb01213484bb24f0409ecb95cd663bb4949df1c529ebd163b433590c7f5353400506d976166364ee3de426e74bf56d2aa5bd4eaf5f4b70000000000000000000000000f47d910906760a45dc5e17ad7a2dfee7b42dbdf2500fd4ab0caec1f2bf0879b62d48ce6469fd6183070dc9405ef28e2394da037d03779d624e3b17d348bc2c950498513b1733c439777f12fbf626b402ab5d3d17b690022d8357e5fb4418f60cb60660e499544fa0d5c5a2528904a9ae40096c2b5a6e0a57cd3788b52d8040f2247b729a16edec3a4a41d8a730b2dcf5af11d15d94ac897e67cfe9e4af462c75b2b91a89480f9deec6217afa3ecebdf08ac21fa1fa7886a2d9c4e46a322a33521435fd757b2f500faf7f4fb728051ac32de65c2d45a1870ae71359a220f9e147a735ecc5d8d1d86dc2c375c330789086e7776e30be88e0f28fa8cbc29881ddb61b6a62491a57bb47523505b909c31dd21c14e3c3b663e2358173affa073fc9fc02cce3211ce455b6b2f2553b6001df055284053b34c1c64a3af08811ad4eae350e12c4536ba79fa59beab7a1bd92d05f558bc4426487dc418a3657eac9edad3b6295b4706001bdc00d3f8", 0x1f4)

605.401153ms ago: executing program 2 (id=1935):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd6c}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000656a00000000000000000000ad1115830f1fad7a6607bd83f0bfe866ac81629caec9cb85c10eb9229069d7df0e71d232e50c76", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r1, &(0x7f0000000000)="3b000000010001ada89856a8edd9a222dfc5ac08", 0x14)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r4, 0x7, 0x1, 0x4, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x7}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup=r6, r9, 0x1e, 0x0, 0xffffffffffffffff, @void, @value=r3, @void, @void, r10}, 0x20)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0x8e, 0x1}, 0x6)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000210100000000000000000000009383d5c7a5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffff00"/28], 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0)

604.834123ms ago: executing program 0 (id=1936):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0xd004000000000000}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)

603.939806ms ago: executing program 2 (id=1937):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0x8}}}, 0x24}}, 0x20004001)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200001000"/18, @ANYRES32=r0], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xd, &(0x7f0000000840)=ANY=[@ANYRESHEX=r7, @ANYRES32=r7, @ANYRES8, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES32=r5], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000540)='cachefiles_link\x00', r8, 0x0, 0xfffffffffffff001}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140048ff9891010000000500000000000084000a"], 0x28}}, 0x20050800)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYBLOB="f955ba41447f949c76ede9f8946a160b6be0c89768f29e8d8482e335f59641630ee601948a61d8e11b166ba63798d3314750b6c457f04d0ff9e4474e6b9a32f3d1d6e5eefb39d7", @ANYRESOCT, @ANYRES16, @ANYRES64], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000000240)={r9})

603.856557ms ago: executing program 0 (id=1938):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a0000000000000005000000140005002001000000000000000001000000f0001c00090008000000", @ANYRES32=r0, @ANYRES16], 0x4c}}, 0x40000)

540.076627ms ago: executing program 2 (id=1939):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}}, 0x80)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000100)="67acf7c8ff188befcc404b648473e4982733570ae921fb86d188c7113a8c98c9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
close(r3)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x115440, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f000027f000/0x4000)=nil, 0x4000, 0x200000e, 0x10, r0, 0x15826000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4}, 0x20)
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000005c0))
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x740, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001}, 0x80)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000069f6fa9477a6b020b040000000000000000020000000900010073797a3000000000148000001100010000000000000000000000000a"], 0x48}}, 0x0)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000300)=""/185)
socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200"], 0xfdef)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd0, 0x0, 0x0)

539.56502ms ago: executing program 0 (id=1940):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0x5}]}, {0x0, [0x61, 0x0, 0x2e, 0x30, 0x61, 0x61]}}, 0x0, 0x2c}, 0x28)
r2 = socket$unix(0x1, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00@'], 0x50)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r4 = socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={<r8=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000002c0)={0x0, <r9=>0x0, <r10=>0x0}, &(0x7f0000000780)=0xc)
sendmsg$unix(r8, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}], 0x20, 0x20000000}, 0x4040891)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = getpid()
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000701fcffffff00000000017c000008000200", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001c40)={0x0, 0x0, <r13=>0x0}, &(0x7f0000001c80)=0xc)
sendmmsg$unix(r2, &(0x7f0000001d40)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000140)="677898a711834b53f259bea7dfbe0bcc6debf0b01a93358ba3367340f854ab49feca860bc9ae214c334df52f34aba820519b9cc96b31ce7dd6e20b79d08be87a873628d7350747772c5bc793e4b4d784c7abedf0fe9951fc37c01bd597ae6ca531518847c8b2d5704fb4d48725aee29975586ece8eade0c1711f35486e", 0x7d}, {&(0x7f0000001dc0)="0291c5ee44b2814f0f248c5ae448c88f9bafb54c1b727ee574608b60f7f022da053fd44df1ae38cd2f15f5bf00faf7460dc99febbdc73b4d8f94836a864572105748e1ac8a99127eb00409770d441ea66e7dc404a9132d8b145f216d40f4532fb122e4cf83c9b644ccaba55f43f50fc5625952e7ff9d1cf6030cde3b185569e0d3dedca4ad0106c55357bfbff3550039", 0x90}, {&(0x7f0000000200)="c752c169f65d028e21c7838de45437b3e7a9863df5dd024e4227e4cac3191bda1b34258a2bf730b83cd001d495a2d71b", 0x30}, {&(0x7f00000002c0)="c636149384b9c6db283d9d0dd4e2a7489700d14f2f52e332327ec4f4b834d1fd8d6145cd9092", 0x26}, {&(0x7f0000000300)="f21ee0d3ede39c2d8042fbc466368aa88d5e68ec0d6b7eb603c5f35a2c59e525b66e07181bb895c60fa864470bebed4dc9af10c596f44518300c27fc22c26a44cdd8d7abeb12b10a5a4022dc", 0x4c}, {&(0x7f0000000440)="3a1697d71c180575ea9a817d97cc376e1a5b1f68e0c105b5f2ff632acbce0b29579d724a11e5dc94b2ead7149c356b8d60f1708e5cad1f1bd29bed30ebca9f8207d359e9893557ff01fd83ea77eb17357b81da3d111b8f2087e18d3debe2180a59e94a482a39cadcc8570bda669e427b951fa42700473f72db235ee481ecf55680f93daa6d388a6570dce7298b8710efa1f9933955388a3765dfba834bb49feff7501037114e08", 0xa7}, {&(0x7f0000000500)="9d200dd9c93c7f5a0f891d1a7b4b962f865e0accb3c489fb5ec16f0b76450c03d56d2e0a53839a4b655b18dfda64bf213722d51379e20f57bf4a7207602aa26e3b5574f49d9d16a8cb4def1c66fc62f6236cfa5ab2bfe52c86ab69e321351cc5e380f7caf0b096c17e1d58f05a7e621dde1b3a997396b0af6717278ba47def95a7be343b9708a6be160af2236828e8a44496bb7bf3765acedd613e764154a775d26171e41e4bcc069edff552e4794c344a7819ab97c055cc1c77077c4d5e9e5ec498b7bc6d0084e11f721f5f401153f4b2d26d4b531a005dcb9218ffe0916e12e37aba189b62fbb14ac5f235eb5fd6bf", 0xf0}, {&(0x7f0000000640)="b135d38817520108e4e66bf8d6ffefcbb91871f0671c41ff641071df1ef32c42d55d5620d391c271c7a0b9407332d5a032b07d87a21639dda431007003338eaafe0c27193d2381bf4205a19bd4b4bcdc9cefa120ac65942d1a4ff835e4bd6ba75727d01cda9d8382c019f35da8c3b3fe9352feb2030c5a984c804fb55fc1a7e72d54983df52a6b2ac46f118128103847937e984c1eb77f33df206b8d97faeec92028e4d155cfdca1e6688058f4cb41b9", 0xb0}, {&(0x7f0000000700)="4432a5894d50284caee798af88a48c596164ddbaf8fbc7cf13cdb2e145501ab11c7535fc380c32405e01898f67c2e6c49df62b3158fcf3", 0x37}], 0x9, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}], 0x60, 0x11}}, {{&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000a00)="42e45ba174b00fcff6a3bb7994edc29f9a71fe63b92788ef21ccf2abea79e4c3b253a5b979a654859934a33d8755dbdbad1b0e39cd8ca72567be3a4fef7ca5e4a6fe1ac18286a7629fdc5726f7f1d23e2e0753535e974433a6e8c775f42b144202b5e6e839c6ed3ebcc92420b1ac557bf832c7067e8e9234af3512f34ddbf6050c308652e93280639732205a77b97a86760d8ba0b445e1341ddb69be4792c026e4e7349de133bcb08324bbdd824aa72a586f933257c313d85f522093d503e892c043c27b70a0653e7d3d7049c79dfc1f24bc09fdbff0d3eff2d89725aa4284e3be9c12c87c62525679d547ee53f33fc08b6e9d12775f02762f52bf", 0xfb}, {&(0x7f0000000b00)="23cfb83cb49bd97db711d5ccbe94bf78ec180ed0e94f81e892549b3b96db6c17d6709a66d4a5a6d1b5ecba4eef83df9f52f2cd56a44299874bd7f9a01e1b2486518c292550b6e1d9ff61a6e74f210b076781a94c60b7213f12606bd7c961ea0afea6b5252db33e6b5e1704769731e992e57521a100829a0aed4c7a9def85827f906fffd0d3acc7f0ea451870fb16e037e7399efa484049eb03b55a903b781b364a2084fafdaf4f333143209f05b1971ed1fb82bc7c3fc8936134eac0b6d028244260cb0822553c3b4134ba516727752e616900c26822e307128e3d214977d1475adf9e9e9800b27a81a44128770f75814ca1fd67bf658256678a70740f44d00c3723de74fe5fc0a10a35e595ab1aecf94afcabe269a824a7f968bf43131f57c287565bd5e7fd0d2feb715213e57fa2e74a891b7dc52bb0ea7b921487e93d0355e935e5842ec4f8da5ae8fc1baff53b4fa808e96f4a35a109335d34b18cb9dde802aa6505eed568300e090426505e4eada99917b388e6dbc75b7fe4f62281abcd5597c9c75a7a28ee9086801eda76db5d5a3e8b0d09a0396e16520452bfeb93861b8e37b9bccbc7f04ea391b2b73269ee747828d84d5c469366d72be714f9dcac60d3b168a5b605b5d21efe0ee0677c7ea03b92920fa0e3cf70f169cc44b5026c336d9a87155255636aa9c05d7bc1314cced0ed293f4d4594af9f7faae6bfa235a830883104a0993f06eaaf2b51928f7837909272a65622d37a69880628801dd58c0b406d5dd9488ae676a5308ddabc54e2ac1365d3a6ede11fdd4aea388fc126ca08262e45428d0241f4685c763d31421675a38396a624fb518a3bbc37bdf45e1e61459d0a24b2591b082af3464c31c901107b4f556fbefa84aa459a01bc76241e44ffec592eb890b415ced47a0120fdc022ee6d09f40273c589279f39fefc2dea8364dbc4ea7939d0bc395474caf2fb07c5db9871dd0ada50b97a5b13a13c67942a9d558b8cc7a5ab6a4dc218fe8cc1218175b1ea40c1f2014dbbed9462e60ded9f0c663fd691ce15886165e325eceaa5d267e2c75e3e5918c539fcd597f77b6c52cbebd88f8176d7cf3e855b7edd73302aed0470cc34fa73f0aa65fc7ab6d2d80299b5c8e292640834bbf02d9eaf7f3e8ccda99041e15a182398efa85f221634804bac6586216f856005c1faad110ec8c770e593c898f48cb16877a0464a6966f4e9a1e257472f313720e6d723b73f5bc944ae452fccacc1db4c3d129e0eb9205de6624c629ea96cd7bd2a19a4a4c0ae39c1c51709183323c99db8127d570a33a5a61c3202ce5d5cc2a5d694744da535d3f3ae1065f4ad96046ec60d51b3f4a56dcac96ed90e18e354dfcab9614fe600abde263c665323258f606f44c3cce159ea48d02c132f5178826b95636fbf414b78ac15077945a72019db215177ab0879dc8b23ad8f4f8cfcaa77f02e3e856cf4942a18471f22e74e03b6537e382a3d47e29393bb7582061872ff8bcc79f8570d6b95a856abb20255720100a5300ae3ecd813e3fce5a44b03d98114b0d9abf0e721a98afaab1ad00e050aec809ce3b93e50f974862d079fdf3bddba0930be81faf9678ff8052bc199b93d4867f5f8434a9b36a2888eb9b323670bd918cff2f16534c2ba093a43bd86b6c2f6badbcb6fc9d4680707a40b5a288c2513f543c06d80d6283dc356fd20e7977fdc9489d36c077a71fed3c3be0fb5c1f7b4123e1bb50521bc20392cd493c328efe1872f866d2a00973754f4f70838f363da7165c18c04475852c42e87f4daa021a594609ca9c5af54700081b215645a6d4fec4372b3cd5475fd01b869a04676068b926ba6199691eab6a50ec4ce529bc5cf510afa4cbfbc947ed37c678353d45f94edb386e6f619d1d57fe77ac78bb7d8e426911ab0b554bbdb423a3ebd113dd556aba7551842b20c81197b22f29f4d8a666b5e1014e42c556941ba277b8f89a1d935c002978393ae2f728a6933f655aa6be7167437d01844c6e469e8d2d7bb56b4383ae52771b0e028402aa9c91e8c78bca4cce9933739bafccf9f98980b9104c65a3fac266269780b950a862f57077e56ff4cc82e354c29b72da06f80eb01ff0a5221f73c12eb830982d8d5416b805209862cf034a7ecc5af416d281bd1d6ab7558c86ff432ab648a55938be3b78076b61ae206d27db85e64d6f52e4919d2207ba19f381820981ee3d610d14cf52641bfece152a7c574b8271df931e95eb30b09931eec5336088cc09102cde005bf69c303adf4d25fa32fd84ec48e9ae166d8295bd199948d4178696b91c73b68892d0495311349ac6dcb53a13c6370f556a0099f959c57f677c010dec3c140ed8f146e522e181003183b04db258cbfa5f7564f9bf2f96110e4fb40ac88b5ecab58d0068de42acd491b3adad35afbb8cf2979f959878628e430ae4029d73e77d4e84c0df619c0a71fc9f97010c0cc1fe99550e54bf79012c96ceeb145e75393e8f6db17d945135d70d4a58c43c6955cf72e760de5519bb90910f3cd534dc751a7f7eaa1b91835f0cb5be827e153b3737a365c0b3fed4e0d4deeb632289505e30a118633b9bd543d39ddb8570faba49475e408c9ef734f7da75dac0c1c15016adcc18e7c6f55abf09b8e5b51ef18f7a8802665fe23a057b981b414305901d9f2f54eb6c46dce8567e9023e7921d4320db26e14bf703b4aa9db97247162650ab60cbb26f21399e15b148af5938c464614144d230221d9150e2ad4edbbec55ec17767ddc7ce0b6a2afb5cbbf3e7beb46c62980ae7caee3fc6d80559d5456f64c9b065a8fe4576a9b6a553999effb5053ce0176c281cef9b1443acef96cfb79f4c375930037fcbf2f602a0e33d31a2db92a4e3eab1452bf6c840d51fce6b7ed90b4e870eb1ad9cfe5d2f3c30cc36dece5d3e3abbd44e0663f975943667e3267820b7af88d5c57071c845976a6e4d29716f0e5091bd955b1f96729bce63b2fe5ec0f14c7ed8ef5e0a7f7696d0ced7a4430d3408837e645de4add9bff19b0e47afbaf29f7dd80e02973d472e018ea25884bf3c416c95764a5e6a50007e5158af3212734f32e01a1c2e20f1e93be416a944f686917c4ba1100ed1864a04b86965a274cd47e1027af16ab74b15aad3c7f7af0cd7d4ea7384e7a4b2ff02d352ad04226ae50578544adc12ca9da4ca93e90ba6642f1a6632f7af3c192e1154978b2bc91415d16e415b0e70ab45c76d3d59187389abacbe29c2af6203f44264fdf5cd01a65831f4538f87d8cb59f482cd040b3a660dd626a45a15ff8c903a104359bab64babc2fb9b45ea10d5e6153b4773eff876ba1caded854e71ae6f04828ebcc262afee7c121f51e680e693bcf492a02c541e33e8bd4d2e0909ab1075d3b603a4296d8ca2b29f1ff7bce16398427fa0398ed76e685031c6d2f37c0c3291241802b6b56044b4a8315b8e32082b85ff4c02e87960c3cbc1e74f13f8a6ccba0da576bff2c2af7943410bcf089a7c0f23a9f8d03a7733a7c33c706d02d28c58b073e586ce51c34131406d3e234312ea757ff0250d81d6416f57ff76b0840ffbd0ca49b7072fd189977c85c4fd61dd7a9d6bff9d1a58e811806efc5f535894a31bf2a7e9faf189647c353cca5d60a0464cbcba29643e6329bf41cf5ea0d0b3d9c82c68d4eacba6d46c2af3dc94d029c900086ef7a66307fb188ae0fe5472d5bc0aff032c2fcfea202db97834845f4241b43198551793d92d574b48bed1cba38b5011793792a5429a5aea2c5638d741320a84c20167984886f0a573e13285a9f02596186a3686f73e25a248ab39037690de5d9961b516020259f340e200ddd69f48fdaac3e9c5ef9cab2fe1ce8a8f879b81b1f883e40b462ded9125a9a8c89c071d6b59a3d2c9f50ba5d5d3bdb420d41b0b18f8a4c31fce68c77baed78e23b1744314a202984cc4b66b8b762078a9bff4027a1f303d98ac2d3aa77b675b477685d3f31e645a6239ea8c81c9a39a78f3787b0391b4b1dfdbfce953d9efc95033f2e340ef151e69a6b7648b5489ec559b57b2d3c2dcf40531e9cc1b571d0ab634c1543bd1730d87c1494616fb8c442bd0030513729cc7cc7e03e2dd1b8c28c6c4404771333ead49983cbcef141408d64e609f6b4bdf3578cbe6e470d9a8f662f7949bc54b1dbd2a93e3cceab649d747c0e164159e8f145334e4b36423f70a4d95f55d90c049403128116440843785bdd2693f7551b907c2733ccaa4398cdf00634d9f35eb560096bde53dd55e171d310b0bb756ea31123b2a26d288d94fc9e6b208230dcfbe0507d466aa1309d0dfb9a9b0b045fd1b636c08969daaaf7ed74553cda9892a11f2ed11ef6e367683f1c7469a3fccd358eb9e0a0d270cfecc8626d1b3ec509a601685110d3d46920d22ec4aa962e375eca6e4bb161f6402151dec416c21fc8aca0cd58ed96651d0547ed820c23d43d8fbcbf59951a832665ee4d8cefbf5bd0d7d8e4130ea491f9768ecd90d00fcf1aaa76d1073477e7c3db4f4cca0169cf84036aaec4d3801e85d6e79203c07acfabce170b515ac6eade91accacf3cbe07741be5efe73629e3b98a8465c8f5a36e5f5d7dd195e8f5cacff55f32949328aa8ace46e4a5cce16e70a726420426dc2514742fe591dbe8ab1b680acb73130a1dfb120b809694fd92b24025330879055bc6f84d4071a3e59eaf50abea648f2ae6b09d6e152f8b3c67f693a0e6ed0e57f920d1e1d491aff8083e01f4c8dde53f58970a622e099bfd2fabaa2fd5a41eccce4f55d8fd4edd888ec2e1020e4508dbe14e61e397b9b16a195947abecde053d6313cc862a8f2b970e1b92babe56e04c54bb8235e05e025e371e600d7e8414a0f9761bf4d6a4e1a4e230f60c920dbf051dc16c91113c7d7c2d3061a1a801462ea6fc5443becd6094368f55814bde190337e7dca79420e6bc36a3a2d36acaff8ef6314198acd02663fa9b7c17f1a9cc6db6a24a32175561b6e60c1082c4199d8add687e26d3a31414ee09ff0e55bc4de330d7ef46d823cda99310b8dc87da89546305ec573fcee2cb40d122e5ff935d52115f5bfb5fc187e7ede227ac8811f8867f02411a9548fc357f00c483a61ac601b5af81da4db2e58c4deaafd50579995aaefca82e14d077c38ac3a8499bf6274fa8ca30a65543b87eb82bcfdd9ca9510d3bb20597a321238c141047bb0129b89dd00433fa5849850fff765baf2e27f9dd1a8a493b168030722d24e6c37a99c3d9aa9f788446e778b60d020224d13ca3ed3d7c8cdadcc39d74bc4e814066bfc366f6529d219cab63c6b23cd643045802ee41c6a49b01293b6ae29b91f060598a5b5ecd0a26abbb74b75d712a49a8c1b99c8860191b394bcc4879c25b5c4dc6836d0fe0d32ceaa6243299c4f1921116361d8fffeefb9833eab88825bc83acc49891c87feadb3f75f7c585cb5687aef436ccb26fdd2d9048b752b6e3425a401b39a3104e4826c062296ba626270687cdf7ec1529df666b289b90a8b5f57a481883b656c10728c4a9ce0975cbe9db5114fc8315a0177017f829572e08d7ba422cd437bed9201bc72e5d8a83a7b02ea90f80b2bea2e6088c07428e4d016b248d1467527424ec7745b17d601ed753bc6899659129007776d3236f0678ef041069da18853c9e5f23948e2db6cd04fa6e1e6bfd2779c3d9c7b0c84372e245f69599e4a456a9c3fc84f90388738843a80f7474f984d17ac1e0ca8c5f56e7537dbc5667c7d75df4f12a58b6c8f978db64045e93f4296a632391fa4b3b5ac2ee463c70", 0x1000}, {&(0x7f0000001b00)="046ba6821b7eef205c2af8274eac538fc2091797ac65d8f26101e247317b62ed6efca1f482f1fe9e5fc7660674dea6160b8f741bc9d4761774a6347cc2d5b027c30470b78939d22fa060927d54d16de7bc421946f7a6750fdb98b1e86faf670ee3719b76329fe0173a55b55fcb", 0x6d}, {&(0x7f0000001b80)="39fff3b663c364dc8b472b57496f1036613f7d33bb71948f79fdd6719d266f164e1d530148bc740823c620eeb28fe80e5b59a6cdb98ca2283248cda1b9bae7543742350345b81a41c715c0fb97d709ce2cadbe", 0x53}], 0x4, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r13}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r6, r5]}}], 0x50, 0x200048c3}}], 0x2, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x8000000003c)
