last executing test programs:

1.519285212s ago: executing program 2 (id=2499):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x1, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x6, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000043c0)={'bridge_slave_0\x00', {0x2, 0x4e24, @local}})

1.434049611s ago: executing program 2 (id=2500):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
pwritev(r1, &(0x7f0000000180), 0x0, 0x8, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xeaffffff}, 0x0)

1.433391558s ago: executing program 0 (id=2501):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x9}]}}}]}, 0x3c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x9, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xf88, 0x1, 0x6, 0x3, 0x6, 0x3, 0xc7, 0x5}}}}]}, 0x58}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000480)={'wg1\x00'})
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, 0x0, 0x0)
write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001811ff00000000000000000000000000000000ff0200000000000000000000040000014f194e2000189078040000000b000000000001000000000000"], 0x52)
socket(0x400000000010, 0x3, 0x0)

1.056063935s ago: executing program 2 (id=2503):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
unshare(0x2c020400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000980)=""/70, 0x46}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000c40)=""/4109, 0x100d}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000040)=""/7, 0x7}], 0x6}, 0x40002102)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)

917.027258ms ago: executing program 0 (id=2504):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000791010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getpeername(r0, &(0x7f0000000140)=@nfc_llcp, &(0x7f0000000000)=0x80)

915.686709ms ago: executing program 0 (id=2505):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100001000400c84203075d00"/25, @ANYRES32=r3, @ANYBLOB="00000000000000001c001a8018000a8014000700fe8000000000000000000000000000bb0800040000000000"], 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@delchain={0x13c, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3, 0x6}, {0x0, 0xfff1}, {0xd, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xae}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xf0, 0x2, [@TCA_ROUTE4_ACT={0xec, 0x6, [@m_ctinfo={0xe8, 0x1b, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x401}]}, {0xac, 0x6, "0e392c5f653aa7bbf03f026c8d26ecf63a07e54ed8ad9daefdf3b2167b6ee683277d1c13278eefb982815bcc9ad24c2c7e20af9a404d1ede0328a67413a6104aebfd867ad8fea3855d0b2d4f4f422ec90a4db1680d75c621adb6f4160cd9a74deae4ab272f36c9564702cb660b0a512e2919e7a3ea3018fe81ae2b3ea852225c42dee3edb6f03b2ebde71a24989d200ad5c8bfd4dc3d710d461b3dbc60d9ce36acb557b9215e065f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x13c}}, 0x0)
r5 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x11e, 0x488, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r6, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4040)

796.479413ms ago: executing program 0 (id=2506):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
r5 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x60, r3, 0x1, 0x70bd28, 0x25dfdc03, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040014)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x40)