r14 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$netlink_NETLINK_PKTINFO(r14, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_route(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r14], 0x28}}, 0x802)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003000b"], 0x3c}}, 0x0)

470.071654ms ago: executing program 0 (id=1941):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x1104}, 0x50) (async)
sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000680)="e8d5b23341ca2005478d63675bfb46a8a8408192aecbe47fa8e33d5d858c35f387817d3ea8a3190bb0ba482b1fe0a41ae2e41c60772cc4c4df594be54e217521", 0x40}, {&(0x7f0000000700)="de06d7c0f63c8dcf89efd1ecec11bc5e44b55ed2ef610a4b8e0dc68d8656264f7ceab08fa652088b32e084028fea254a162e5305554212296838ae98d5decb63197b2cf60134a1b9cb080b4e851cf7faefc889dec38fec7874038c79f9f19af85fd7aea4b7ffd3fd929264013aa452020d84b2e03fb4fd5912fecf4116cf42dd65a1333afbcffd305105474f12174cc7e9a3346f1b28", 0x96}, {&(0x7f00000007c0)="ba8ca6c0964f7c73e4bc27b0d660fa7abfb79523b174e410f27b", 0xffffff34}, {&(0x7f0000000800)="de2a616c70b6c0dcb80516b26aba51bce3025a7df1053327a75b45cdb19d77cc84b00a0dde561852a5f9974f5741037cb844873c52d3435e0d0c48f79c220e14e3e042123ef376b5e8d7dbf3806074c614b40b709805830780ce801264a66c273c7a13bbc4f712818992f8511046021cbf3607d0ace2a052cc4244dc59667a137aa944cead541cb09b1359320522a9d6e38783012b5bf9f91977d8e4356a578e4690a9834d7913da936f0302a0a157347f7e746b209f8582d3558c41a82e020623", 0xc1}, {&(0x7f0000000900)="330373b6204d692464b27dafc0befa100925116ec43e4eb1e765384b5ef0f9bb4c09a152c8eb", 0x26}], 0x5, &(0x7f00000009c0)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x2e, 0x13, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x3b, 0x6}}, @generic={0x7, 0x61, "8093d6953e3cf69f8741e27308de243698099e6f9e3703cf9552657db2edc4002bff008bdf72be72e6b97dab5d4a0b91368071aca885def2fc50e3d8ed58b9b40f4a336aeefa8ba4d60e016c9f52021b41c43590eee6591dbc9305a06921cf0bea"}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x72}, @generic={0xf, 0x3, "21c8d5"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x90, 0x3ff, [0x0, 0x9]}}, @pad1, @enc_lim={0x4, 0x1, 0x81}, @jumbo={0xc2, 0x4, 0x7fff}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2e, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0xf0}}], 0x3, 0x24000045)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001100)=@mangle={'mangle\x00', 0x10, 0x6, 0x520, 0x380, 0x380, 0x290, 0x0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x380}}, {{@ipv6={@local, @loopback, [0x0, 0xff, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x4, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, @ipv6=@empty, 0xd, 0x25, 0x162b}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
ppoll(&(0x7f0000000000)=[{r0, 0xc}, {r1, 0xc620}, {r1, 0x2000}, {r1, 0x215}], 0x4, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0xff]}, 0x8)

410.531646ms ago: executing program 2 (id=1942):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x19383fb31bd4d798}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x240048c0}, 0x20000004)
r8 = socket(0x10, 0x3, 0x9)
connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x200}}, 0x0)
getsockname$inet(r8, &(0x7f0000000400)={0x2, 0x0, @multicast1}, &(0x7f0000000440)=0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r9, &(0x7f00000000c0), 0x3f, 0x0)
ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000100))
r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
accept(r11, 0x0, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd70000000000003000000580001"], 0x6c}}, 0x14810)
sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f00"], 0x114}], 0x1}, 0x0)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x434, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x474c}, @device_a, @broadcast, @random="38ca7f7b0ec5", {0x3, 0x65f}, @value=@ver_80211n={0x0, 0x7ffb, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x40, @void}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3c5, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_a, @device_a, @from_mac=@device_b, {0x4, 0xdc1}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x0, 0x56, @default, @void, @void, [{0xdd, 0xe8, "5570d3e899a7e04a816a568cdea202ffb97d395c5edd838ac8bd4321ecfa6bbdbbbc3d238f97d6888008f94ae08312bace93cf9cb78c4cae7fe35f8404191669009552fb6f80f43007958573e05802a46d2230a91772d001bcc8ea5c29d8f3970ca205895aaaec1745d07a690880ed54f2910062a1349c75b60991d025b06df12c9517439f33c955566991721223571b8eb5a2c9054154bab5c9e4def79f842f5115257dda3b5fe6b9d9714885155f23ffa2225dc6824cfe8b001937a4386c49dcab9ed5bc66203d5dca78a071c8b5f79e6d331f30dfe88ed820586fbe29becc4715d9f0d237191c"}, {0xdd, 0xc8, "5507d19e5238149c9fcb1542374389294457ed478f61636e1dc9abf9f4217d58fff69a7908730b6ceb488cc9cc385a8afa867e532866e1f9127c012c7afd62125af8bbe7a1d15e40515e0cf7ec5d1162b9660abc18b15e18c98bece643f41f772321ce37428e7907af74342da655a42df05e57d6125851527a1560304c8a11ba2d2d77439c4631e711c889232a09cb73c761b22801a6e0367a0908f3de3c4c2df98fba79d314e21357643fd2d1c926c0ee3b10d458f91039afb0df5ff64fe69877e311c3528441ff"}, {0xdd, 0x45, "2409ce1e98c047de39e1d5819f0b2d3a0b375593b4dd695ff99344dd8c511ca56c3ebade3bc8306ff63ddf14196be9b05bf653ae94d0c6b27ad9568545bec2b5bc504874dd"}, {0xdd, 0x82, "5e67d45e6f710aee4aa45118b18a091e57dda7e23dfd7a0950887fad5c0fe6c52102a865b806270e0c4b446aad8de3ef57207c4b47ca210a9043651ddd84b47ec6e6e5302966df4665444e7c40861c85e4970f705056b3ebc6eb951d5a31df9b2a8db26262a157547eaf11ac310c936157909091aeb15798ebf909cd32a7279835fe"}, {0xdd, 0x54, "77a99e11a3320216534b746df794757cee0756b673c29bd03113a6247a6966dd82d7586fda664f99a1473eb4427b2aba502181e01cbe3a42c150d6a8d0f489ca59ce5cb06ada4988a04135322b73d5e4413fcab0"}, {0xdd, 0x4c, "63d98ed75125295b212b84e6fbc3a74b504eeb878a85f281dd1fad3d6a10bf388c8b704ae1cbee7b021ff9229b752ababd62471e005e0af6bb35f357ecd6a56b4f56c37668348845b7f9649b"}, {0xdd, 0x7a, "f74dced79cbcbf6fdb84e9e50f9ce56c9cda6cb7a1bb9e35563c19023b2710db9f73e45653d1fffa81d0f57b217da9ce78c09774631546fb7e8d1a01ade0e769ee1d51cb58a39e981f4daa2e2121b60a9ca6b88ae68abd718aa32ab28413e85b1b282a630f3a075d99d5b384a08a6fb594bc7c5e078c1f55ac3e"}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4044}, 0x840)
bind$bt_hci(r13, &(0x7f0000000380)={0x1f, 0x0, 0x1}, 0x6)
close(r13)

362.927015ms ago: executing program 2 (id=1943):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x118, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0)

278.846826ms ago: executing program 2 (id=1944):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xfffffc1d, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}]}}}]}, 0x48}}, 0x24008080)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
recvmmsg$unix(r4, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000380)={0x5, 0x8, 0x7, 0xa, 0x8, 0x81})
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000300)=""/74, 0x4a}], 0x4, 0x0, 0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000004000000010400000004"], 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r6, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r2, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r0, &(0x7f0000003d00)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/77, 0x4d}], 0x1, &(0x7f0000000640)=""/235, 0xeb}, 0xa45}, {{&(0x7f0000000740)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/101, 0x65}, {&(0x7f00000008c0)=""/145, 0x91}], 0x2, &(0x7f00000009c0)=""/11, 0xb}, 0x2}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/15, 0xf}, {&(0x7f0000000a40)=""/154, 0x9a}, {&(0x7f0000000b00)=""/244, 0xf4}, {&(0x7f0000000c80)=""/125, 0x7d}], 0x4}, 0x2}, {{&(0x7f0000000d00)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/106, 0x6a}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/158, 0x9e}, {&(0x7f0000000ec0)=""/176, 0xb0}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x5, &(0x7f0000001000)=""/134, 0x86}, 0x7}, {{&(0x7f00000010c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001140)=""/27, 0x1b}, {&(0x7f0000001180)=""/179, 0xb3}, {&(0x7f0000001240)=""/102, 0x66}, {&(0x7f00000012c0)=""/63, 0x3f}, {&(0x7f0000001300)=""/74, 0x4a}, {&(0x7f0000001380)=""/210, 0xd2}, {&(0x7f0000001480)=""/63, 0x3f}], 0x7, &(0x7f0000001540)=""/49, 0x31}, 0x5}, {{&(0x7f0000001580)=@phonet, 0x80, &(0x7f0000001880)=[{&(0x7f0000001600)=""/198, 0xc6}, {&(0x7f0000001700)=""/217, 0xd9}, {&(0x7f0000001800)=""/76, 0x4c}], 0x3, &(0x7f00000018c0)=""/121, 0x79}, 0xffffffff}, {{&(0x7f0000001940)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000019c0)=""/71, 0x47}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/61, 0x3d}, {&(0x7f0000001a80)=""/138, 0x8a}], 0x5, &(0x7f0000001bc0)=""/172, 0xac}, 0xa}], 0x7, 0x0, &(0x7f0000001c80))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x400}, 0x4000)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)

148.04158ms ago: executing program 1 (id=1945):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0xd803000000000000}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)

0s ago: executing program 1 (id=1946):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x88}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @mcast2, 0x3}, 0x80, 0x0}, 0x8000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r6}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$sock(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88f7}}}}, 0x16)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r12, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xb2, "e8fff43f84930360d61aa056c1c87196bae9be7268e5c89ad576f2effb37db74820bf8a34fe41c52cefc706da6663d82633c814c5d155fbfb7578388560c00691bcbaa27d8786bd9ab59c4caa77df7d75db99ec529d3e278ea2e2a552f44d651a8c2f06879d24b89474eca23e0e7c7ff7a0d0c4368c15cd3a1b091de237d74eac8c76bedada7ff34f293470a55e285ea2467c5e8b3c77665ef485563e2c97c7491de2cfccab15a2a98d4e22bdffa9ac8e6e7"}, &(0x7f0000000080)=0xba)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

iumd released netlink socket, switching to perfect channel medium
[  111.703691][ T8066] : entered promiscuous mode
[  111.819182][ T8081] netlink: 'syz.0.682': attribute type 30 has an invalid length.
[  111.863665][ T8081] netlink: 'syz.0.682': attribute type 30 has an invalid length.
[  111.933614][ T8086] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  112.048067][ T8092] dvmrp1: entered allmulticast mode
[  112.051433][ T8092] dvmrp1: left allmulticast mode
[  112.180688][ T8100] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  112.196599][ T8098] veth1: left promiscuous mode
[  112.224516][ T8098] bond2: left promiscuous mode
[  112.227754][ T8098] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.230692][ T8098] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.233957][ T8098] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.236868][ T8098] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.243354][ T8098] veth5: left promiscuous mode
[  112.269517][ T8102] lo speed is unknown, defaulting to 1000
[  112.274992][ T8102] lo speed is unknown, defaulting to 1000
[  112.286690][ T8105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  112.385843][ T8105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  112.445309][ T8109] xt_l2tp: v2 doesn't support IP mode
[  112.465441][ T8105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  112.508935][ T8102] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  112.520621][ T8105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  112.598209][ T8126] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  112.637368][ T8105] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  112.656605][ T8105] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  112.665630][ T8105] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  112.681500][ T8105] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  112.730626][ T8135] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  112.968452][ T8147] syzkaller0: entered promiscuous mode
[  112.970553][ T8147] syzkaller0: entered allmulticast mode
[  113.463017][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[  113.919052][ T8144] lo speed is unknown, defaulting to 1000
[  113.930555][ T8144] lo speed is unknown, defaulting to 1000
[  114.022953][ T8151] veth0_to_bond: entered allmulticast mode
[  114.320583][ T8174] openvswitch: netlink: Message has 4 unknown bytes.
[  114.325469][ T8174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.679069][ T8187] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  115.042241][ T8198] bond0: (slave wlan1): Releasing backup interface
[  115.045352][ T8198] ip6gretap1: left allmulticast mode
[  115.047372][ T8198] ip6gretap1: left promiscuous mode
[  115.049272][ T8198] bridge3: port 1(ip6gretap1) entered disabled state
[  115.060642][ T8198] veth3: left allmulticast mode
[  115.062791][ T8198] veth3: left promiscuous mode
[  115.064502][ T8198] bridge3: port 2(veth3) entered disabled state
[  115.069069][ T8198] bond5: (slave gretap1): Releasing active interface
[  115.077116][ T8198] bond6: (slave veth5): Releasing active interface
[  115.084426][ T8198] __nla_validate_parse: 48 callbacks suppressed
[  115.084441][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.722'.
[  115.296142][ T8208] bridge0: port 1(gretap0) entered blocking state
[  115.301591][ T8208] bridge0: port 1(gretap0) entered disabled state
[  115.305445][ T8208] gretap0: entered allmulticast mode
[  115.308318][ T8208] gretap0: entered promiscuous mode
[  115.315461][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.727'.
[  115.319880][ T8210] validate_nla: 1 callbacks suppressed
[  115.319888][ T8210] netlink: 'syz.0.727': attribute type 58 has an invalid length.
[  115.324574][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.727'.
[  115.470732][ T8219] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  115.601068][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'.
[  115.614398][ T8229] netlink: 'syz.0.730': attribute type 64 has an invalid length.
[  115.675749][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'.
[  116.136799][ T8235] netlink: 'syz.1.733': attribute type 1 has an invalid length.
[  116.213925][ T8235] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  116.244439][ T8235] 8021q: adding VLAN 0 to HW filter on device bond4
[  116.245741][   T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  116.345492][ T8235] bond4 (unregistering): (slave ip6gretap2): Removing an active aggregator
[  116.349339][ T8235] bond4 (unregistering): (slave ip6gretap2): Releasing backup interface
[  116.363751][ T8235] bond4 (unregistering): Released all slaves
[  116.419895][ T8242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.512561][ T8251] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  116.578491][ T8250] ipvlan2: entered promiscuous mode
[  116.580300][ T8250] ipvlan2: entered allmulticast mode
[  116.584161][ T8250] batadv0: entered allmulticast mode
[  116.586715][ T8250] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  116.727025][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.740'.
[  116.791712][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'.
[  117.069009][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'.
[  117.093779][ T8295] netlink: 'syz.0.750': attribute type 1 has an invalid length.
[  117.106372][ T8295] 8021q: adding VLAN 0 to HW filter on device bond7
[  117.151652][ T8301] lo speed is unknown, defaulting to 1000
[  117.173263][ T8301] lo speed is unknown, defaulting to 1000
[  117.247981][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'.
[  117.250805][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'.
[  117.578987][ T8333] lo speed is unknown, defaulting to 1000
[  117.581595][ T8333] lo speed is unknown, defaulting to 1000
[  117.819475][ T8345] lo speed is unknown, defaulting to 1000
[  117.827447][ T8345] lo speed is unknown, defaulting to 1000
[  117.874584][ T8350] lo speed is unknown, defaulting to 1000
[  117.880441][ T8350] lo speed is unknown, defaulting to 1000
[  118.231533][ T8362] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  118.249357][ T8363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.259454][ T8366] netlink: 'syz.0.771': attribute type 20 has an invalid length.
[  118.263340][ T8366] netlink: 'syz.0.771': attribute type 20 has an invalid length.
[  118.276665][ T8362] syz_tun: left allmulticast mode
[  118.278375][ T8362] syz_tun: left promiscuous mode
[  118.280315][ T8362] bridge0: port 1(syz_tun) entered disabled state
[  118.286411][ T8362] bond3: (slave ip6gretap1): Removing an active aggregator
[  118.289066][ T8362] bond3: (slave ip6gretap1): Releasing backup interface
[  118.291317][ T8362] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 5e:bf:ba:4f:f7:31 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  118.300824][ T8362] bond3: (slave veth3): Releasing backup interface
[  118.307130][ T8362] bond5: (slave gretap1): Releasing active interface
[  118.309592][ T8362] gretap1: left promiscuous mode
[  118.311334][ T8362] gretap1: left allmulticast mode
[  118.317671][ T8362] bond7: (slave geneve3): Releasing active interface
[  118.320770][ T8362] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  118.324605][ T8362] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  118.328073][ T8362] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  118.330922][ T8362] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  118.331054][ T8371] netlink: 'syz.2.772': attribute type 10 has an invalid length.
[  118.377230][ T8371] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  118.387959][ T8371] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  118.631467][ T8389] openvswitch: netlink: Geneve option length err (len 4576, max 255).
[  118.643613][ T8389] bridge6: entered promiscuous mode
[  118.701258][ T8397] netlink: 'syz.2.785': attribute type 1 has an invalid length.
[  118.726760][ T8397] 8021q: adding VLAN 0 to HW filter on device bond8
[  118.783770][ T8404] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  118.846346][ T8406] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  118.857214][ T8406] vlan3: entered allmulticast mode
[  118.858932][ T8406] veth1: entered allmulticast mode
[  118.935027][ T8419] sch_tbf: burst 0 is lower than device bridge7 mtu (1514) !
[  119.018906][ T8426] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[  119.100078][ T8426] vlan2: entered allmulticast mode
[  119.108599][ T8426] bond8: entered allmulticast mode
[  119.433138][ T8466] xt_CT: No such helper "pptp"
[  119.442273][ T8470] netlink: 'syz.0.805': attribute type 1 has an invalid length.
[  119.471144][ T8464] xt_CT: No such helper "pptp"
[  119.488946][ T8473] : entered promiscuous mode
[  119.593681][ T8477] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.615068][ T8477] veth2: entered promiscuous mode
[  119.617260][ T8477] veth2: entered allmulticast mode
[  119.631412][ T8477] veth3: entered promiscuous mode
[  119.710721][ T8494] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  119.853274][ T8498] pim6reg1: entered promiscuous mode
[  119.855002][ T8498] pim6reg1: entered allmulticast mode
[  119.888389][ T8504] syzkaller0: entered allmulticast mode
[  120.038322][ T8523] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  120.064249][ T8526] tipc: Enabled bearer <eth:geneve1>, priority 10
[  120.432831][ T8538] validate_nla: 4 callbacks suppressed
[  120.432843][ T8538] netlink: 'syz.1.827': attribute type 1 has an invalid length.
[  120.438316][ T8538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.441076][ T8538] syzkaller0: entered promiscuous mode
[  120.443250][ T8538] syzkaller0: entered allmulticast mode
[  120.456644][ T8538] tipc: Resetting bearer <eth:syzkaller0>
[  120.469555][ T8540] tipc: Resetting bearer <eth:syzkaller0>
[  120.479393][ T8540] tipc: Disabling bearer <eth:syzkaller0>
[  120.577687][ T8545] netlink: 'syz.1.829': attribute type 11 has an invalid length.
[  120.635046][ T8546] __nla_validate_parse: 17 callbacks suppressed
[  120.635066][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'.
[  120.647251][ T8546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.832320][ T8555] netlink: 'syz.2.832': attribute type 58 has an invalid length.
[  120.834861][ T8555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.832'.
[  120.915043][ T8558] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  120.918333][ T8558] netlink: 224 bytes leftover after parsing attributes in process `syz.2.833'.
[  120.964423][ T8558] xt_CT: No such helper "snmp"
[  120.971180][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'.
[  120.975685][ T8558] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  121.102520][ T8564] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  121.120433][ T8564] vlan2: entered promiscuous mode
[  121.124398][ T8564] bridge0: entered promiscuous mode
[  121.186439][ T5878] tipc: Node number set to 874761802
[  121.256973][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'.
[  121.264501][ T8572] netlink: 'syz.0.839': attribute type 1 has an invalid length.
[  121.272024][ T8572] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.839'.
[  121.381132][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'.
[  121.561872][ T8577] netlink: 60 bytes leftover after parsing attributes in process `syz.2.841'.
[  121.844349][ T8599] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  121.987682][ T8606] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  122.018676][ T8609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.851'.
[  122.049723][ T8611] Unknown status report in ack skb
[  122.077036][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'.
[  122.087622][ T8613] netlink: 'syz.1.853': attribute type 1 has an invalid length.
[  122.463687][ T8640] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  122.470345][ T8640] gretap0: left allmulticast mode
[  122.476431][ T8640] gretap0: left promiscuous mode
[  122.478546][ T8641] x_tables: duplicate underflow at hook 3
[  122.483166][ T8640] bridge0: port 1(gretap0) entered disabled state
[  122.494981][ T8640] netlink: 'syz.1.860': attribute type 10 has an invalid length.
[  122.497660][ T8640] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  122.738857][ T8654] bridge0: entered allmulticast mode
[  122.766224][ T8654] bridge0 (unregistering): left allmulticast mode
[  122.864332][ T8658] lo speed is unknown, defaulting to 1000
[  122.867583][ T8658] lo speed is unknown, defaulting to 1000
[  123.183268][ T8680] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  123.430741][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.045649][ T8701] netlink: 'syz.2.875': attribute type 11 has an invalid length.
[  124.072881][ T8701] lo speed is unknown, defaulting to 1000
[  124.076209][ T8701] lo speed is unknown, defaulting to 1000
[  124.113580][ T8707] netlink: 'syz.1.878': attribute type 1 has an invalid length.
[  124.146424][ T8707] netlink: 'syz.1.878': attribute type 29 has an invalid length.
[  124.154962][ T8707] unsupported nla_type 58
[  124.198712][ T8707] bond4: entered promiscuous mode
[  124.200855][ T8707] bond4: entered allmulticast mode
[  124.216110][ T8707] 8021q: adding VLAN 0 to HW filter on device bond4
[  124.667619][ T8739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.673864][ T8739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.947615][ T8755] xt_hashlimit: size too large, truncated to 1048576
[  125.003881][ T8757] veth1_to_team: entered allmulticast mode
[  125.006597][ T8757] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  125.324625][ T8771] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20003
[  125.461096][ T8785] validate_nla: 3 callbacks suppressed
[  125.461115][ T8785] netlink: 'syz.1.895': attribute type 1 has an invalid length.
[  125.653885][ T8796] __nla_validate_parse: 18 callbacks suppressed
[  125.653904][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.897'.
[  125.728346][ T8795] macvlan14: entered allmulticast mode
[  125.737598][ T8795] veth1_vlan: entered allmulticast mode
[  125.756371][ T8795] veth1_vlan: left allmulticast mode
[  126.144059][ T8806] netlink: 60 bytes leftover after parsing attributes in process `syz.2.900'.
[  126.208406][ T8810] netlink: 'syz.2.902': attribute type 13 has an invalid length.
[  126.211677][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'.
[  126.214241][ T8812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.221067][ T8810] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  126.224532][ T8810] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  126.227865][ T8810] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  126.231191][ T8810] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  126.236379][ T8810] netlink: 'syz.2.902': attribute type 13 has an invalid length.
[  126.239436][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'.
[  126.282239][ T8814] netlink: 'syz.2.904': attribute type 10 has an invalid length.
[  126.285674][ T8814] team0: Cannot enslave team device to itself
[  126.409118][ T8820] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  126.752635][ T8836] netlink: 'syz.2.914': attribute type 1 has an invalid length.
[  126.890753][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'.
[  126.986030][ T8854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.989657][ T8854] syzkaller0: entered promiscuous mode
[  126.994164][ T8854] syzkaller0: entered allmulticast mode
[  127.042989][ T8854] tipc: Resetting bearer <eth:syzkaller0>
[  127.046986][ T8853] tipc: Resetting bearer <eth:syzkaller0>
[  127.064526][ T8853] tipc: Disabling bearer <eth:syzkaller0>
[  127.083141][ T8856] lo speed is unknown, defaulting to 1000
[  127.105400][ T8856] lo speed is unknown, defaulting to 1000
[  127.160287][ T8859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.186597][ T8856] netlink: 'syz.0.921': attribute type 13 has an invalid length.
[  127.189151][ T8856] netlink: 'syz.0.921': attribute type 17 has an invalid length.
[  127.195916][ T8856] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  127.205885][ T8862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.922'.
[  127.249257][ T8862] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.252576][ T8862] 8021q: adding VLAN 0 to HW filter on device team0
[  127.258873][ T8862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.264370][ T5891] lo speed is unknown, defaulting to 1000
[  127.266248][ T5891] syz2: Port: 1 Link ACTIVE
[  128.093403][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'.
[  128.155858][ T8873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.926'.
[  128.166359][ T8868] 8021q: adding VLAN 0 to HW filter on device bond9
[  128.187490][ T8874] bond0: (slave wlan1): Releasing backup interface
[  128.208188][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'.
[  128.215888][ T8876] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  128.298393][ T8882] lo speed is unknown, defaulting to 1000
[  128.301451][ T8882] lo speed is unknown, defaulting to 1000
[  128.355139][ T8880] IPv6: sit2: Disabled Multicast RS
[  128.358759][ T8880] sit2: entered allmulticast mode
[  128.402699][ T8882] netlink: 'syz.0.930': attribute type 13 has an invalid length.
[  128.405909][ T8882] netlink: 'syz.0.930': attribute type 17 has an invalid length.
[  128.438736][ T8882] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  128.463983][ T8894] macvlan1: entered promiscuous mode
[  128.467899][ T8894] macvlan1: left promiscuous mode
[  128.777486][ T8900] macsec1: entered promiscuous mode
[  128.784415][ T8900] macsec1: entered allmulticast mode
[  128.790209][ T8900] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  128.855419][ T8909] IPVS: length: 169 != 8
[  128.920902][ T8913] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  128.996420][ T8917] netlink: 'syz.2.942': attribute type 1 has an invalid length.
[  129.179138][ T8920] lo speed is unknown, defaulting to 1000
[  129.187088][ T8920] lo speed is unknown, defaulting to 1000
[  129.336278][ T8920] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  132.517782][   T68] wlan0: failed to finalize CSA on link 0, disconnecting
[  156.915414][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.951'.
[  157.004548][ T8963] Illegal XDP return value 4294967274 on prog  (id 167) dev N/A, expect packet loss!
[  157.011334][ T8963] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  157.216846][ T8976] validate_nla: 2 callbacks suppressed
[  157.216858][ T8976] netlink: 'syz.1.952': attribute type 16 has an invalid length.
[  157.221436][ T8976] netlink: 'syz.1.952': attribute type 17 has an invalid length.
[  157.249329][ T8976] 8021q: adding VLAN 0 to HW filter on device team0
[  157.254378][ T8976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.751160][ T8978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.953'.
[  157.757170][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'.
[  157.769621][ T8978] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  157.777128][ T8978] netlink: 128 bytes leftover after parsing attributes in process `syz.2.953'.
[  157.846465][ T8983] netlink: 224 bytes leftover after parsing attributes in process `syz.2.955'.
[  157.854935][ T8983] netlink: 'syz.2.955': attribute type 1 has an invalid length.
[  157.862951][ T8984] netlink: 52 bytes leftover after parsing attributes in process `syz.0.954'.
[  157.883567][ T8983] 8021q: adding VLAN 0 to HW filter on device bond10
[  157.915902][ T8983] bond10: (slave gretap2): making interface the new active one
[  157.920734][ T8983] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  157.995538][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'.
[  157.999311][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'.
[  158.013931][ T8988] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  158.016819][ T8988] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  158.019572][ T8988] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  158.023456][ T8988] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  158.038781][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'.
[  158.056208][ T8992] netlink: 'syz.0.958': attribute type 13 has an invalid length.
[  158.062327][ T8992] netlink: 'syz.0.958': attribute type 17 has an invalid length.
[  158.101306][ T8992] 8021q: adding VLAN 0 to HW filter on device team0
[  158.123146][ T8992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.150360][ T8995] lo speed is unknown, defaulting to 1000
[  158.162630][ T8995] lo speed is unknown, defaulting to 1000
[  158.204071][ T8992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.248827][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.960'.
[  158.313983][ T9003] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  158.317610][ T8992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.357706][ T9006] lo speed is unknown, defaulting to 1000
[  158.361686][ T9006] lo speed is unknown, defaulting to 1000
[  158.378060][ T8992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.445731][ T9006] netlink: 'syz.2.963': attribute type 13 has an invalid length.
[  158.448451][ T9006] netlink: 'syz.2.963': attribute type 17 has an invalid length.
[  158.458792][ T9006] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  158.970834][ T9010] netlink: 'syz.0.964': attribute type 1 has an invalid length.
[  158.983451][ T5834] Bluetooth: hci2: command 0x0405 tx timeout
[  159.016160][ T9010] 8021q: adding VLAN 0 to HW filter on device bond10
[  159.049143][ T9010] bond10: (slave gretap2): making interface the new active one
[  159.064558][ T9010] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  159.119522][ T9010] syz.0.964 (9010) used greatest stack depth: 19088 bytes left
[  159.165372][ T9025] netlink: 'syz.1.969': attribute type 10 has an invalid length.
[  159.235023][ T9024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.299698][ T9043] lo speed is unknown, defaulting to 1000
[  159.303025][ T9043] lo speed is unknown, defaulting to 1000
[  159.422334][ T9043] netlink: 'syz.2.977': attribute type 13 has an invalid length.
[  159.429520][ T9043] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  159.566890][ T9055] openvswitch: netlink: Missing key (keys=40, expected=100)
[  159.731439][ T9061] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20002
[  159.841298][ T9072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  159.844631][ T9072] IPv6: NLM_F_CREATE should be set when creating new route
[  159.986717][ T9086] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  160.206458][ T9101] lo speed is unknown, defaulting to 1000
[  160.209064][ T9101] lo speed is unknown, defaulting to 1000
[  160.269523][ T9106] 8021q: adding VLAN 0 to HW filter on device bond6
[  160.288175][ T9106] 8021q: adding VLAN 0 to HW filter on device bond6
[  160.290751][ T9106] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  160.297281][ T9106] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  160.414151][ T9112] lo speed is unknown, defaulting to 1000
[  160.418174][ T9112] lo speed is unknown, defaulting to 1000
[  160.477990][ T9115] bond10: (slave gretap2): Releasing active interface
[  160.501145][ T9115] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  160.507386][ T9115] wlan1: mtu greater than device maximum
[  160.509797][ T9115] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  160.659427][ T9112] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  160.697437][ T9125] openvswitch: netlink: IP tunnel dst address not specified
[  160.730133][ T9125] IPv6: sit1: Disabled Multicast RS
[  160.800148][ T9129] 8021q: adding VLAN 0 to HW filter on device bond7
[  160.867527][ T9135] lo speed is unknown, defaulting to 1000
[  160.872763][ T9135] lo speed is unknown, defaulting to 1000
[  161.571004][ T9158] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  161.799003][ T9165] lo speed is unknown, defaulting to 1000
[  161.810490][ T9165] lo speed is unknown, defaulting to 1000
[  161.963562][ T9180] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  162.084192][ T9193] __nla_validate_parse: 16 callbacks suppressed
[  162.084213][ T9193] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1028'.