715.741417ms ago: executing program 0 (id=2507):
unshare(0x2a020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000100000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a31"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r5, &(0x7f0000000240)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1e)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000080000014c87d8008ae0100", @ANYRES32=r3, @ANYBLOB="080003000300000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b4391923"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000007c0)={{<r8=>0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f00000017c0)={0x0, r8, "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", "21480d65e38a4513516a4c1459d5c6752911d2be1dbba6e0795eddb686d2b3944feaaba2383aa0d4293a538a0e22ab4dedd48fe22c7c148ef1f5a8e6598c27dad6fd270a6a0973ceef9acbb5048e7c032dc11ccd9ec49c9b8734af666ce24c2b82efe022bf08e779c4b0f6bde0fe078f8f463f2bc1450a22a5022dbaa8632056fc7be50d4ee113ba538f9df5641e20fe089e431460e14d1a690d97d49b056dbc2fbe8859d76b801fdac837ea3b63c2368428b4c04bb24b2af417e00ad31fd4f5827304b2e172f122b4b8c4d2b01c679a6a57dcb53edd2ac14f7c8fa47699c6eee04b252e0a4aef9fa9cfcc15d995061903f07ed4949ac4794a22aed5a16625ab7bd2cb0b0b043f6f2ea5a395f05c8d2402d3f72a6415f22a0bc87ef9152527eb3608f2ed4acf5adb2042e8c8f2a219577b7beb6a328b82ff858928b0d4f715c1f9ad51d62a8eba1b44359705e763becd1c984d7c63eb388388a4e54d32d566b55da62d61fc1a07ccc251987f92cb2aa2852f29b5112fb575feeb1f4d85195d2ac20c380b838f6ea73e0a6bcb9a565301e97622ce2114d95c590253d234827510da1e1929c1b27659b16b8beb414512665556142538871642329340a044944e7bc86e77ee58788c35d8706bb83e1b7a6bf4176e30ee2ab8f3745a11bbd0113784879c37eb2a2ab72fb929cc035cdc190a6455c7b38d803ed7d8bff83b29f0e80d4fa5aa2bc6819dec2d9384b20dfa27c258f7bf10a8cd42513f0c13cfa85fd0aa97fbd15c72d491f67aa5f397488905dbb117ff81e1f18ae55defcffe71e6049942ec4f1eaf36cfe1ee9b9a746f9f9e6966af4dbb6d05a1a510b40728ff67f4e01629fd3006a8fe8aedd5b93e23f84b90c730654a1ca2fa802b9f081e5145607a8d31d262f0b203deb052752e6f30664aff51ee6487971d5f9de7f1c558c13129fe10818cd894e3c9f725b85761b186a3d1f6ecb8ed5e4efd8d61d1f7cd8e7194553579d42d1f00daf22850209f4b24dec108993933629a3137062b141c5e7176e6d924bd1202e40c83124f76d9f00f3f22cbb097cc7845203d50fe6809ca9849c8ecaf9f1e0da0189f0fa9349feb266d360365f6dd11ab92040d9e58d1e1efaa365da9a0839af0f60a03dec3eb0ff93a0174b10f3a9c96e072094a69300e78e527d7460acbd19033b42a04a99378ff078ac1c0e3b974b01a049d703cdb954a1a3b31ba58bfad75cf4ab349f7858c8cf6b40e536146f8d20a536ccfcf644ae48298b91daf1a767d1ac31368fbc16b9cdcf5799b04ed72b18868d8034a2585f15ff7502719f242b3629534ecd828178e4dc14b8de47711176c6edc72eb2dc766e44aff58e8d2f52a104f26e064c3f831f7c47eeb8a03e295ffc51275d639fc76e6eaf9131cc8a20ad93ba3d1c56a6f605aed08a846d2eb5f3e0fd6e584f94e01ea5d3cf4724a42d2f78bc83b40ae1b30ed9fdd12e8263450d2ace0afeec9ee67efdbaef2bd6e6a47830370c6dc734c4ce3c1a58d98cb3c8d65511cbfafd5239381d6395fdc3af1cc4f0a3f0da6454a19dd3bef8ad38b09a968f3ac662d997c854ead34ec87645661ddae894f7e360258a311fb42632602ffb4db5d83f256553724f2856bc636d7ee4cb04603175869269599983affa1a45bdb099312d9e1c504dfc844984b3bbd54a023024c73e9c4ee580f440b951e93e7c3169d5dec401df7a576bf7c938c769c0541271b96e479572e14af4a748acd7555b0584531aa2472be2897e0db3c07c145513b40e406a0467537d95e9bb4e502a7c02c682a869c985e6b6e9581dab5b55663c72e463580f2d3e04af5e1d1984060585dc009cf1fb0852318b13f08270f42fafd014f39edcc29f774e72520099b7e892e84e23be4c233bde6629f9ab0481177a09298a0e563b64c87d02b54801209a009a71670dd93e1caeb8ea8e12b2249779de10519c0e9bb51132bca980fe965eb4ce1216026ac8e00bb9cc6fd16f809b8ba216f02508f3998a395a563cdb86155faaf3425d14f4d6ce0a206d032d810050e3ca651e0cd8ea1892851bfebd7583d943e270834de2a8ac99dcb42946331776094e279cc14abb4ca21c28c5e80f07210f77fe0c8fbf0e7325e64eb08e839691853069d46006838c39bce4eee90291e5486666af8003dc55ff250dd674798dbad04914115e95aaaf8520d92f2222332d6b25b0e9c643cd23832c8d6fba98f8638c18302001675040fa3b5229d26d55470d33b4bafd3b7230b91afc82be2d7225bf3ef529c3fb03c652c358bf9ee57e85c258ce7a1cfc1f340fa1b6e26779ed1dc4a5631a1cb32bedcd3b5dc31fecf29278baaf381b0c56943d19934e093ecd5b129546dad0a6e348e5367028b7b49267769f69296d16672f87fcf972f1cc3a162a0f57f3eae8b3cf7b32d0f7a9acbbd6b3cd623d62f7bc38d108da820c886e18d13752a60d8f026cd2cc3cd42483f8ffa52ea38b0f106311f90589a7bab303775284fe9075e95882232000947e3f1cc7cf135cca226c9add00fd78ba28eb32c6ac7702a58510f82d0f411e4c52b5d35389a44ae38ba601a278bde832ff8644b4e6c96d466ca79eb1dadbd954c5159e7cc6a6ba775be3e0ce5ebe0bce3e277109555dadb91240b9081a74595cad2a2038b85798beafaaa1ed1e607eb4050521f16a35b0cd975af0be921cbb4ae86cffb91e51975e227ef4b701cdbdcec73f8cc2b76c597bfaaa8395169f2a2d05e1d1b5994653930e1c755972dee174b9cf2eab81009dbf64d1ded4323d350aa38bdcd497911d212207876cb9f945832c312689e7056960c92808eee58a99d9185b4d2c3af749bd6efd9abc39329dac64c01f9b06a553bc8e98aa9c6c5f32553dd002ae7aa4e213955cb752a280332e158e800092242159a30c752d622cec263fbcb486b92d0a40983dbd81f9c37a547f7a2bec91b1311c3e46f2b3bea173d041f6a7542cd4d5fcf56b2ab4a8199c57d86bb713bd307b2a8ddf702a8b339ce4c0d01cc96fbbfd3dbcfe96a83d185addd62ae50081cc78f7545a5a271df79fa0d648328d271b2f7711547e83db1f7c75d3d0d08bc15e8198c572cffef253e7802c1c869a066c2746b77cdb3cb01311d85a781790f49e60178e01d2d82ccb9e806a2844f1045f7abaab7405de85e92fac7480999179faab39e45df544a807cc65601ec3af44863d746d2fcc460888d89307e5b66fb181c22a5452367fe2b95b55510727962a6fdeb0d2e5b8228965c2242177e63cbdc2a8dcfc492c22957387dcdac15543ddf45194515f4556363caef8be9dd595ce0bc317df9a9a805e36979ee87869d10b453c303c9158ebb948493e83556e09d92b755bd64dfd4dd4b8ae1a96f533763709fa9d8718bc8117f3edc5c003a6c9406261824eb51ba5f95b64ad83b97e7ea4dcbff4ad55fcc2e5062a8f271afd195684518c2ea016596fa464418b625d97228bc5dd8ca6411eacfe2225b7ad15ebe7a42539976084e5b