[  162.121350][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1030'.
[  162.135165][ T9196] 8021q: adding VLAN 0 to HW filter on device bond11
[  162.139264][ T9196] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  162.144439][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'.
[  162.197696][ T9196] macvlan19: entered promiscuous mode
[  162.199660][ T9196] macvlan19: entered allmulticast mode
[  162.204091][ T9196] bond11: entered promiscuous mode
[  162.206145][ T9196] 8021q: adding VLAN 0 to HW filter on device macvlan19
[  162.210728][ T9196] bond11: left promiscuous mode
[  162.330699][ T9213] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1037'.
[  162.363002][ T9214] lo speed is unknown, defaulting to 1000
[  162.365988][ T9214] lo speed is unknown, defaulting to 1000
[  162.581460][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'.
[  162.765862][ T9228] validate_nla: 12 callbacks suppressed
[  162.765877][ T9228] netlink: 'syz.2.1041': attribute type 1 has an invalid length.
[  163.221617][ T9237] lo speed is unknown, defaulting to 1000
[  163.226761][ T9237] lo speed is unknown, defaulting to 1000
[  163.386740][ T9241] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  163.647304][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'.
[  163.658636][ T9254] xt_TCPMSS: Only works on TCP SYN packets
[  163.665517][ T9256] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1051'.
[  163.674026][ T9256] netlink: 'syz.2.1051': attribute type 1 has an invalid length.
[  163.703129][ T9256] 8021q: adding VLAN 0 to HW filter on device bond12
[  163.726813][ T9259] bridge0: entered promiscuous mode
[  163.729483][ T9259] macsec1: entered promiscuous mode
[  163.732975][ T9259] bridge0: port 1(macsec1) entered blocking state
[  163.735863][ T9259] bridge0: port 1(macsec1) entered disabled state
[  163.738627][ T9259] macsec1: entered allmulticast mode
[  163.740889][ T9259] bridge0: entered allmulticast mode
[  163.745929][ T9259] macsec1: left allmulticast mode
[  163.748016][ T9259] bridge0: left allmulticast mode
[  163.752059][ T9259] bridge0: left promiscuous mode
[  163.889387][ T9265] syzkaller0: entered promiscuous mode
[  163.891544][ T9265] syzkaller0: entered allmulticast mode
[  163.895247][ T9261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.919377][ T9261] tipc: Resetting bearer <eth:syzkaller0>
[  163.933932][ T9261] tipc: Disabling bearer <eth:syzkaller0>
[  164.008379][ T9268] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1055'.
[  164.087626][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'.
[  164.166805][ T9273] sctp: [Deprecated]: syz.1.1057 (pid 9273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  164.166805][ T9273] Use struct sctp_sack_info instead
[  164.180463][ T9283] lo speed is unknown, defaulting to 1000
[  164.186577][ T9283] lo speed is unknown, defaulting to 1000
[  164.326897][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'.
[  164.330563][ T9296] net_ratelimit: 2 callbacks suppressed
[  164.330572][ T9296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.198691][ T9314] pimreg: left allmulticast mode
[  165.257955][ T9314] netlink: 'syz.1.1069': attribute type 16 has an invalid length.
[  165.280891][ T9322] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.282170][ T9328] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  165.299864][ T9322] veth0_to_hsr: entered promiscuous mode
[  165.304671][ T9322] veth0_to_hsr: entered allmulticast mode
[  165.313119][ T9322] netlink: 'syz.0.1071': attribute type 3 has an invalid length.
[  165.316419][ T9322] netlink: 'syz.0.1071': attribute type 1 has an invalid length.
[  165.343586][ T9335] netlink: 'syz.2.1073': attribute type 1 has an invalid length.
[  165.511473][ T9344] lo speed is unknown, defaulting to 1000
[  165.517119][ T9344] lo speed is unknown, defaulting to 1000
[  165.604298][ T9344] netlink: 'syz.0.1077': attribute type 13 has an invalid length.
[  165.607746][ T9344] netlink: 'syz.0.1077': attribute type 17 has an invalid length.
[  165.617494][ T9344] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  165.833440][ T9353] netlink: 'syz.0.1080': attribute type 29 has an invalid length.
[  165.836797][ T9353] netlink: 'syz.0.1080': attribute type 29 has an invalid length.
[  165.869429][ T9355] sctp: [Deprecated]: syz.0.1081 (pid 9355) Use of int in max_burst socket option deprecated.
[  165.869429][ T9355] Use struct sctp_assoc_value instead
[  166.044587][ T9359] syzkaller1: entered promiscuous mode
[  166.046958][ T9359] syzkaller1: entered allmulticast mode
[  166.308172][ T9365] lo speed is unknown, defaulting to 1000
[  166.311497][ T9365] lo speed is unknown, defaulting to 1000
[  166.365115][ T9366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.780755][ T9380] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  167.092088][ T9409] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  167.111234][ T9413] lo speed is unknown, defaulting to 1000
[  167.119145][ T9413] lo speed is unknown, defaulting to 1000
[  167.166418][ T9418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.176133][ T9419] !: renamed from dummy0 (while UP)
[  167.307110][ T9427] lo speed is unknown, defaulting to 1000
[  167.310675][ T9427] lo speed is unknown, defaulting to 1000
[  167.390077][ T5878] lo speed is unknown, defaulting to 1000
[  167.392415][ T5878] syz2: Port: 1 Link DOWN
[  167.395918][ T5878] lo speed is unknown, defaulting to 1000
[  167.467765][ T9436] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.470577][ T9436] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.473420][ T9436] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.476286][ T9436] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.500442][ T9436] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  167.524342][ T5891] lo speed is unknown, defaulting to 1000
[  167.708404][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.711105][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.778679][ T9470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.887255][ T9487] __nla_validate_parse: 16 callbacks suppressed
[  167.887276][ T9487] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1114'.
[  167.901407][ T9487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1114'.
[  167.905939][ T9487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1114'.
[  168.044668][ T9466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.259457][ T9534] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1117'.
[  168.269945][ T9534] gretap0: entered promiscuous mode
[  168.272725][ T9536] xt_hashlimit: size too large, truncated to 1048576
[  168.292890][ T9534] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1117'.
[  168.296629][ T9534] 0{X: renamed from gretap0
[  168.299578][ T9534] 0{X: left promiscuous mode
[  168.312042][ T9534] 0{X: entered allmulticast mode
[  168.316837][ T9534] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  168.424727][ T9543] xt_hashlimit: size too large, truncated to 1048576
[  168.445699][ T9543] syz.0.1118: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  168.453682][ T9543] CPU: 1 UID: 0 PID: 9543 Comm: syz.0.1118 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  168.453700][ T9543] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.453708][ T9543] Call Trace:
[  168.453714][ T9543]  <TASK>
[  168.453719][ T9543]  dump_stack_lvl+0x189/0x250
[  168.453743][ T9543]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.453758][ T9543]  ? __pfx__printk+0x10/0x10
[  168.453775][ T9543]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  168.453792][ T9543]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  168.453809][ T9543]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  168.453826][ T9543]  warn_alloc+0x214/0x310
[  168.453843][ T9543]  ? __pfx_warn_alloc+0x10/0x10
[  168.453862][ T9543]  ? __get_vm_area_node+0x28f/0x300
[  168.453881][ T9543]  ? htable_create+0xfc/0x7a0
[  168.453897][ T9543]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  168.453937][ T9543]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  168.453959][ T9543]  ? rcu_is_watching+0x15/0xb0
[  168.453975][ T9543]  ? htable_create+0xfc/0x7a0
[  168.453985][ T9543]  ? htable_create+0xfc/0x7a0
[  168.453995][ T9543]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  168.454037][ T9543]  ? htable_create+0xfc/0x7a0
[  168.454048][ T9543]  ? hashlimit_pernet+0x23/0x240
[  168.454072][ T9543]  htable_create+0xfc/0x7a0
[  168.454089][ T9543]  hashlimit_mt_check_common+0x719/0xa10
[  168.454108][ T9543]  hashlimit_mt_check_v1+0x221/0x360
[  168.454123][ T9543]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  168.454140][ T9543]  ? xt_find_match+0x1f7/0x250
[  168.454163][ T9543]  xt_check_match+0x3d1/0xab0
[  168.454180][ T9543]  ? __pfx___mutex_lock+0x10/0x10
[  168.454229][ T9543]  ? __pfx_xt_check_match+0x10/0x10
[  168.454250][ T9543]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  168.454275][ T9543]  ? xt_find_match+0x1f7/0x250
[  168.454298][ T9543]  translate_table+0x1553/0x2040
[  168.454332][ T9543]  ? __pfx_translate_table+0x10/0x10
[  168.454350][ T9543]  ? __might_fault+0xb0/0x130
[  168.454381][ T9543]  ? _copy_from_user+0x94/0xb0
[  168.454404][ T9543]  do_ip6t_set_ctl+0x970/0xce0
[  168.454426][ T9543]  ? rcu_is_watching+0x15/0xb0
[  168.454440][ T9543]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  168.454470][ T9543]  ? __pfx___mutex_lock+0x10/0x10
[  168.454484][ T9543]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  168.454505][ T9543]  ? __lock_acquire+0xab9/0xd20
[  168.454523][ T9543]  nf_setsockopt+0x26f/0x290
[  168.454546][ T9543]  rawv6_setsockopt+0x23b/0x5b0
[  168.454562][ T9543]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  168.454573][ T9543]  ? aa_sock_opt_perm+0x74/0x110
[  168.454588][ T9543]  ? sock_common_setsockopt+0x36/0xc0
[  168.454603][ T9543]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  168.454620][ T9543]  do_sock_setsockopt+0x17c/0x1b0
[  168.454640][ T9543]  __x64_sys_setsockopt+0x13f/0x1b0
[  168.454661][ T9543]  do_syscall_64+0xfa/0x3b0
[  168.454674][ T9543]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.454687][ T9543]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.454699][ T9543]  ? exc_page_fault+0x9f/0xf0
[  168.454713][ T9543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.454724][ T9543] RIP: 0033:0x7f186178e9a9
[  168.454736][ T9543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.454747][ T9543] RSP: 002b:00007f185f5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  168.454760][ T9543] RAX: ffffffffffffffda RBX: 00007f18619b6160 RCX: 00007f186178e9a9
[  168.454769][ T9543] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  168.454776][ T9543] RBP: 00007f1861810d69 R08: 00000000000004c0 R09: 0000000000000000
[  168.454784][ T9543] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  168.454792][ T9543] R13: 0000000000000001 R14: 00007f18619b6160 R15: 00007ffe91fe82c8
[  168.454812][ T9543]  </TASK>
[  168.454911][ T9543] Mem-Info:
[  168.506956][ T9541] validate_nla: 10 callbacks suppressed
[  168.506969][ T9541] netlink: 'syz.1.1119': attribute type 13 has an invalid length.
[  168.509163][ T9543] active_anon:16867 inactive_anon:0 isolated_anon:0
[  168.509163][ T9543]  active_file:1231 inactive_file:38247 isolated_file:0
[  168.509163][ T9543]  unevictable:1768 dirty:113 writeback:0
[  168.509163][ T9543]  slab_reclaimable:9815 slab_unreclaimable:152134
[  168.509163][ T9543]  mapped:21150 shmem:5294 pagetables:967
[  168.509163][ T9543]  sec_pagetables:0 bounce:0
[  168.509163][ T9543]  kernel_misc_reclaimable:0
[  168.509163][ T9543]  free:183827 free_pcp:23433 free_cma:0
[  168.510722][ T9541] netlink: 'syz.1.1119': attribute type 17 has an invalid length.
[  168.512626][ T9543] Node 0 active_anon:37984kB inactive_anon:0kB active_file:2956kB inactive_file:147284kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47656kB dirty:100kB writeback:0kB shmem:16284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8424kB pagetables:2216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  168.515455][ T9541] 0{X: left allmulticast mode
[  168.516871][ T9543] Node 1 active_anon:29484kB inactive_anon:0kB active_file:1968kB inactive_file:5704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36944kB dirty:352kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4120kB pagetables:1652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  168.521657][ T9541] !: left promiscuous mode
[  168.523544][ T9543] Node 0 
[  168.529608][ T9541] !: left allmulticast mode
[  168.530527][ T9543] DMA free:6548kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:616kB local_pcp:240kB free_cma:0kB
[  168.539586][ T9543] lowmem_reserve[]:
[  168.548141][ T9543]  0 812 812 812 812
[  168.661060][ T9543] Node 0 DMA32 free:42616kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37984kB inactive_anon:0kB active_file:2956kB inactive_file:147284kB unevictable:3536kB writepending:100kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:30628kB local_pcp:16308kB free_cma:0kB
[  168.661088][ T9543] lowmem_reserve[]: 0 0 0 0 0
[  168.661106][ T9543] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  168.684525][ T9543] lowmem_reserve[]: 0 0 854 854 854
[  168.686368][ T9543] Node 1 Normal free:227652kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29484kB inactive_anon:0kB active_file:1968kB inactive_file:5704kB unevictable:3536kB writepending:352kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:62332kB local_pcp:39860kB free_cma:0kB
[  168.696859][ T9543] lowmem_reserve[]: 0 0 0 0 0
[  168.698778][ T9543] Node 0 DMA: 6*4kB (UM) 4*8kB (UM) 4*16kB (M) 1*32kB (M) 2*64kB (M) 3*128kB (UM) 3*256kB (M) 2*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 6552kB
[  168.699186][ T9541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  168.704575][ T9543] Node 0 DMA32: 1431*4kB (UM) 609*8kB (UM) 203*16kB (U) 2*32kB (UM) 110*64kB (UM) 25*128kB (UME) 4*256kB (U) 12*512kB (UME) 11*1024kB (UM) 0*2048kB 0*4096kB = 42580kB
[  168.716729][ T9543] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  168.734329][ T9547] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  168.739532][ T9547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  168.746014][ T9543] Node 1 Normal: 397*4kB (UME) 118*8kB (UM) 630*16kB (UME) 410*32kB (UME) 237*64kB (UM) 87*128kB (UM) 38*256kB (UME) 16*512kB (UM) 10*1024kB (UM) 0*2048kB 36*4096kB (M) = 227652kB
[  168.758308][ T9543] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  168.764135][ T9543] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  168.767837][ T9543] 43599 total pagecache pages
[  168.769586][ T9543] 0 pages in swap cache
[  168.770984][ T9543] Free swap  = 124996kB
[  168.772775][ T9543] Total swap = 124996kB
[  168.774285][ T9543] 786301 pages RAM
[  168.775548][ T9543] 0 pages HighMem/MovableOnly
[  168.777107][ T9543] 241058 pages reserved
[  168.778500][ T9543] 0 pages cma reserved
[  169.004458][ T9573] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  169.168302][ T9584] lo speed is unknown, defaulting to 1000
[  169.171017][ T9584] lo speed is unknown, defaulting to 1000
[  169.385040][ T9585] netlink: 'syz.1.1130': attribute type 13 has an invalid length.
[  169.387768][ T9585] netlink: 'syz.1.1130': attribute type 17 has an invalid length.
[  169.394539][ T9585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.425643][ T9592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1132'.
[  169.429998][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'.
[  169.810154][ T9603] xt_CT: No such helper "pptp"
[  169.845859][ T9603] --map-set only usable from mangle table
[  169.899666][ T9608] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1139'.
[  169.909989][ T9608] hsr_slave_0: left promiscuous mode
[  170.069370][ T9614] batadv1: entered allmulticast mode
[  170.082932][ T9614] 8021q: adding VLAN 0 to HW filter on device batadv1
[  170.093818][ T9614] Cannot find set identified by id 2 to match
[  170.351259][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  170.393475][ T9629] netlink: 'syz.2.1145': attribute type 13 has an invalid length.
[  170.396543][ T9629] netlink: 'syz.2.1145': attribute type 17 has an invalid length.
[  170.415358][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.418403][ T9629] 8021q: adding VLAN 0 to HW filter on device team0
[  170.423996][ T9629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.429048][ T5878] lo speed is unknown, defaulting to 1000
[  170.431329][ T5878] syz2: Port: 1 Link ACTIVE
[  170.458459][ T9627] lo speed is unknown, defaulting to 1000
[  170.461538][ T9627] lo speed is unknown, defaulting to 1000
[  170.546642][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.603140][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.658465][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.728099][ T9638] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  170.731530][ T9638] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  170.739856][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'.
[  170.940338][ T9650] sit3: entered promiscuous mode
[  171.045335][ T9657] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.048448][ T9657] veth0_to_team: entered promiscuous mode
[  171.050528][ T9657] veth0_to_team: entered allmulticast mode
[  171.071653][ T9656] tipc: Disabling bearer <eth:syzkaller0>
[  171.167216][ T9660] lo speed is unknown, defaulting to 1000
[  171.170015][ T9660] lo speed is unknown, defaulting to 1000
[  171.189338][ T9629] syz.2.1145 (9629) used greatest stack depth: 18976 bytes left
[  171.263809][ T9665] macvlan21: entered allmulticast mode
[  171.271605][ T9665] bridge0: entered allmulticast mode
[  171.275323][ T9665] bridge0: port 1(macvlan21) entered blocking state
[  171.282009][ T9665] bridge0: port 1(macvlan21) entered disabled state
[  171.329937][ T9665] bridge0: left allmulticast mode
[  171.521075][ T9663] netlink: 'syz.1.1156': attribute type 13 has an invalid length.
[  171.529452][ T9663] netlink: 'syz.1.1156': attribute type 17 has an invalid length.
[  171.536362][ T9663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.790755][ T9695] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  171.863397][ T9701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.125302][ T9728] netlink: 'syz.0.1170': attribute type 10 has an invalid length.
[  172.267816][ T9746] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  172.376352][ T9753] netlink: 'syz.0.1175': attribute type 4 has an invalid length.
[  172.519484][ T9759] 8021q: adding VLAN 0 to HW filter on device bond14
[  172.825418][ T9774] lo speed is unknown, defaulting to 1000
[  172.828511][ T9774] lo speed is unknown, defaulting to 1000
[  172.897545][ T9780] __nla_validate_parse: 4 callbacks suppressed
[  172.897562][ T9780] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1179'.