1096fbf028aa0cff89d5d1fb23ffee1489b7f93858c29bf36b51d0205ac2297eb312408197439b7f31158dda8d904f70255d683a4fce18b1b9e02382ee0c4d2e532b5de84e9ab5fa60514d036d9aba95ed43e15248fa2b896c82f3382a1c9ea6fce6065bffe4c8dcddae3cad483b5d61bdb06b40e015b3c4947652acc5a4e3ae0c005c753fbba008d07c932056a56d3b2fbd30c6f080370765f01cac8d73db53afb9d870e9603d8bebb3f0aa88d90afde07d6c3992705c59a5863adaa0c461eae042a1d72849a5fe64ab309bffc37156963afe417af96103fd5e8fe3b9009bb6468d67c75ce6f19fe3c8156f74954ce630c0c4cad32860ad7ada643bcfcd0cc5249d2f2f5d46685a7d4d1e2383e08b20e0bd745e9e78b329c6184a17a1c670cd8d83c55dbc81940ca562c2e6684200db767a707e8f9f00b0674ba1e5068c7f75af9e602903b86e7e732d4b9b4fa2d74e5f71b00469c7a9fee161ca2d209a1c874ed54984d7980b7080172caa798804fd38f7ad4f6499fc6787904c818c9d85dedd84076d2d1a09fc286cbd24a98a056c3b9530dbd0a5b7b825f321d844bda498d1e412403869e2de0451fd4a08109c71b0d2fbefee4d2b19b57883b53c4a0261355e4a184ee6ad3b9fbfcb4fcff627c4b5cfcd8bb481a686bb96282945a7c954c0102985c8170a1657c16258f947bc2f3bd9769c1d3c8484573885794e48739771116a331d0a8bd04d24b3d6c697df8c0301f92f6ac9db6f81957209743d4020d72b96aff6866300f5c66220776df4c1303575370d8d16fd52bd24ace8cdd9fb21ba9326a46912286dc5246b4918774f58d1fadafb6177e9c1c7c7c1a39efde8e55b61d8af75c632d3b35ded2d0faea63f480ea246728b76c25137866da307b8107978449300182e7c156bda12dc0eab3c46be573b45ccc2dc4ceeab30f6b85897987e7f7585a0180a72f68f73fe5291dbb2365a3b63f24f60f78a2767a6b69857b72dfbd4b62a09c8f125cbf09aacc012a09e2a2d02ab41b1f16c91f3b3a534c412440d46558a77024fb67eceb2e3f811f0d61905ff1f6f06736defcbd49b6ce9134960fc5bc76f3747e20e5358465414dd4bfca47964315787ff549a2882bfcea5d822790fc8401bb13171cde594d75bd56d10a85789615f84a91b2112243b4f98fdd11eff2df9c5672d984234b30abbe685664e04168d03d201f33955dd9bec8701572164bcf437dfea4aa22ebfdea659ba0051629f8d4a1dcaffb39edd3c2904a5ca23da7e31d884389fc96d7e7d3280f807e493b180791dfa72679252bd4a9c6fc10fa9c440f027e73e4e074518c9489ce7461e848279d4a017298f86a16624360df346d473668ca203b06ba4ef9005069294d01eb29a1573b26976788a44190dcb4536fed4ad6e16151bf81fe0caf5ed15b3fd0eaf6a2428fb3c724ab5dc23300f82e8de23c103bd750067464c3ee40338ad28747ce7bbfc1e5855ba7bb25ff69ae251b503f122d6cf4bc2ec378f9b308da31f9583d643da7619963954e8855a3528b26de022c1dca363dd426014c5341b0ea28384314ae07ce1b6cc251b2619a271dad563b2b6a9c88b18e1e19ce6b76b21fdd33d8aa9e85f88e24f96093c08b086b4629453ac3e416ca85f0e719f3cb35839d8d0eefd31206ca368a038c6a69d70f6bc1e469d89438adee1aa8f45776a2287938507b7e98adc4cf02b742a214b5d0d515735d7c2cd26d835c5e975c77d7f7ebc96c49d130fa6b724b469084a9992adfe9bc705ef868f7721b4d00370491112f8db209c1a470bd451b7794874639b5315182160b39bf98f042668137e6c7275373e1b4b2b241cb7009d036ce0d7efd8313c6e0d87edb80516cd1c518a239c8e9367f55db3ca82f0"})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r11, @ANYBLOB="0524060000000001300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x0)