[  172.955571][ T9774] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  172.989081][ T9784] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1180'.
[  173.594757][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'.
[  173.597846][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'.
[  173.723635][ T9805] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  173.774782][ T9808] validate_nla: 2 callbacks suppressed
[  173.774795][ T9808] netlink: 'syz.2.1186': attribute type 1 has an invalid length.
[  173.834217][ T9808] 8021q: adding VLAN 0 to HW filter on device bond16
[  173.838982][ T9808] bond15: (slave bond16): making interface the new active one
[  173.843696][ T9808] bond15: (slave bond16): Enslaving as an active interface with an up link
[  173.856648][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1186'.
[  173.884730][ T9815] 8021q: adding VLAN 0 to HW filter on device bond15
[  174.034009][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'.
[  174.042073][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1190'.
[  174.244440][ T9831] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  174.320823][ T9833] : renamed from bridge_slave_0
[  174.385974][ T9837] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  174.427805][ T9837] bond10: (slave gretap2): Releasing active interface
[  174.434362][ T9837] bond15: (slave bond16): Releasing backup interface
[  174.469054][ T9837] netlink: 'syz.2.1195': attribute type 10 has an invalid length.
[  174.472821][ T9839] lo speed is unknown, defaulting to 1000
[  174.477647][ T9837] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  174.503472][ T9837] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.518330][ T9837] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  174.530338][ T9837] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  174.534786][ T9839] lo speed is unknown, defaulting to 1000
[  174.542010][ T9837] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  174.763152][ T9839] netlink: 'syz.1.1196': attribute type 13 has an invalid length.
[  174.766294][ T9839] netlink: 'syz.1.1196': attribute type 17 has an invalid length.
[  174.775253][ T9839] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  174.975942][ T9846] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  174.993610][ T9846] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  175.000710][ T9846] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  175.008339][ T9846] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  175.015379][ T9846] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  175.020921][ T9846] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  175.035588][ T9846] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  175.038659][ T9847] trusted_key: syz.1.1197 sent an empty control message without MSG_MORE.
[  175.047222][ T9846] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  175.050181][ T9846] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  175.333561][ T1268] hid-generic 0005:04F3:100C.0001: item fetching failed at offset 0/1
[  175.343940][ T1268] hid-generic 0005:04F3:100C.0001: probe with driver hid-generic failed with error -22
[  175.391354][ T9865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'.
[  175.485381][ T9869] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  175.497830][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'.
[  175.497854][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'.
[  175.524709][ T9869] netlink: 'syz.0.1205': attribute type 10 has an invalid length.
[  175.530906][ T9869] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  175.545067][ T9869] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  175.562819][ T9869] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  175.566724][ T9869] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  175.595191][ T9880] netlink: 'syz.1.1208': attribute type 2 has an invalid length.
[  175.837202][ T9892] lo speed is unknown, defaulting to 1000
[  175.841121][ T9892] lo speed is unknown, defaulting to 1000
[  175.841243][ T9890] lo speed is unknown, defaulting to 1000
[  175.882718][ T9890] lo speed is unknown, defaulting to 1000
[  176.074024][ T9890] netlink: 'syz.2.1211': attribute type 13 has an invalid length.
[  176.077434][ T9890] netlink: 'syz.2.1211': attribute type 17 has an invalid length.
[  176.223777][ T9903] vxcan0: entered promiscuous mode
[  176.259834][ T9906] netlink: 'syz.2.1215': attribute type 10 has an invalid length.
[  176.642265][ T9905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.657054][ T9523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.659779][ T9523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.683908][ T9920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.808487][ T9929] lo speed is unknown, defaulting to 1000
[  176.813754][ T9929] lo speed is unknown, defaulting to 1000
[  176.907593][ T9929] netlink: 'syz.1.1223': attribute type 13 has an invalid length.
[  177.039317][ T9933] lo speed is unknown, defaulting to 1000
[  177.042372][ T9933] lo speed is unknown, defaulting to 1000
[  177.404667][ T9953] batadv_slave_0: entered promiscuous mode
[  177.418658][ T9953] batadv_slave_0 (unregistering): left promiscuous mode
[  177.595957][ T9968] 8021q: adding VLAN 0 to HW filter on device bond17
[  177.666289][ T9978] lo speed is unknown, defaulting to 1000
[  177.670059][ T9978] lo speed is unknown, defaulting to 1000
[  178.517070][ T9996] macvlan19: entered promiscuous mode
[  178.519436][ T9996] macvlan19: entered allmulticast mode
[  178.581098][T10002] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  178.604992][T10002] __nla_validate_parse: 5 callbacks suppressed
[  178.605003][T10002] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1246'.
[  178.613871][T10006] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  178.621163][T10004] lo speed is unknown, defaulting to 1000
[  178.625335][T10004] lo speed is unknown, defaulting to 1000
[  178.662590][T10010] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  178.713805][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'.
[  178.778492][T10016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.781556][T10016] syzkaller0: entered promiscuous mode
[  178.783962][T10016] syzkaller0: entered allmulticast mode
[  178.803247][T10016] lo speed is unknown, defaulting to 1000
[  178.805731][T10016] lo speed is unknown, defaulting to 1000
[  178.854757][T10015] tipc: Resetting bearer <eth:syzkaller0>
[  178.866553][T10015] tipc: Disabling bearer <eth:syzkaller0>
[  178.983616][T10023] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.987255][T10023] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44236 - 0
[  179.004325][T10023] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 44688 - 0
[  179.016323][T10023] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  179.045596][T10025] macvlan15: entered promiscuous mode
[  179.058758][T10023] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.062870][T10023] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44236 - 0
[  179.066616][T10023] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 44688 - 0
[  179.070584][T10023] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  179.117691][T10023] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.121881][T10023] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44236 - 0
[  179.125854][T10023] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 44688 - 0
[  179.129811][T10023] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  179.197819][T10023] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.203997][T10023] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44236 - 0
[  179.208539][T10023] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 44688 - 0
[  179.215651][T10023] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  179.316160][T10031] validate_nla: 3 callbacks suppressed
[  179.316186][T10031] netlink: 'syz.0.1255': attribute type 5 has an invalid length.
[  179.331021][T10031] ip6erspan0: entered promiscuous mode
[  179.371251][T10023] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.388790][T10023] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.401518][T10023] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 44236 - 0
[  179.408393][T10023] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 44688 - 0
[  179.428431][T10023] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.434907][T10023] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.440035][T10023] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 44236 - 0
[  179.444578][T10023] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 44688 - 0
[  179.465458][T10041] macvlan16: entered promiscuous mode
[  179.486279][T10023] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.489700][T10023] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.496778][T10023] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 44236 - 0
[  179.500174][T10023] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 44688 - 0
[  179.524151][T10023] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.531962][T10023] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.535436][T10023] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 44236 - 0
[  179.540039][T10023] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 44688 - 0
[  179.688713][T10058] syzkaller0: entered promiscuous mode
[  179.690987][T10058] syzkaller0: entered allmulticast mode
[  179.785644][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'.
[  180.898271][T10072] netlink: 'syz.0.1269': attribute type 2 has an invalid length.
[  180.957259][T10078] netlink: 'syz.2.1272': attribute type 9 has an invalid length.
[  180.985244][T10080] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  181.022919][T10083] sit0: entered promiscuous mode
[  181.026593][T10083] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1274'.
[  181.110172][T10093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1276'.
[  181.117391][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'.
[  181.120809][T10093] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1276'.
[  181.126209][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'.
[  181.170758][T10096] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  181.185706][T10096] netlink: 'syz.0.1277': attribute type 10 has an invalid length.
[  181.188721][T10096] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  181.196628][T10096] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  181.203799][T10096] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  181.207458][T10096] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  181.360416][T10098] vlan3: entered promiscuous mode
[  181.363364][T10098] vlan3: entered allmulticast mode
[  181.365743][T10098] hsr_slave_1: entered allmulticast mode
[  181.396358][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'.
[  181.546304][T10102] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  181.695147][    C0] Unknown status report in ack skb
[  181.697621][    C0] Unknown status report in ack skb
[  181.714390][T10105] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 44236 - 0
[  181.718084][T10105] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 44236 - 0
[  181.722538][T10105] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 44236 - 0
[  181.726280][T10105] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 44236 - 0
[  181.730191][T10105] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 44688 - 0
[  181.735362][T10105] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 44688 - 0
[  181.739013][T10105] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 44688 - 0
[  181.743250][T10105] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 44688 - 0
[  181.752871][T10105] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.756679][T10105] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.760455][T10105] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.764518][T10105] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.776697][T10105] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.780268][T10105] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.784138][T10105] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.787535][T10105] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.817052][ T5829] lo speed is unknown, defaulting to 1000
[  181.819716][ T5829] syz1: Port: 1 Link DOWN
[  181.971735][T10115] netlink: 'syz.2.1284': attribute type 1 has an invalid length.
[  182.107337][T10123] xt_hashlimit: size too large, truncated to 1048576
[  182.417849][T10135] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1288'.
[  182.491052][T10139] netlink: 'syz.0.1290': attribute type 12 has an invalid length.
[  182.548003][T10145] netlink: 'syz.0.1291': attribute type 1 has an invalid length.
[  182.551279][T10145] sctp: [Deprecated]: syz.0.1291 (pid 10145) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.551279][T10145] Use struct sctp_sack_info instead
[  182.574291][T10146] xt_bpf: check failed: parse error
[  182.637857][T10148] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  182.699472][T10152] macvlan17: entered promiscuous mode
[  182.701612][T10152] macvlan17: entered allmulticast mode
[  182.704644][T10152] veth1_vlan: entered allmulticast mode
[  182.829022][T10161] lo speed is unknown, defaulting to 1000
[  182.833227][T10161] lo speed is unknown, defaulting to 1000
[  182.962709][T10161] netlink: 'syz.0.1298': attribute type 13 has an invalid length.
[  182.965686][T10161] netlink: 'syz.0.1298': attribute type 17 has an invalid length.
[  182.973657][T10161] net_ratelimit: 30 callbacks suppressed
[  182.973668][T10161] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  183.125635][T10170] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  183.367734][T10180] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  183.445371][ T9523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.449539][ T9523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.475667][T10186] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  183.485713][T10186] bond0: (slave wlan1): Releasing backup interface
[  183.505227][T10186] netlink: 'syz.0.1306': attribute type 10 has an invalid length.
[  183.508486][T10186] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  183.513908][T10186] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  183.604535][T10188] lo speed is unknown, defaulting to 1000
[  183.607758][T10188] lo speed is unknown, defaulting to 1000
[  183.826269][T10188] __nla_validate_parse: 6 callbacks suppressed
[  183.826307][T10188] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1307'.
[  184.071671][T10202] macvlan20: entered allmulticast mode
[  184.081715][T10202] bridge0: entered allmulticast mode
[  184.084648][T10208] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1312'.
[  184.086539][T10202] bridge0: port 1(macvlan20) entered blocking state
[  184.091007][T10202] bridge0: port 1(macvlan20) entered disabled state
[  184.097947][T10202] bridge0: left allmulticast mode
[  184.145017][T10213] macvtap0: entered allmulticast mode
[  184.147346][T10213] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  184.197077][T10217] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  184.228752][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[  184.290491][T10223] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1318'.
[  184.473341][T10243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1325'.
[  184.514764][T10250] xt_policy: output policy not valid in PREROUTING and INPUT
[  184.560948][T10254] xt_CT: No such helper "snmp_trap"
[  184.564833][T10257] validate_nla: 1 callbacks suppressed
[  184.564843][T10257] netlink: 'syz.0.1330': attribute type 1 has an invalid length.
[  184.602452][T10257] 8021q: adding VLAN 0 to HW filter on device bond11
[  184.608288][T10258] vlan2: entered promiscuous mode
[  184.609963][T10258] bond11: entered promiscuous mode
[  184.630473][T10258] vlan2: entered allmulticast mode
[  184.632886][T10258] bond11: entered allmulticast mode
[  184.655634][T10258] bond11: (slave gretap3): making interface the new active one
[  184.658463][T10258] gretap3: entered promiscuous mode
[  184.660473][T10258] gretap3: entered allmulticast mode
[  184.664534][T10258] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  184.696559][T10266] lo speed is unknown, defaulting to 1000
[  184.701204][T10266] lo speed is unknown, defaulting to 1000
[  184.837475][T10274] netlink: 'syz.0.1335': attribute type 2 has an invalid length.
[  184.849608][T10266] netlink: 'syz.1.1333': attribute type 13 has an invalid length.
[  184.855553][T10266] netlink: 'syz.1.1333': attribute type 17 has an invalid length.
[  184.864920][T10266] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  185.084881][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'.
[  185.088666][T10285] netlink: 'syz.0.1340': attribute type 5 has an invalid length.
[  185.091728][T10285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1340'.
[  185.111613][T10285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  185.115433][T10285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  185.118783][T10285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  185.125702][T10285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  185.129443][T10289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1339'.
[  185.133653][T10285] geneve0: entered promiscuous mode
[  185.137505][T10285] geneve0: entered allmulticast mode
[  185.251301][T10297] lo speed is unknown, defaulting to 1000
[  185.258117][T10297] lo speed is unknown, defaulting to 1000
[  185.316353][T10304] netlink: 'syz.0.1348': attribute type 13 has an invalid length.
[  185.319453][T10304] netlink: 'syz.0.1348': attribute type 17 has an invalid length.
[  185.342500][T10304] sit0: left promiscuous mode
[  185.357216][T10304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.388303][T10306] netlink: 'syz.1.1344': attribute type 1 has an invalid length.
[  185.405240][T10300] lo speed is unknown, defaulting to 1000
[  185.409902][T10300] lo speed is unknown, defaulting to 1000
[  185.487431][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'.
[  185.559829][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'.
[  185.569800][T10317] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  185.585318][T10320] sctp: [Deprecated]: syz.1.1347 (pid 10320) Use of int in max_burst socket option deprecated.
[  185.585318][T10320] Use struct sctp_assoc_value instead
[  185.622511][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  185.981427][T10340] veth1_vlan (unregistering): left allmulticast mode
[  186.149775][T10353] lo speed is unknown, defaulting to 1000
[  186.153501][T10353] lo speed is unknown, defaulting to 1000
[  186.225557][T10359] lo speed is unknown, defaulting to 1000
[  186.228564][T10359] lo speed is unknown, defaulting to 1000
[  186.270556][T10353] netlink: 'syz.2.1356': attribute type 13 has an invalid length.
[  186.274326][T10353] netlink: 'syz.2.1356': attribute type 17 has an invalid length.
[  186.292767][T10353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.387637][T10361] lo speed is unknown, defaulting to 1000
[  186.402563][T10361] lo speed is unknown, defaulting to 1000
[  186.713917][T10373] lo speed is unknown, defaulting to 1000
[  186.776194][T10373] lo speed is unknown, defaulting to 1000
[  187.493609][T10399] lo speed is unknown, defaulting to 1000
[  187.497777][T10399] lo speed is unknown, defaulting to 1000
[  187.855106][T10422] xt_CT: No such helper "syz0"
[  187.888201][T10420] lo speed is unknown, defaulting to 1000
[  187.895596][T10420] lo speed is unknown, defaulting to 1000
[  188.096764][T10434] xt_NFQUEUE: number of total queues is 0
[  188.425315][T10455] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  188.496369][T10460] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  188.796744][T10480] bridge0: port 1(ipvlan0) entered blocking state
[  188.799448][T10480] bridge0: port 1(ipvlan0) entered disabled state
[  188.803669][T10480] ipvlan0: entered allmulticast mode
[  188.805818][T10480] bridge0: entered allmulticast mode
[  188.809339][T10480] ipvlan0: left allmulticast mode
[  188.811284][T10480] bridge0: left allmulticast mode
[  188.988802][T10499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.994039][T10499] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  188.997528][T10499] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  189.017682][T10499] __nla_validate_parse: 10 callbacks suppressed
[  189.017692][T10499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1391'.
[  189.162592][T10510] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  189.165832][T10510] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  189.332909][T10521] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  189.484748][T10530] lo speed is unknown, defaulting to 1000
[  189.491443][T10530] lo speed is unknown, defaulting to 1000
[  189.495640][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1401'.
[  189.521742][T10536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1400'.
[  189.609214][T10538] lo speed is unknown, defaulting to 1000
[  189.616678][T10538] lo speed is unknown, defaulting to 1000
[  190.103668][ T1268] tipc: Node number set to 2981446790
[  190.220568][T10565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1407'.
[  190.230256][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'.
[  190.236505][T10565] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1407'.
[  190.388331][T10575] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  190.446408][T10581] lo speed is unknown, defaulting to 1000
[  190.449252][T10581] lo speed is unknown, defaulting to 1000
[  190.547260][T10586] netlink: 'syz.0.1414': attribute type 1 has an invalid length.
[  190.565049][T10586] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1414'.
[  190.945851][T10592] lo speed is unknown, defaulting to 1000
[  190.997237][T10592] lo speed is unknown, defaulting to 1000
[  191.189209][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'.
[  191.217414][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'.
[  191.447307][T10617] lo speed is unknown, defaulting to 1000
[  191.451161][T10617] lo speed is unknown, defaulting to 1000
[  191.670145][T10628] macvlan20: entered promiscuous mode
[  191.675997][T10628] macvlan20: entered allmulticast mode
[  191.678343][T10628] veth1_vlan: entered allmulticast mode
[  191.730211][T10631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1428'.
[  191.844240][T10636] lo speed is unknown, defaulting to 1000
[  191.847106][T10636] lo speed is unknown, defaulting to 1000
[  192.786870][T10652] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  193.004704][T10656] macvlan21: entered promiscuous mode
[  193.006683][T10656] bond0: entered promiscuous mode
[  193.008862][T10656] 8021q: adding VLAN 0 to HW filter on device macvlan21
[  193.050278][T10655] lo speed is unknown, defaulting to 1000
[  193.062556][T10655] lo speed is unknown, defaulting to 1000
[  193.171163][ T9523] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  193.345081][T10674] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  193.457700][T10684] netlink: 'syz.2.1442': attribute type 5 has an invalid length.
[  193.587791][T10695] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.590970][T10695] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  193.595757][T10695] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  193.677337][T10695] tipc: Resetting bearer <eth:syzkaller0>
[  193.735847][T10703] bridge0: port 1(veth0_to_bridge) entered blocking state
[  193.738546][T10703] bridge0: port 1(veth0_to_bridge) entered disabled state
[  193.741180][T10703] veth0_to_bridge: entered allmulticast mode
[  193.747214][T10703] veth0_to_bridge: entered promiscuous mode
[  193.799418][T10710] lo speed is unknown, defaulting to 1000
[  193.805981][T10710] lo speed is unknown, defaulting to 1000
[  193.855925][T10717] ip6t_srh: unknown srh match flags  5294
[  193.858754][T10716] xt_hashlimit: size too large, truncated to 1048576
[  193.873482][T10718] ip6t_srh: unknown srh match flags  5294
[  193.879019][T10717] sock: sock_set_timeout: `syz.1.1453' (pid 10717) tries to set negative timeout
[  193.883241][T10718] sock: sock_set_timeout: `syz.1.1453' (pid 10718) tries to set negative timeout
[  194.106446][T10709] delete_channel: no stack
[  194.508221][T10746] __nla_validate_parse: 7 callbacks suppressed
[  194.508231][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'.
[  194.550859][T10748] netlink: 'syz.2.1460': attribute type 10 has an invalid length.
[  194.727816][T10757] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  194.848520][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'.
[  194.958145][T10778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  195.018155][T10778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  195.094562][T10778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  195.165681][T10778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  195.227948][T10778] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  195.240032][T10778] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  195.256272][T10778] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  195.267437][T10778] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  195.493677][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'.
[  195.616818][T10832] netlink: 'syz.2.1483': attribute type 13 has an invalid length.
[  195.620440][T10832] netlink: 'syz.2.1483': attribute type 17 has an invalid length.
[  195.626013][T10831] bond0: (slave wlan1): Releasing backup interface
[  195.634938][T10831] bond11: (slave gretap3): Releasing active interface
[  195.637950][T10831] gretap3: left promiscuous mode
[  195.640271][T10831] gretap3: left allmulticast mode
[  195.657358][T10832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.697366][T10834] No such timeout policy "syz0"
[  195.706964][T10826] lo speed is unknown, defaulting to 1000
[  195.711682][T10826] lo speed is unknown, defaulting to 1000
[  195.823234][T10842] xt_l2tp: invalid flags combination: 4
[  195.853408][T10844] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1489'.
[  195.944011][T10848] xt_l2tp: v2 tid > 0xffff: 4294967295
[  196.038973][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'.
[  196.647885][T10867] lo speed is unknown, defaulting to 1000
[  196.650812][T10867] lo speed is unknown, defaulting to 1000
[  196.756218][T10878] netlink: 'syz.2.1499': attribute type 13 has an invalid length.
[  196.909370][T10882] lo speed is unknown, defaulting to 1000
[  196.913283][T10882] lo speed is unknown, defaulting to 1000
[  197.017409][T10888] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  197.206213][T10894] netlink: 'syz.0.1505': attribute type 13 has an invalid length.
[  197.209593][T10894] netlink: 'syz.0.1505': attribute type 17 has an invalid length.
[  197.263768][T10894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  197.337608][T10892] lo speed is unknown, defaulting to 1000
[  197.347825][T10892] lo speed is unknown, defaulting to 1000
[  197.375857][T10893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1505'.
[  197.551225][T10904] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  197.560292][T10904] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  197.732754][T10915] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  197.894334][T10912] tipc: Resetting bearer <eth:syzkaller0>
[  197.950288][T10918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.975622][T10924] lo speed is unknown, defaulting to 1000
[  197.979563][T10924] lo speed is unknown, defaulting to 1000
[  198.097696][T10927] pim6reg1: entered promiscuous mode
[  198.100350][T10927] pim6reg1: entered allmulticast mode
[  198.217813][T10927] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1513'.
[  198.238765][T10927] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  198.278759][T10927] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  198.350744][T10932] bond19 (unregistering): Released all slaves
[  198.508653][T10940] netlink: 'syz.0.1516': attribute type 11 has an invalid length.
[  198.565317][T10945] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  198.618963][T10949] netlink: 'syz.2.1519': attribute type 1 has an invalid length.
[  198.622520][T10949] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1519'.
[  198.625937][T10950] netlink: 'syz.2.1519': attribute type 6 has an invalid length.
[  198.661392][T10949] netlink: 'syz.2.1519': attribute type 6 has an invalid length.
[  198.725763][T10961] bond0: (slave wlan1): Releasing backup interface
[  198.736355][T10959] lo speed is unknown, defaulting to 1000
[  198.763990][T10959] lo speed is unknown, defaulting to 1000
[  198.931058][T10975] lo speed is unknown, defaulting to 1000
[  198.980313][T10975] lo speed is unknown, defaulting to 1000
[  199.085816][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'.
[  199.291490][T10992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.455699][T11009] netlink: 'syz.2.1535': attribute type 4 has an invalid length.
[  199.459916][T10789] lo speed is unknown, defaulting to 1000
[  199.462286][T10789] syz2: Port: 1 Link DOWN
[  199.501665][T11014] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  199.513762][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1537'.
[  199.546906][T11016] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address
[  199.552715][T11016] bond19: (slave vxcan1): Error -95 calling set_mac_address
[  199.597955][T11020] macvlan0: entered promiscuous mode
[  199.600185][T11020] macvlan0: entered allmulticast mode
[  199.603582][T11020] bond19: (slave macvlan0): Error -98 calling set_mac_address
[  199.650309][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1541'.
[  199.654437][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1541'.
[  199.706942][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1543'.
[  199.734419][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1544'.
[  199.847885][T11046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1546'.
[  199.851101][T11046] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  199.902255][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'.
[  199.906679][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1549'.
[  199.913914][T11057] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  199.917121][T11057] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  199.920713][T11057] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  199.926071][T11057] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  199.929449][T11057] geneve5: entered promiscuous mode
[  199.932086][T11057] geneve5: entered allmulticast mode
[  200.107878][T11072] lo speed is unknown, defaulting to 1000
[  200.123749][T11072] lo speed is unknown, defaulting to 1000
[  200.336529][T11087] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  200.369365][T11089] Cannot find add_set index 3 as target
[  200.385250][T11089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1557'.
[  200.411549][T11089] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  200.463273][T11089] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1557'.
[  200.677731][T11118] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  200.677935][T11119] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  200.680948][T11118] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  200.690567][T11120] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  200.763500][T11128] pim6reg1: entered promiscuous mode
[  200.765419][T11128] pim6reg1: entered allmulticast mode
[  200.797962][T11132] lo speed is unknown, defaulting to 1000
[  200.800760][T11132] lo speed is unknown, defaulting to 1000
[  200.917416][T11140] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  201.627133][T11184] validate_nla: 1 callbacks suppressed
[  201.627148][T11184] netlink: 'syz.2.1589': attribute type 5 has an invalid length.
[  201.800296][T11197] netlink: 'syz.2.1592': attribute type 1 has an invalid length.
[  201.906822][T11204] veth0_to_bridge: left allmulticast mode
[  201.909472][T11204] veth0_to_bridge: left promiscuous mode
[  201.923086][T11204] bridge0: port 1(veth0_to_bridge) entered disabled state
[  201.987960][T11207] 0{X: renamed from gretap0 (while UP)
[  201.991488][T11207] 0{X: entered allmulticast mode
[  201.996763][T11207] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  202.217651][T11222] netlink: 'syz.1.1600': attribute type 4 has an invalid length.
[  202.299490][T11219] bond0 (unregistering): Released all slaves
[  202.368354][T11222] 8021q: adding VLAN 0 to HW filter on device bond8
[  202.374523][T11222] team0: Port device bond8 added
[  202.401104][T11219] macsec0: entered promiscuous mode
[  202.508707][T11244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.513594][T11244] syzkaller0: entered promiscuous mode
[  202.515417][T11244] syzkaller0: entered allmulticast mode
[  202.549583][T11244] tipc: Resetting bearer <eth:syzkaller0>
[  202.554408][T11243] tipc: Resetting bearer <eth:syzkaller0>
[  202.561590][T11243] tipc: Disabling bearer <eth:syzkaller0>
[  202.767424][T11260] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.915306][T11264] netlink: 'syz.0.1614': attribute type 83 has an invalid length.
[  203.144215][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.696448][T11288] netlink: 'syz.2.1620': attribute type 1 has an invalid length.
[  203.775591][T11292] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  203.815478][T11296] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  204.200778][T11319] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  204.702399][T11346] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  204.724186][T11349] ip6t_REJECT: ECHOREPLY is not supported
[  204.806749][T11348] veth0: entered promiscuous mode
[  204.810059][T11348] __nla_validate_parse: 17 callbacks suppressed
[  204.810072][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'.
[  204.840455][T11348] veth0 (unregistering): left promiscuous mode
[  204.871619][T11362] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.039421][T11374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.045503][T11374] syzkaller0: MTU too low for tipc bearer
[  205.047738][T11374] tipc: Disabling bearer <eth:syzkaller0>
[  205.140108][T11377] netlink: 'syz.1.1647': attribute type 12 has an invalid length.
[  205.259968][T11382] team0: Port device bond8 removed
[  205.267614][T11382] netlink: 'syz.1.1648': attribute type 10 has an invalid length.
[  205.277007][T11382] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  205.370459][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1649'.
[  205.375192][T11387] openvswitch: netlink: Flow key attr not present in new flow.
[  205.458751][T11391] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  205.497633][T11391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1650'.
[  205.503145][T11391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1650'.
[  205.581579][T11394] lo speed is unknown, defaulting to 1000
[  205.586135][T11394] lo speed is unknown, defaulting to 1000
[  205.604615][T11396] lo speed is unknown, defaulting to 1000
[  205.614632][T11399] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1653'.
[  205.615367][T11396] lo speed is unknown, defaulting to 1000
[  205.628304][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'.
[  205.737891][T11401] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  205.817193][T11401] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  205.833636][T11415] netlink: 'syz.2.1655': attribute type 13 has an invalid length.
[  205.842155][T11415] netlink: 'syz.2.1655': attribute type 17 has an invalid length.
[  205.865824][T11415] 0{X: left allmulticast mode
[  205.878556][T11415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.886999][ T2339] lo speed is unknown, defaulting to 1000
[  205.889448][ T2339] syz2: Port: 1 Link ACTIVE
[  205.894015][T11401] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  205.946842][T11401] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  205.960010][T11418] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1655'.
[  205.969074][T11415] lo speed is unknown, defaulting to 1000
[  205.985451][T11415] lo speed is unknown, defaulting to 1000
[  206.056381][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'.
[  206.059662][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1656'.
[  206.069447][T11401] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  206.091191][T11401] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  206.096172][T11424] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  206.105957][T11401] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  206.120659][T11401] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  206.239003][T11433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1658'.
[  206.273166][T11433] vlan0: entered allmulticast mode
[  206.274934][T11433] team_slave_0: entered allmulticast mode
[  206.537518][T11466] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  206.827073][T11481] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  206.839414][T11481] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  206.915867][T11488] xt_hashlimit: max too large, truncated to 1048576
[  206.918893][T11488] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  206.967427][T11488] netlink: 'syz.1.1676': attribute type 39 has an invalid length.
[  207.065447][T11499] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  207.069564][T11499] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  207.114516][T11504] bond0: (slave macvlan0): Error -98 calling set_mac_address
[  207.270558][ T9519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.276603][ T9519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.761409][T11519] 8021q: adding VLAN 0 to HW filter on device bond21
[  207.805144][T11523] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  207.900017][T11525] lo speed is unknown, defaulting to 1000
[  207.906026][T11525] lo speed is unknown, defaulting to 1000
[  208.096488][T11525] netlink: 'syz.2.1687': attribute type 13 has an invalid length.
[  208.105782][T11525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.107322][T11532] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4.
[  208.130885][T11532] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  208.424815][T11563] lo speed is unknown, defaulting to 1000
[  208.432787][T11563] lo speed is unknown, defaulting to 1000
[  209.220242][T11567] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  209.246217][T11567] netlink: 'syz.0.1699': attribute type 10 has an invalid length.
[  209.249544][T11567] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  209.323873][T11573] bridge0: port 1(veth0_to_bridge) entered blocking state
[  209.327509][T11573] bridge0: port 1(veth0_to_bridge) entered disabled state
[  209.329032][T11567] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  209.330695][T11573] veth0_to_bridge: entered allmulticast mode
[  209.340294][T11573] veth0_to_bridge: entered promiscuous mode
[  209.341204][T11567] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  209.597678][T11586] sctp: [Deprecated]: syz.2.1706 (pid 11586) Use of int in max_burst socket option.
[  209.597678][T11586] Use struct sctp_assoc_value instead
[  209.831283][T11611] __nla_validate_parse: 11 callbacks suppressed
[  209.831296][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'.
[  209.831629][T11609] lo speed is unknown, defaulting to 1000
[  209.847380][T11609] lo speed is unknown, defaulting to 1000
[  209.870065][T11611] pim6reg1: entered promiscuous mode
[  209.873386][T11611] pim6reg1: entered allmulticast mode
[  209.883844][T11611] sch_tbf: burst 0 is lower than device bridge5 mtu (1514) !
[  209.973730][T11615] netlink: 'syz.1.1715': attribute type 1 has an invalid length.
[  209.994488][T11618] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  210.004296][T11615] vlan3: entered allmulticast mode
[  210.006056][T11615] bond9: entered allmulticast mode
[  210.049847][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1717'.
[  210.054399][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'.
[  210.098132][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'.
[  210.137372][T11623] lo speed is unknown, defaulting to 1000
[  210.141209][T11623] lo speed is unknown, defaulting to 1000
[  210.345845][T11639] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  210.396695][T11640] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  210.404693][T11639] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  210.496607][T11639] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  210.562342][T11639] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  210.598319][T11642] lo speed is unknown, defaulting to 1000
[  210.602423][T11642] lo speed is unknown, defaulting to 1000
[  210.635764][T11639] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  210.658683][T11639] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  210.676447][T11639] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  210.683703][T11639] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  210.816080][T11649] lo speed is unknown, defaulting to 1000
[  210.818771][T11649] lo speed is unknown, defaulting to 1000
[  210.900709][T11653] netlink: 'syz.0.1726': attribute type 10 has an invalid length.
[  210.908091][T11653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1726'.
[  210.930140][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'.
[  211.241337][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'.
[  211.309344][T11671] lo speed is unknown, defaulting to 1000
[  211.317410][T11671] lo speed is unknown, defaulting to 1000
[  211.406210][T11678] netlink: 'syz.2.1734': attribute type 2 has an invalid length.
[  211.414252][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'.
[  211.427748][T11676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1733'.
[  211.661297][T11687] netlink: 'syz.0.1737': attribute type 38 has an invalid length.
[  211.807140][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'.
[  211.889667][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.896880][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.899925][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.903723][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.906630][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.909569][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.916043][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.919445][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.922692][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.924773][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.928364][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.931310][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.937719][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.940847][T11698] bridge: RTM_NEWNEIGH with invalid ether address
[  211.986867][T11702] xt_hashlimit: size too large, truncated to 1048576
[  212.129263][T11710] netlink: 'syz.2.1743': attribute type 4 has an invalid length.
[  212.135927][ T2339] lo speed is unknown, defaulting to 1000
[  212.138009][ T2339] syz2: Port: 1 Link DOWN
[  212.139844][T11710] netlink: 'syz.2.1743': attribute type 4 has an invalid length.
[  212.145717][ T2339] lo speed is unknown, defaulting to 1000
[  212.153366][T11710] netlink: 'syz.2.1743': attribute type 11 has an invalid length.
[  212.158862][    T9] lo speed is unknown, defaulting to 1000
[  212.285781][T11721] xfrm2: entered promiscuous mode
[  212.287673][T11721] xfrm2: entered allmulticast mode
[  212.324646][T11723] lo speed is unknown, defaulting to 1000
[  212.327396][T11723] lo speed is unknown, defaulting to 1000
[  212.430018][T11725] lo speed is unknown, defaulting to 1000
[  212.441696][T11725] lo speed is unknown, defaulting to 1000
[  212.451212][T11733] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  212.531577][T11733] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  212.596995][T11733] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  212.655036][T11753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.665187][T11753] pimreg: entered allmulticast mode
[  212.674772][T11733] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  212.719435][T11733] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  212.734286][T11733] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  212.752309][T11733] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  212.763174][T11733] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  212.877776][T11762] lo speed is unknown, defaulting to 1000
[  212.880599][T11762] lo speed is unknown, defaulting to 1000
[  212.980004][T11767] netlink: 'syz.0.1758': attribute type 4 has an invalid length.
[  212.989652][T11767] netlink: 'syz.0.1758': attribute type 4 has an invalid length.