565.997798ms ago: executing program 0 (id=2508):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0xf)
socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2000000000000000240012800b0001006d616373656300001400028005000d00000000cdde66965da8e7de28"], 0x44}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea61", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="05"], 0x10)
close(r7)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500), &(0x7f0000000540)=r7}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000100), 0x0}, 0x20)
close(r6)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r12=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8, 0xa, r12}, @CGW_SRC_IF={0x8, 0x9, r12}]}, 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

362.619784ms ago: executing program 1 (id=2511):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r2, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xffff}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x2, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x94}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELSETELEM={0x928, 0xe, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8f0, 0x3, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xdd, 0x6, 0x1, 0x0, "e99cf2b04f653b4b6bbad9ee64107d2da2b6100829a55093323e2ef894ebf3510d5bce2c5a7922e1483e3b5e24cb9b9ad3ed9d9580082ff12632ad43985354933875b763faec2686c1c967562cd48f3170ea341354dbf419c53a4e2936fe675257869d74e842746dce78d8ffa65683aaafcd6b4f000c73e152e399ae20406bc4cb266a45f97c9dd7d01d0501d32134afebaa1addb9d5fa04ca6561ea140ea800b8e4568e0f21db5b62e7692c45ea1ad2c57b9bdaa288288b460ce2fc8bc96e6843b1a1ffec19361ca02fe0f138b4f3db92f80ffa6da3cc7799"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x20c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0xec, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x15}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4d}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xf2, 0x6, 0x1, 0x0, "555624e98b12989b16b36c57edbfd2e6863827bf454bd7e1b16960608bca1665ee614fd6603c1c00d06c61ed3963c69bce532744f22d0f4eeba44e11a57d3793e97d3410ce559f54042489dcbbef5cd3ef53b945aced026ff28494d777c2be80bc1bcd91b10f50da41d0c86f34780cb65ccb160847e79a7fe21de620913faf1a3600a4965995c2c52c197dba0ecf2e09230e2aaeab53a71d9b707f1028917258529bbe56fbbc68128d300c019307549065b93122a4abc4f475cfa1fe73fb3d3d5b4514de1cea830b6b0d49b94c46b6c170acd220c57f6a0fc6a7319ef4ffe0230c8a09d7a9674b2b540f353d3ef9"}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x588, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x464, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xca, 0x1, "ed440f0151e8cbe35e7caec943d5211d8cabf3833629eb9b10526775e1bd13ee24918da91c6262c0132fe204485e65cc2c567d40532e2877074b8727c3d4381f708a8a79403862047b244913e8094bf65e2916c29c4e2db4ac32a145380ff37a89fe862857e25e06a9e016fd627a81f0c34e51476b35e2b0fe07330f6c2dee3ac184365f903c38fd3a732a095421c46cbf9731b8bdf3e62994cd7a1c9a3dfcbf4cb5948c10f93992abd71643da1112543c9c1cb71d8f9074fc16e4a9cfb2eec1d02692845733"}, @NFTA_DATA_VALUE={0x30, 0x1, "f8d4291c57a340e8af1341416f8aba77e20e67ad84ed29622c110f1d96605bfbc178df6085863790fb3db9c4"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "d0c0567f405319634bee52b087b50d070336d743f9611fbb199389d32ab3972425b5314b427fa9a926e9f69c52211590e23ae3d97a681f0a308154242c574a91b655603c892593b453e21cacd194c4d4eb5c8b045dcc444e940ba8f0b7d133726ad8333172a3eebd00429911b11016b937506b1e350d1effa9d82c9515bbd58563abdced5b1764d405106d871a3ee58ba272f5855a7eed41c71855099bb147fbde80d76060817655c1d1a9d69f684e3d47279e5f6edfa84547fcf914"}, @NFTA_DATA_VALUE={0xd4, 