[  213.081393][T11779] xt_hashlimit: size too large, truncated to 1048576
[  213.092592][T11779] syz.2.1762: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  213.098468][T11779] CPU: 0 UID: 0 PID: 11779 Comm: syz.2.1762 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  213.098485][T11779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.098492][T11779] Call Trace:
[  213.098497][T11779]  <TASK>
[  213.098502][T11779]  dump_stack_lvl+0x189/0x250
[  213.098523][T11779]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.098536][T11779]  ? __pfx__printk+0x10/0x10
[  213.098552][T11779]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  213.098567][T11779]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  213.098582][T11779]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  213.098594][T11779]  warn_alloc+0x214/0x310
[  213.098610][T11779]  ? __pfx_warn_alloc+0x10/0x10
[  213.098625][T11779]  ? __get_vm_area_node+0x28f/0x300
[  213.098641][T11779]  ? htable_create+0xfc/0x7a0
[  213.098655][T11779]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  213.098689][T11779]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  213.098716][T11779]  ? rcu_is_watching+0x15/0xb0
[  213.098730][T11779]  ? htable_create+0xfc/0x7a0
[  213.098740][T11779]  ? htable_create+0xfc/0x7a0
[  213.098749][T11779]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  213.098765][T11779]  ? htable_create+0xfc/0x7a0
[  213.098774][T11779]  ? hashlimit_pernet+0x23/0x240
[  213.098784][T11779]  htable_create+0xfc/0x7a0
[  213.098799][T11779]  hashlimit_mt_check_common+0x719/0xa10
[  213.098815][T11779]  xt_check_match+0x3d1/0xab0
[  213.098832][T11779]  ? __pfx___mutex_lock+0x10/0x10
[  213.098847][T11779]  ? __pfx_xt_check_match+0x10/0x10
[  213.098865][T11779]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  213.098887][T11779]  ? xt_find_match+0x1f7/0x250
[  213.098908][T11779]  translate_table+0x1553/0x2040
[  213.098961][T11779]  ? __pfx_translate_table+0x10/0x10
[  213.098980][T11779]  ? __might_fault+0xb0/0x130
[  213.099008][T11779]  ? _copy_from_user+0x94/0xb0
[  213.099028][T11779]  do_ip6t_set_ctl+0x970/0xce0
[  213.099041][T11779]  ? rcu_is_watching+0x15/0xb0
[  213.099049][T11779]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  213.099066][T11779]  ? __pfx___mutex_lock+0x10/0x10
[  213.099073][T11779]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  213.099080][T11779]  ? __schedule+0x1713/0x4d00
[  213.099109][T11779]  ? __lock_acquire+0xab9/0xd20
[  213.099120][T11779]  nf_setsockopt+0x26f/0x290
[  213.099133][T11779]  rawv6_setsockopt+0x23b/0x5b0
[  213.099142][T11779]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  213.099148][T11779]  ? aa_sock_opt_perm+0x74/0x110
[  213.099156][T11779]  ? sock_common_setsockopt+0x36/0xc0
[  213.099166][T11779]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  213.099201][T11779]  do_sock_setsockopt+0x17c/0x1b0
[  213.099220][T11779]  __x64_sys_setsockopt+0x13f/0x1b0
[  213.099238][T11779]  do_syscall_64+0xfa/0x3b0
[  213.099251][T11779]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.099262][T11779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.099272][T11779]  ? exc_page_fault+0x9f/0xf0
[  213.099285][T11779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.099295][T11779] RIP: 0033:0x7f5a8618e9a9
[  213.099305][T11779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.099315][T11779] RSP: 002b:00007f5a86f81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  213.099328][T11779] RAX: ffffffffffffffda RBX: 00007f5a863b5fa0 RCX: 00007f5a8618e9a9
[  213.099337][T11779] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  213.099341][T11779] RBP: 00007f5a86210d69 R08: 0000000000000588 R09: 0000000000000000
[  213.099346][T11779] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[  213.099350][T11779] R13: 0000000000000000 R14: 00007f5a863b5fa0 R15: 00007ffed59c1788
[  213.099361][T11779]  </TASK>
[  213.099611][T11779] Mem-Info:
[  213.232871][T11779] active_anon:12998 inactive_anon:0 isolated_anon:0
[  213.232871][T11779]  active_file:1443 inactive_file:37880 isolated_file:0
[  213.232871][T11779]  unevictable:1768 dirty:304 writeback:0
[  213.232871][T11779]  slab_reclaimable:10110 slab_unreclaimable:159205
[  213.232871][T11779]  mapped:20387 shmem:2432 pagetables:926
[  213.232871][T11779]  sec_pagetables:0 bounce:0
[  213.232871][T11779]  kernel_misc_reclaimable:0
[  213.232871][T11779]  free:182207 free_pcp:17862 free_cma:0
[  213.250952][T11779] Node 0 active_anon:23048kB inactive_anon:0kB active_file:3804kB inactive_file:145752kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44592kB dirty:624kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8768kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  213.262482][T11779] Node 1 active_anon:28944kB inactive_anon:0kB active_file:1968kB inactive_file:5768kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36956kB dirty:592kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4184kB pagetables:1556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  213.276184][T11779] Node 0 DMA free:5664kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:884kB local_pcp:564kB free_cma:0kB
[  213.286180][T11779] lowmem_reserve[]: 0 812 812 812 812
[  213.288673][T11779] Node 0 DMA32 free:47128kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23112kB inactive_anon:0kB active_file:3804kB inactive_file:145752kB unevictable:3536kB writepending:624kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:29016kB local_pcp:12260kB free_cma:0kB
[  213.301031][T11779] lowmem_reserve[]: 0 0 0 0 0
[  213.306847][T11779] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  213.318696][T11779] lowmem_reserve[]: 0 0 854 854 854
[  213.320520][T11779] Node 1 Normal free:225364kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28808kB inactive_anon:0kB active_file:1968kB inactive_file:5768kB unevictable:3536kB writepending:592kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:33672kB local_pcp:14840kB free_cma:0kB
[  213.355390][T11789] netlink: 'syz.1.1763': attribute type 1 has an invalid length.
[  213.359364][T11779] lowmem_reserve[]: 0 0 0 0 0
[  213.385198][T11779] Node 0 DMA: 31*4kB (UME) 21*8kB (UM) 12*16kB (UM) 20*32kB (UM) 12*64kB (UM) 4*128kB (UME) 3*256kB (ME) 3*512kB (ME) 1*1024kB (E) 0*2048kB 0*4096kB = 5732kB
[  213.400925][T11779] Node 0 DMA32: 3*4kB (UME) 367*8kB (UE) 361*16kB (UME) 64*32kB (UME) 189*64kB (UME) 50*128kB (UME) 17*256kB (UM) 7*512kB (UM) 6*1024kB (UME) 0*2048kB 0*4096kB = 43348kB
[  213.434032][T11779] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (UM) = 458492kB
[  213.440368][T11779] Node 1 Normal: 778*4kB (UME) 977*8kB (UME) 1127*16kB (UME) 551*32kB (UM) 358*64kB (UME) 136*128kB (UME) 67*256kB (UME) 34*512kB (UE) 29*1024kB (UME) 10*2048kB (UME) 13*4096kB (U) = 224896kB
[  213.455020][T11779] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  213.455423][T11792] bond10: entered promiscuous mode
[  213.459333][T11779] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  213.464491][T11779] 44598 total pagecache pages
[  213.466138][T11779] 0 pages in swap cache
[  213.467532][T11779] Free swap  = 124996kB
[  213.468917][T11779] Total swap = 124996kB
[  213.470259][T11779] 786301 pages RAM
[  213.471492][T11779] 0 pages HighMem/MovableOnly
[  213.473291][T11792] bond10: entered allmulticast mode
[  213.476476][T11792] 8021q: adding VLAN 0 to HW filter on device bond10
[  213.487687][T11789] bridge0: entered promiscuous mode
[  213.490135][T11789] bridge0: entered allmulticast mode
[  213.493655][T11789] bond10: (slave bridge0): Enslaving as a backup interface with an up link
[  213.504283][T11779] 241058 pages reserved
[  213.506104][T11779] 0 pages cma reserved
[  213.526915][T11789] netlink: 'syz.1.1763': attribute type 1 has an invalid length.
[  213.530234][T11789] netlink: 'syz.1.1763': attribute type 1 has an invalid length.
[  213.572216][ T6733] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  213.631557][T11796] netlink: 'syz.2.1765': attribute type 2 has an invalid length.
[  213.679289][T11797] lo speed is unknown, defaulting to 1000
[  213.692513][ T6733] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  213.692900][T11797] lo speed is unknown, defaulting to 1000
[  214.053337][T11810] bridge0: port 1(ipvlan0) entered blocking state
[  214.056182][T11810] bridge0: port 1(ipvlan0) entered disabled state
[  214.059056][T11810] ipvlan0: entered allmulticast mode
[  214.061427][T11810] bridge0: entered allmulticast mode
[  214.068181][T11810] ipvlan0: left allmulticast mode
[  214.070375][T11810] bridge0: left allmulticast mode
[  214.102340][   T13] bond10: (slave bridge0): link status up again after 0 ms
[  214.105317][   T13] bond10: (slave bridge0): failed to get link speed/duplex
[  214.127596][T11812] xt_hashlimit: max too large, truncated to 1048576
[  214.139268][T11812] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  214.308677][T11821] netlink: 'syz.1.1773': attribute type 2 has an invalid length.
[  214.346911][ T5841] bond10: (slave bridge0): link status up again after 0 ms
[  214.349426][ T5841] bond10: (slave bridge0): failed to get link speed/duplex
[  214.378396][T11825] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  214.490477][ T5841] bond10: (slave bridge0): failed to get link speed/duplex
[  214.500896][T11832] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  214.509343][T11832] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  214.515812][T11832] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  214.519266][T11832] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  214.523903][T11832] geneve1: entered promiscuous mode
[  214.526216][T11832] geneve1: entered allmulticast mode
[  214.529269][T11832] tipc: Resetting bearer <eth:geneve1>
[  214.531721][T11832] tipc: Resetting bearer <eth:geneve1>
[  214.611050][   T13] bond10: (slave bridge0): failed to get link speed/duplex
[  214.743173][ T5841] bond10: (slave bridge0): failed to get link speed/duplex
[  214.842329][T11860] lo speed is unknown, defaulting to 1000
[  214.846428][T11860] lo speed is unknown, defaulting to 1000
[  215.724779][T11864] __nla_validate_parse: 22 callbacks suppressed
[  215.724789][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'.
[  215.731063][T11864] syzkaller0: entered promiscuous mode
[  215.733331][T11864] syzkaller0: entered allmulticast mode
[  215.738069][T11867] tipc: Resetting bearer <eth:geneve1>
[  215.788270][T11866] tipc: Resetting bearer <eth:geneve1>
[  215.790277][T11866] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.793889][T11866] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.796567][T11866] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.799238][T11866] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  215.817789][T11866] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  215.820533][T11866] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  215.823574][T11866] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  215.826331][T11866] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  215.996297][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'.
[  216.024303][T11884] vlan3: entered promiscuous mode
[  216.026452][T11884] 0{X: entered promiscuous mode
[  216.071565][T11888] lo speed is unknown, defaulting to 1000
[  216.075798][T11888] lo speed is unknown, defaulting to 1000
[  216.160855][T11894] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  216.182987][T11896] wg1 speed is unknown, defaulting to 1000
[  216.184967][T11896] wg1 speed is unknown, defaulting to 1000
[  216.187286][T11896] wg1 speed is unknown, defaulting to 1000
[  216.195519][T11896] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  216.219947][T11896] wg1 speed is unknown, defaulting to 1000
[  216.238961][T11901] block nbd2: not configured, cannot reconfigure
[  216.239336][T11896] wg1 speed is unknown, defaulting to 1000
[  216.254421][T11896] wg1 speed is unknown, defaulting to 1000
[  216.257114][T11896] wg1 speed is unknown, defaulting to 1000
[  216.310696][T11910] netlink: 'syz.2.1802': attribute type 1 has an invalid length.
[  216.319229][T11910] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1802'.
[  216.339105][T11910] xt_CT: No such helper "snmp"
[  216.342871][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1802'.
[  216.352527][T11910] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  216.395587][T11920] lo speed is unknown, defaulting to 1000
[  216.398190][T11920] lo speed is unknown, defaulting to 1000
[  216.400649][T11920] wg1 speed is unknown, defaulting to 1000
[  216.418973][T11922] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  216.449963][T11929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1807'.
[  216.487480][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'.
[  216.520197][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'.
[  216.562106][T11937] veth1_vlan (unregistering): left allmulticast mode
[  216.834301][T11956] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  216.922478][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1814'.
[  216.963539][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'.
[  216.969804][T11962] vxcan0: entered promiscuous mode
[  217.065094][T11970] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  217.108764][T11970] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  217.175192][T11970] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  217.270861][T11978] veth0_to_bond: left allmulticast mode
[  217.275902][T11978] bond1: left promiscuous mode
[  217.277646][T11978] bond1: left allmulticast mode
[  217.279992][T11978] bond2: left promiscuous mode
[  217.281649][T11978] bond2: left allmulticast mode
[  217.283697][T11978] vti0: left promiscuous mode
[  217.285531][T11978] xfrm1: left allmulticast mode
[  217.287571][T11978] veth3: left promiscuous mode
[  217.289497][T11978] vlan2: left promiscuous mode
[  217.291134][T11978] bond5: left promiscuous mode
[  217.296093][T11978] vlan2: left allmulticast mode
[  217.297797][T11978] bond5: left allmulticast mode
[  217.303521][T11978] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  217.308034][T11978] macsec1: left promiscuous mode
[  217.309761][T11978] macsec1: left allmulticast mode
[  217.313369][T11978] batadv1: left allmulticast mode
[  217.339995][T11978] tipc: Resetting bearer <eth:syzkaller0>
[  217.361344][T11978] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  217.363888][T11978] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  217.381709][T11978] xfrm2: left promiscuous mode
[  217.384674][T11978] xfrm2: left allmulticast mode
[  217.399787][T11970] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  217.490253][T11970] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  217.520407][T11970] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  217.547317][T11970] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  217.557083][T11970] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  217.569738][T11982] xt_hashlimit: overflow, rate too high: 0
[  217.662342][ T5841] net_ratelimit: 19 callbacks suppressed
[  217.662353][ T5841] bond10: (slave bridge0): failed to get link speed/duplex
[  217.706564][T11999] validate_nla: 1 callbacks suppressed
[  217.706577][T11999] netlink: 'syz.0.1826': attribute type 13 has an invalid length.
[  217.711671][T11999] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1826'.
[  217.734995][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.737540][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.755407][T12003] lo speed is unknown, defaulting to 1000
[  217.757944][T12003] lo speed is unknown, defaulting to 1000
[  217.760448][T12003] wg1 speed is unknown, defaulting to 1000
[  217.802165][   T12] bond10: (slave bridge0): failed to get link speed/duplex
[  217.829267][T12003] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.840354][T12003] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.843091][T12003] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  217.847061][T12003] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  217.922749][ T5841] bond10: (slave bridge0): failed to get link speed/duplex
[  218.075742][   T12] bond0 (unregistering): Released all slaves
[  218.107214][ T5841] bond10: (slave bridge0): failed to get link speed/duplex
[  218.170042][T12017] netlink: 'syz.1.1831': attribute type 4 has an invalid length.
[  218.170615][T12019] netlink: 'syz.1.1831': attribute type 4 has an invalid length.
[  218.178466][ T5878] lo speed is unknown, defaulting to 1000
[  218.180989][ T5878] syz1: Port: 1 Link ACTIVE
[  218.222469][   T13] bond10: (slave bridge0): failed to get link speed/duplex
[  218.319497][T12028] netlink: 'syz.2.1834': attribute type 2 has an invalid length.
[  218.343587][   T13] bond10: (slave bridge0): failed to get link speed/duplex
[  218.364385][T12035] openvswitch: netlink: Missing key (keys=40, expected=100)
[  218.391703][T12037] netlink: 'syz.2.1837': attribute type 1 has an invalid length.
[  218.397770][T12037] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.402562][T12037] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  218.405562][T12037] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  218.408582][T12037] tipc: Resetting bearer <eth:syzkaller0>
[  218.419483][T12033] netlink: 'syz.1.1835': attribute type 9 has an invalid length.
[  218.444753][T12040] netlink: 'syz.2.1838': attribute type 4 has an invalid length.
[  218.453788][   T13] bond10: (slave bridge0): failed to get link speed/duplex
[  218.542623][T12043] lo speed is unknown, defaulting to 1000
[  218.546373][T12043] lo speed is unknown, defaulting to 1000
[  218.550155][T12043] wg1 speed is unknown, defaulting to 1000
[  218.602285][   T13] bond10: (slave bridge0): failed to get link speed/duplex
[  218.712149][   T12] bond10: (slave bridge0): failed to get link speed/duplex
[  219.230688][T12049] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  219.243537][T12051] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.249461][T12051] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.260220][T12051] tipc: Resetting bearer <eth:syzkaller0>
[  219.326918][T12056] netlink: 'syz.0.1842': attribute type 1 has an invalid length.
[  219.338544][T12058] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  219.371233][T12061] Cannot find add_set index 2 as target
[  219.382758][T12056] 8021q: adding VLAN 0 to HW filter on device bond12
[  219.517121][T12064] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  219.524040][T12077] netlink: 'syz.0.1849': attribute type 1 has an invalid length.
[  219.547511][T12077] 8021q: adding VLAN 0 to HW filter on device bond13
[  219.567998][T12082] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  219.656197][T12094] sctp: [Deprecated]: syz.1.1854 (pid 12094) Use of struct sctp_assoc_value in delayed_ack socket option.
[  219.656197][T12094] Use struct sctp_sack_info instead
[  219.714316][T12089] lo speed is unknown, defaulting to 1000
[  219.718873][T12099] netlink: 'syz.1.1854': attribute type 10 has an invalid length.
[  219.746868][T12099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.751019][T12099] batadv0: entered promiscuous mode
[  220.409483][T12089] lo speed is unknown, defaulting to 1000
[  220.411669][ T9519] tipc: Resetting bearer <eth:syzkaller0>
[  220.434292][T12089] wg1 speed is unknown, defaulting to 1000
[  220.596991][T12117] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  220.886653][T12144] __nla_validate_parse: 21 callbacks suppressed
[  220.886669][T12144] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1867'.
[  220.908751][T12144] bond0 (unregistering): Released all slaves
[  220.929782][T12147] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  220.962065][T12145] 8021q: adding VLAN 0 to HW filter on device team0
[  221.209973][T12158] x_tables: duplicate underflow at hook 2
[  221.321860][T12162] bond10: (slave bridge0): Removing an active aggregator
[  221.327086][T12162] bond10: (slave bridge0): Releasing backup interface
[  221.330643][T12162] bridge0: left promiscuous mode
[  221.332707][T12162] bridge0: left allmulticast mode
[  221.352846][T12162] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  221.367793][T12162] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  221.370866][T12162] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  221.372301][T12160] veth0_to_bridge: left allmulticast mode
[  221.376308][T12160] veth0_to_bridge: left promiscuous mode
[  221.378995][T12160] bridge0: port 1(veth0_to_bridge) entered disabled state
[  221.387159][T12160] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  221.390196][T12160] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  221.617498][T12177] batadv_slave_0: entered promiscuous mode
[  221.626271][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'.