0x1, "9606b17fffe06fa662c971a405f6bfe508b03f81d0c352c7269fa17f8496a4a05e63dd455c40e7db379ad960b2c282ec35d62df231cda0aca956384d00801ee5b843e259aa3007e5ee6893a6b3a07ce4ef388489b17f2f7744d0f1dbe3367e0b825e6abc3657da891d134c6becf929a1d97a5e2a89f49f84120c5eef6f43458f6c841eb2771284ba7fda4c8439a9985f357739eca015a516316ef43dcaa784ea63bf14cafa32895590de50480e6c6fa44b5e3bc7c4b32ac0d9cbca6e03fde3cb1ee53ad04b1abff68dc12126b50e180e"}, @NFTA_DATA_VALUE={0x7a, 0x1, "2841ac893f37cd76009f88da2f2930db03973ee78df3e41e8a7999e58d5955a0721874eabf4f7c907eb6b158d650ee0ff2cce9237697d9c75b1b30f10173f7df41f42c99596ce2beba239adad98cd218765defdca85f02bf5a26e5f556279b20a0042d593256372c8ec1959514637386951622722d54"}, @NFTA_DATA_VALUE={0xd5, 0x1, "f79774415d93189839463add68eb12c09431045f8918848db6d7237792e59abb2939dd234b65622cdc430a7ab2520589d60bada8f3023929e3f37244a921fce5713bcc386e5fa3092b8b400a69eedf76ca534feb03f8c6b9230144cdde5c2e5d20338513c61228ba92e76d3422a1f08ddee470ea9c205c2cecdfffe637c6a4984d59da7b9b131aba186bb86b64784a0c18c4eb7c5944ee7d1e030cb9d38ba4e6a67378c4e7ac88f6b9c1664ff6bdab0b887c1755e20c2a26fad509b3e0ead4e766f54f98e71f62ffde4c1d3d7337098c08"}]}, @NFTA_SET_ELEM_EXPR={0x74, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x5c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa}, @NFTA_SET_ELEM_USERDATA={0x9e, 0x6, 0x1, 0x0, "6cd41d5cc836b0de2cbdef582663ff7cd37f6348c8b7940738c2d960bb981a568b5f9de32575257fe097d6fc1c4fb867d90f6eaf2dba1b5c224575a44ac34bc56b5e351bed673e521551ca99ef84f8b9d991928bb3e2bae8ab90a3364ab8b0a1a6011a788ad83fc82dd5f4421be6d34c304216bcd7f495fed3ec7ffecf0fb7b1100f8f75e18326935a354bf62a39c331dc6f3f9c38bb7ea6b6f7"}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x63}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x184, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x164, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x79}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x114, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_USERDATA={0x7f, 0xc, "f2b4c56f93a4918cb8106886a535f5d0604c540b5ef751a5f18a9f19de78f0e28e1da1fcdf6129c77a373654522d888dc0b3b4e64ef021a312110760effbcfa0915ce86904058e3ea53c4d5a52603b738896322eaed1878dee7170654d56a2db92c1c241cc38b9e6f9e0afaf3ceb2904eda9836f736757f144a1b5"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x74, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff7d04}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x410d9fa0}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4dc62f47}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFT_MSG_NEWTABLE={0x174, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7d, 0x6, "b73883013354fa517e961eea3d1d6bb3396d5f5d55412111f112c2b51770a3f66e5aca2df3f9dc1e492f2ab8b0ff73e3eec0e6d701fea9b0a8cc2b9fd3a9f7a35b157b5fe94de59c9c9ba8e4c35c3b165ec52c94e57db60f7dc0181160ca47a631b92ca14b402d6d1313b0fcde899d12f3a55bf022f88b62b5"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xad, 0x6, "cf69a796fcb18af10d1d009352e6fce7354cc120242af55bd680768d9c0da8db1babdf1c109686ddb24101fbe41bdaafe6658ec1f197057dc6cca11a5c4ec70beed7f9b95f916cfdc07c69cd58282e71e646c8e262a1eb5fc14d15918087be90e6c1523938803df63711da38dca0e26e002c288da5be01ac263eb19cdf958438dca2aef4f24d42a8059da6d152addca8328c7c6165e2514fbe08f524d9ec9654b3d18ff01d88be578e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x154, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x114, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xb4, 0x16, 0xa, 0x203, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0xffffffffffffff86, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14}}, 0xf64}, 0x1, 0x0, 0x0, 0x4}, 0x0)