[  221.643220][T12177] batadv_slave_0 (unregistering): left promiscuous mode
[  222.131399][T12203] lo speed is unknown, defaulting to 1000
[  222.142699][T12203] lo speed is unknown, defaulting to 1000
[  222.145814][T12203] wg1 speed is unknown, defaulting to 1000
[  222.172706][T12207] xt_CT: No such helper "pptp"
[  222.196005][T12211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1888'.
[  222.258774][T12221] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1890'.
[  222.385359][T12236] tipc: Resetting bearer <eth:syzkaller0>
[  222.387758][T12236] tipc: Resetting bearer <eth:syzkaller0>
[  222.399662][T12236] syzkaller1: entered promiscuous mode
[  222.401413][T12236] syzkaller1: entered allmulticast mode
[  222.427969][T12242] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1896'.
[  222.588135][T12250] lo speed is unknown, defaulting to 1000
[  222.620591][T12250] lo speed is unknown, defaulting to 1000
[  222.632747][T12250] wg1 speed is unknown, defaulting to 1000
[  223.477145][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1902'.
[  223.857906][T12302] validate_nla: 6 callbacks suppressed
[  223.857924][T12302] netlink: 'syz.1.1911': attribute type 1 has an invalid length.
[  223.872371][T12304] netlink: 'syz.1.1911': attribute type 1 has an invalid length.
[  224.626017][T12309] bridge_slave_0: entered promiscuous mode
[  224.626317][T12303] lo speed is unknown, defaulting to 1000
[  224.628770][T12309] net_ratelimit: 16 callbacks suppressed
[  224.628781][T12309] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  224.640657][T12303] lo speed is unknown, defaulting to 1000
[  224.645368][T12303] wg1 speed is unknown, defaulting to 1000
[  224.850478][T12315] netlink: 'syz.1.1914': attribute type 1 has an invalid length.
[  224.863537][T12315] 8021q: adding VLAN 0 to HW filter on device bond11
[  224.872834][T12318] netlink: 'syz.0.1915': attribute type 13 has an invalid length.
[  224.880796][T12319] veth7: entered promiscuous mode
[  224.910966][T12318] tipc: Resetting bearer <eth:syzkaller0>
[  224.931193][T12315] erspan0: entered allmulticast mode
[  224.939558][T12315] bond11: (slave erspan0): making interface the new active one
[  224.945323][T12315] bond11: (slave erspan0): Enslaving as an active interface with an up link
[  224.997762][T12327] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  225.009797][T10789] lo speed is unknown, defaulting to 1000
[  225.141920][T12340] netlink: 'syz.0.1921': attribute type 72 has an invalid length.
[  225.144458][T12340] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.1921'.
[  225.157802][T12342] lo speed is unknown, defaulting to 1000
[  225.171043][T12342] lo speed is unknown, defaulting to 1000
[  225.177590][T12342] wg1 speed is unknown, defaulting to 1000
[  225.221443][T12352] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1926'.
[  225.364830][T12358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1927'.
[  225.370387][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'.
[  225.565102][T12373] lo speed is unknown, defaulting to 1000
[  225.569073][T12373] lo speed is unknown, defaulting to 1000
[  225.571658][T12373] wg1 speed is unknown, defaulting to 1000
[  225.641687][T12378] _Z`Ԁ@: entered promiscuous mode
[  225.739531][T12388] No such timeout policy "syz0"
[  225.791381][T12390] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  225.798891][T12392] netlink: 'syz.2.1937': attribute type 5 has an invalid length.
[  225.808606][T12392] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  225.819062][T12392] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  225.823569][T12392] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  225.826691][T12392] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  225.840982][T12392] geneve5: entered promiscuous mode
[  225.843052][T12392] geneve5: entered allmulticast mode
[  226.030107][T12403] netlink: 'syz.2.1942': attribute type 1 has an invalid length.
[  226.034185][T12403] __nla_validate_parse: 4 callbacks suppressed
[  226.034195][T12403] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1942'.
[  226.041033][T12403] NCSI netlink: No device for ifindex 0
[  226.372900][T12413] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  226.443627][T12417] netlink: 'syz.1.1946': attribute type 1 has an invalid length.
[  226.464146][T12417] 8021q: adding VLAN 0 to HW filter on device bond12
[  226.475677][T12417] bond12: (slave gretap3): making interface the new active one
[  226.479198][T12417] 
[  226.480026][T12417] ============================================
[  226.482055][T12417] WARNING: possible recursive locking detected
[  226.484012][T12417] 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 Not tainted
[  226.487801][T12417] --------------------------------------------
[  226.489737][T12417] syz.1.1946/12417 is trying to acquire lock:
[  226.491644][T12417] ffff888029961d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  226.494743][T12417] 
[  226.494743][T12417] but task is already holding lock:
[  226.497034][T12417] ffff88810f597d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  226.500149][T12417] 
[  226.500149][T12417] other info that might help us debug this:
[  226.502662][T12417]  Possible unsafe locking scenario:
[  226.502662][T12417] 
[  226.505006][T12417]        CPU0
[  226.506070][T12417]        ----
[  226.507133][T12417]   lock(&qdisc_xmit_lock_key#4);
[  226.508707][T12417]   lock(&qdisc_xmit_lock_key#4);
[  226.510298][T12417] 
[  226.510298][T12417]  *** DEADLOCK ***
[  226.510298][T12417] 
[  226.512809][T12417]  May be due to missing lock nesting notation
[  226.512809][T12417] 
[  226.515382][T12417] 9 locks held by syz.1.1946/12417:
[  226.517012][T12417]  #0: ffffffff8fa377e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  226.520001][T12417]  #1: ffffffff8f51bc48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  226.522897][T12417]  #2: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  226.525907][T12417]  #3: ffff88803bb29258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  226.529708][T12417]  #4: ffff88810f597d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  226.532879][T12417]  #5: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  226.535832][T12417]  #6: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  226.538551][T12417]  #7: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  226.541656][T12417]  #8: ffff888117cfa258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  226.545533][T12417] 
[  226.545533][T12417] stack backtrace:
[  226.547402][T12417] CPU: 0 UID: 0 PID: 12417 Comm: syz.1.1946 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  226.547413][T12417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.547418][T12417] Call Trace:
[  226.547422][T12417]  <TASK>
[  226.547426][T12417]  dump_stack_lvl+0x189/0x250
[  226.547438][T12417]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.547446][T12417]  ? __pfx__printk+0x10/0x10
[  226.547457][T12417]  ? print_lock_name+0xde/0x100
[  226.547467][T12417]  print_deadlock_bug+0x28b/0x2a0
[  226.547478][T12417]  validate_chain+0x1a3f/0x2140
[  226.547487][T12417]  ? validate_xmit_xfrm+0xbf/0x1130
[  226.547496][T12417]  ? is_bpf_text_address+0x26/0x2b0
[  226.547506][T12417]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  226.547515][T12417]  __lock_acquire+0xab9/0xd20
[  226.547524][T12417]  ? sch_direct_xmit+0x153/0x4b0
[  226.547532][T12417]  lock_acquire+0x120/0x360
[  226.547540][T12417]  ? sch_direct_xmit+0x153/0x4b0
[  226.547550][T12417]  _raw_spin_lock+0x2e/0x40
[  226.547560][T12417]  ? sch_direct_xmit+0x153/0x4b0
[  226.547568][T12417]  sch_direct_xmit+0x153/0x4b0
[  226.547578][T12417]  ? __pfx_sch_direct_xmit+0x10/0x10
[  226.547589][T12417]  __dev_queue_xmit+0x17b6/0x3a70
[  226.547597][T12417]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.547605][T12417]  ? __dev_queue_xmit+0x27e/0x3a70
[  226.547613][T12417]  ? arpt_do_table+0x1dc4/0x1fd0
[  226.547624][T12417]  ? __pfx___dev_queue_xmit+0x10/0x10
[  226.547632][T12417]  ? arpt_do_table+0x238/0x1fd0
[  226.547647][T12417]  ? __pfx_arpt_do_table+0x10/0x10
[  226.547660][T12417]  ? NF_HOOK+0x9e/0x3a0
[  226.547668][T12417]  NF_HOOK+0x310/0x3a0
[  226.547675][T12417]  ? __pfx_arp_xmit_finish+0x10/0x10
[  226.547682][T12417]  ? NF_HOOK+0x9e/0x3a0
[  226.547688][T12417]  ? __pfx_NF_HOOK+0x10/0x10
[  226.547695][T12417]  ? __pfx_arp_xmit_finish+0x10/0x10
[  226.547703][T12417]  arp_xmit+0x16c/0x270
[  226.547710][T12417]  ? arp_xmit+0x23/0x270
[  226.547716][T12417]  arp_solicit+0xc1d/0xe60
[  226.547724][T12417]  ? arp_solicit+0x11a/0xe60
[  226.547731][T12417]  ? __pfx_arp_solicit+0x10/0x10
[  226.547740][T12417]  ? __neigh_event_send+0xf08/0x1560
[  226.547749][T12417]  ? __pfx_arp_solicit+0x10/0x10
[  226.547757][T12417]  __neigh_event_send+0xf70/0x1560
[  226.547769][T12417]  neigh_resolve_output+0x198/0x750
[  226.547779][T12417]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  226.547789][T12417]  ip_finish_output2+0xd40/0x1160
[  226.547798][T12417]  ? ip_skb_dst_mtu+0x147/0xc50
[  226.547806][T12417]  ? ip_finish_output2+0x452/0x1160
[  226.547813][T12417]  ? __pfx_ip_finish_output2+0x10/0x10
[  226.547820][T12417]  ? ip_skb_dst_mtu+0x147/0xc50
[  226.547827][T12417]  ? ip_skb_dst_mtu+0x147/0xc50
[  226.547834][T12417]  ? ip_skb_dst_mtu+0x970/0xc50
[  226.547841][T12417]  ? ip_finish_output+0x33a/0x3f0
[  226.547847][T12417]  iptunnel_xmit+0x571/0xa00
[  226.547886][T12417]  ip_tunnel_xmit+0x1c3c/0x2380
[  226.547899][T12417]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  226.547906][T12417]  ? gre_build_header+0x3fd/0xa40
[  226.547915][T12417]  ? __pfx_gre_build_header+0x10/0x10
[  226.547923][T12417]  gre_tap_xmit+0x590/0x7a0
[  226.547935][T12417]  ? __pfx_gre_tap_xmit+0x10/0x10
[  226.547946][T12417]  ? __lock_acquire+0xab9/0xd20
[  226.547955][T12417]  dev_hard_start_xmit+0x2d7/0x830
[  226.547966][T12417]  sch_direct_xmit+0x241/0x4b0
[  226.547975][T12417]  ? __pfx_sch_direct_xmit+0x10/0x10
[  226.547985][T12417]  ? netlink_rcv_skb+0x208/0x470
[  226.547997][T12417]  __dev_queue_xmit+0x17b6/0x3a70
[  226.548005][T12417]  ? __dev_queue_xmit+0x27e/0x3a70
[  226.548014][T12417]  ? __pfx___dev_queue_xmit+0x10/0x10
[  226.548021][T12417]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  226.548030][T12417]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  226.548040][T12417]  ? __build_skb_around+0x257/0x3e0
[  226.548052][T12417]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  226.548061][T12417]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  226.548071][T12417]  ? alb_send_lp_vid+0x139/0x510
[  226.548080][T12417]  alb_send_lp_vid+0x324/0x510
[  226.548088][T12417]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  226.548096][T12417]  ? __pfx_alb_set_slave_mac_addr+0x10/0x10
[  226.548105][T12417]  alb_send_learning_packets+0x10d/0x2c0
[  226.548112][T12417]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  226.548120][T12417]  ? alb_swap_mac_addr+0x221/0x320
[  226.548127][T12417]  ? dev_addr_check+0x20/0x250
[  226.548138][T12417]  alb_fasten_mac_swap+0x665/0xfa0
[  226.548146][T12417]  bond_alb_handle_active_change+0xc10/0xec0
[  226.548155][T12417]  ? __pfx_bond_alb_handle_active_change+0x10/0x10
[  226.548165][T12417]  ? __local_bh_enable_ip+0x12d/0x1c0
[  226.548177][T12417]  bond_change_active_slave+0x1048/0x3770
[  226.548189][T12417]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  226.548196][T12417]  ? __pfx_bond_change_active_slave+0x10/0x10
[  226.548204][T12417]  ? __queue_work+0x103/0xfe0
[  226.548213][T12417]  ? preempt_schedule_notrace_thunk+0x16/0x30
[  226.548221][T12417]  ? mod_delayed_work_on+0x128/0x200
[  226.548229][T12417]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.548236][T12417]  ? mod_delayed_work_on+0x1ac/0x200
[  226.548245][T12417]  ? netdev_change_features+0x8d/0xd0
[  226.548253][T12417]  bond_select_active_slave+0x8e2/0xd00
[  226.548261][T12417]  ? __pfx_bond_select_active_slave+0x10/0x10
[  226.548268][T12417]  ? __pfx_bond_set_carrier+0x10/0x10
[  226.548274][T12417]  ? netdev_is_rx_handler_busy+0x6e/0x140
[  226.548282][T12417]  ? __pfx_bond_handle_frame+0x10/0x10
[  226.548289][T12417]  bond_enslave+0x229c/0x3a20
[  226.548300][T12417]  ? __pfx_bond_enslave+0x10/0x10
[  226.548308][T12417]  ? __pfx___dev_notify_flags+0x10/0x10
[  226.548318][T12417]  ? mutex_is_locked+0x17/0x50
[  226.548326][T12417]  do_set_master+0x533/0x6d0
[  226.548338][T12417]  rtnl_newlink_create+0x677/0xb00
[  226.548349][T12417]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  226.548358][T12417]  ? rtnl_newlink+0x8db/0x1c70
[  226.548367][T12417]  ? __pfx___mutex_lock+0x10/0x10
[  226.548376][T12417]  ? ns_capable+0x8a/0xf0
[  226.548384][T12417]  rtnl_newlink+0x16d6/0x1c70
[  226.548395][T12417]  ? __pfx_rtnl_newlink+0x10/0x10
[  226.548403][T12417]  ? __free_frozen_pages+0x76a/0xe70
[  226.548414][T12417]  ? __lock_acquire+0xab9/0xd20
[  226.548422][T12417]  ? __lock_acquire+0xab9/0xd20
[  226.548431][T12417]  ? is_bpf_text_address+0x26/0x2b0
[  226.548439][T12417]  ? is_bpf_text_address+0x292/0x2b0
[  226.548446][T12417]  ? is_bpf_text_address+0x26/0x2b0
[  226.548453][T12417]  ? kernel_text_address+0xa5/0xe0
[  226.548461][T12417]  ? __lock_acquire+0xab9/0xd20
[  226.548471][T12417]  ? __pfx_rtnl_newlink+0x10/0x10
[  226.548479][T12417]  rtnetlink_rcv_msg+0x7cf/0xb70
[  226.548488][T12417]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  226.548496][T12417]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  226.548507][T12417]  netlink_rcv_skb+0x208/0x470
[  226.548516][T12417]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  226.548524][T12417]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  226.548535][T12417]  ? netlink_deliver_tap+0x2e/0x1b0
[  226.548543][T12417]  ? netlink_deliver_tap+0x2e/0x1b0
[  226.548553][T12417]  netlink_unicast+0x75c/0x8e0
[  226.548562][T12417]  netlink_sendmsg+0x805/0xb30
[  226.548573][T12417]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.548582][T12417]  ? aa_sock_msg_perm+0x94/0x160
[  226.548590][T12417]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  226.548597][T12417]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.548606][T12417]  __sock_sendmsg+0x21c/0x270
[  226.548614][T12417]  ____sys_sendmsg+0x505/0x830
[  226.548625][T12417]  ? __pfx_____sys_sendmsg+0x10/0x10
[  226.548644][T12417]  ? import_iovec+0x74/0xa0
[  226.548655][T12417]  ___sys_sendmsg+0x21f/0x2a0
[  226.548668][T12417]  ? __pfx____sys_sendmsg+0x10/0x10
[  226.548683][T12417]  ? __fget_files+0x2a/0x420
[  226.548691][T12417]  ? __fget_files+0x3a0/0x420
[  226.548699][T12417]  __x64_sys_sendmsg+0x19b/0x260
[  226.548711][T12417]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  226.548725][T12417]  ? rcu_is_watching+0x15/0xb0
[  226.548736][T12417]  ? do_syscall_64+0xbe/0x3b0
[  226.548746][T12417]  do_syscall_64+0xfa/0x3b0
[  226.548753][T12417]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.548760][T12417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.548768][T12417]  ? exc_page_fault+0x9f/0xf0
[  226.548775][T12417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.548781][T12417] RIP: 0033:0x7fc4ac58e9a9
[  226.548790][T12417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.548796][T12417] RSP: 002b:00007fc4ad3eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.548804][T12417] RAX: ffffffffffffffda RBX: 00007fc4ac7b5fa0 RCX: 00007fc4ac58e9a9
[  226.548810][T12417] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003
[  226.548815][T12417] RBP: 00007fc4ac610d69 R08: 0000000000000000 R09: 0000000000000000
[  226.548819][T12417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.548824][T12417] R13: 0000000000000000 R14: 00007fc4ac7b5fa0 R15: 00007fffc573f458
[  226.548831][T12417]  </TASK>
[  226.863465][T12417] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  226.875822][T12417] netlink: 'syz.1.1946': attribute type 12 has an invalid length.
[  226.879053][T12417] netlink: 'syz.1.1946': attribute type 1 has an invalid length.
[  226.881648][T12417] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1946'.
[  226.943614][T12417] syz.1.1946 (12417) used greatest stack depth: 16040 bytes left

VM DIAGNOSIS:
15:33:40  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000203ac RDI=00000000000203ad RBP=00000000000003f8 RSP=ffffc900076f4970
R8 =ffff8880212a0237 R9 =1ffff11004254046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18c0 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc4ad3eb6c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000129fe2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc4ac611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b25b89922cbb1c00 RBX=ffffffff81976a48 RCX=b25b89922cbb1c00 RDX=0000000000000001
RSI=ffffffff8be28be0 RDI=ffffffff81976a48 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1d6f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3011fffc CR3=000000010e4fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