306.785474ms ago: executing program 1 (id=2512):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt(r1, 0x1, 0x3, &(0x7f0000003600)="ec68e80fd4", 0x5)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
preadv(r2, &(0x7f0000001500)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x1, 0x2)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x6, @none, 0xfff9, 0x1}, 0xe)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b4fad1f60a64c9f408000300060100000400000000000000", 0xffffffffffffffab}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000)

306.457824ms ago: executing program 1 (id=2513):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89b1, &(0x7f0000000900)={'macvlan1\x00', @random})
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x8}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

166.058628ms ago: executing program 2 (id=2514):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
pwritev(r1, &(0x7f0000000180), 0x0, 0x8, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xf0ffffff}, 0x0)

74.357567ms ago: executing program 1 (id=2515):
r0 = socket$isdn(0x22, 0x3, 0x3)
bind$isdn(r0, &(0x7f0000000000)={0x22, 0xf9, 0xf, 0x5, 0x8}, 0x6)
r1 = socket$inet(0x2, 0xa, 0x40)
r2 = socket$alg(0x26, 0x5, 0x0)
accept4$alg(r2, 0x0, 0x0, 0x80800)
ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040))
getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080), 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xe3, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={<r4=>0x0, @empty, @private}, &(0x7f0000000180)=0xc)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x4, [@restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @ptr={0xc, 0x0, 0x0, 0x2, 0x5}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x5}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x2}}, @enum64={0xb, 0x9, 0x0, 0x13, 0x1, 0xd, [{0xd, 0x536292af, 0x7}, {0xd, 0x1, 0x5}, {0xd, 0xde8}, {0x4, 0x9c9, 0x8}, {0x6, 0x100, 0x2a71cfa3}, {0x7, 0x6, 0x7}, {0xe, 0x2, 0xb5}, {0xd, 0x0, 0xe}, {0x5, 0x3, 0x7}]}, @const={0x7, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000380)=""/71, 0xf0, 0x47, 0x1, 0x7}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x3, 0x28, 0x9, 0x4a000, r3, 0x800000, '\x00', r4, r5, 0x4, 0x1, 0x2, 0x0, @value=r6}, 0x50)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000480)={0x2, 'pimreg1\x00', {0x7}, 0x8000})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000004c0)={<r7=>r1, 0x6, 0x7, 0x7ff})
getsockopt$packet_buf(r7, 0x107, 0x2, &(0x7f0000000500)=""/167, &(0x7f00000005c0)=0xa7)
recvfrom(r2, &(0x7f0000000600)=""/57, 0x39, 0x40000020, &(0x7f0000000640)=@isdn={0x22, 0xa9, 0x2, 0x3, 0x85}, 0x80)
getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x8)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000740)={@empty, @rand_addr=0x64010100, 0x1, 0x9, [@local, @loopback, @loopback, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010100, @multicast2, @empty]}, 0x34)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r7)
sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r8, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x68}]}, 0x2c}}, 0x8000)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000008c0)={'team0\x00', {0x2, 0x0, @loopback}})
r9 = socket(0x3, 0x1, 0xfffffff7)
accept4$packet(r9, &(0x7f0000000900)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14, 0x80000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000980)={r0})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f00000009c0)={<r11=>0x0, @in6={{0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x800}}, [0x3, 0x97, 0x8, 0x4, 0x1000000, 0x7fffffff, 0xf, 0x7, 0x6, 0x6, 0x2, 0x9, 0x440f, 0x0, 0x101]}, &(0x7f0000000ac0)=0x100)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000b00)={r11, 0x0, 0x5, [0x7fff, 0x5, 0x9, 0x2, 0xd]}, &(0x7f0000000b40)=0x12)
close(r1)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r7, &(0x7f0000001000)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1c4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb3abfd60e2f54cf7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10}, 0x50)

74.005657ms ago: executing program 2 (id=2516):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000314000000000000000080000000", @ANYRES32=0x0, @ANYBLOB="00000000007500001800128008000100707070000c00028008000100", @ANYRESDEC], 0x40}, 0x1, 0x0, 0x0, 0x4060080}, 0x0)

1.271956ms ago: executing program 1 (id=2517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000300)=""/153}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41, 0x903}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x300}]}}}]}, 0x3c}}, 0x4020000)

946.536µs ago: executing program 2 (id=2518):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth1\x00', 0x1000})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0)

0s ago: executing program 1 (id=2519):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0xb}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000180)={0x9, 0xffffffffffffffff, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x20000000000007}, &(0x7f00000001c0)={0x80000003, 0x9, 0x2000, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x0, <r3=>0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfce2, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYRES64=<r4=>r3], 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x40814)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xb264}, 0x8)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="05000000", @ANYBLOB="6f38beb3f943c5cec7fc0476424ee87892c1c9ffebd8d6d441038ce894902e6e02e44f2f100a94e77cfeebce5abade9a2d6987d7ea65c16c48a65cc43d8bc4f984d2077d06a505879b1b6138879033d891d1d9d2f7ddfbbbbc84d1de71d83356221a7daee9d9cef54f5de08a9d9c26e82a46b0285bd6", @ANYBLOB="8b904ffbd2a4f39c395bb720b37f2903c79e0aefc04a475e251f323b481c1cd4647ae0c8a286c9f39282807cca362443ba7e426fb89bb74f1948f0070f2d6312b4f9c89384ad970753c9f9d1faef51c8b65783abcd7098f113becda9f81f740a0c21e9e5eb45442d02d273f8a661b6213db310a6a588c1dc93e669362d", @ANYRES32=r3, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000087f8b7939dfc47318ccc3455"], 0x48}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000"], 0x4c}}, 0x3)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de32", 0x51)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r4, @ANYRESHEX=r8], 0x54}, 0x1, 0x0, 0x0, 0x10044813}, 0x4040000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x0, 0xf00)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r5], &(0x7f0000000000)='GPL\x00'}, 0x94)

kernel console output (not intermixed with test programs):

yzkaller0>
[   97.196435][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[   97.208926][ T7434] tipc: Disabling bearer <eth:syzkaller0>
[   97.398806][ T7453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.435275][ T7454] syzkaller0: entered promiscuous mode
[   97.437274][ T7454] syzkaller0: entered allmulticast mode
[   97.443984][ T7454] tipc: Resetting bearer <eth:syzkaller0>
[   97.448009][ T7453] netlink: 180 bytes leftover after parsing attributes in process `syz.0.485'.
[   97.472577][ T7456] 8021q: adding VLAN 0 to HW filter on device bond14
[   97.476907][ T7456] bond0: (slave bond14): Enslaving as an active interface with an up link
[   97.481167][ T7453] tipc: Resetting bearer <eth:syzkaller0>
[   97.534374][ T7461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.703980][ T7453] tipc: Disabling bearer <eth:syzkaller0>
[   98.815785][ T7476] netlink: 'syz.0.492': attribute type 12 has an invalid length.
[   98.886520][ T7480] 8021q: adding VLAN 0 to HW filter on device bond10
[   98.890041][ T7480] bond0: (slave bond10): Enslaving as an active interface with an up link
[   98.943862][ T7484] bridge9: port 1(veth3) entered blocking state
[   98.946217][ T7484] bridge9: port 1(veth3) entered disabled state
[   98.948625][ T7484] veth3: entered allmulticast mode
[   98.954494][ T7484] veth3: entered promiscuous mode
[   98.969648][ T7485] sctp: [Deprecated]: syz.1.496 (pid 7485) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.969648][ T7485] Use struct sctp_sack_info instead
[   98.982718][ T7484] bridge9: port 2(veth0_to_bond) entered blocking state
[   98.985001][ T7484] bridge9: port 2(veth0_to_bond) entered disabled state
[   98.987189][ T7484] veth0_to_bond: entered allmulticast mode
[   98.995547][ T7484] veth0_to_bond: entered promiscuous mode
[   99.009535][ T7484] vlan2: entered allmulticast mode
[   99.011660][ T7484] veth1: entered allmulticast mode
[   99.013465][ T7484] bridge9: port 3(vlan2) entered blocking state
[   99.015694][ T7484] bridge9: port 3(vlan2) entered disabled state
[   99.020505][ T7484] vlan2: entered promiscuous mode
[   99.024310][ T7484] veth1: entered promiscuous mode
[   99.039792][ T7493] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[   99.275034][ T7508] 8021q: adding VLAN 0 to HW filter on device bond11
[   99.327091][ T7508] bond0: (slave bond11): Enslaving as an active interface with an up link
[   99.547807][ T7525] netlink: 'syz.2.508': attribute type 1 has an invalid length.
[   99.599446][ T7525] 8021q: adding VLAN 0 to HW filter on device bond12
[   99.609364][ T7530] netlink: 'syz.0.510': attribute type 18 has an invalid length.
[   99.638670][ T7525] bond12: (slave bridge7): making interface the new active one
[   99.645533][ T7525] bond12: (slave bridge7): Enslaving as an active interface with an up link
[   99.666867][ T7525] bond12: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   99.834763][ T7539] 8021q: adding VLAN 0 to HW filter on device bond13
[   99.838647][ T7539] bond0: (slave bond13): Enslaving as an active interface with an up link
[   99.910727][ T7543] __nla_validate_parse: 8 callbacks suppressed
[   99.910748][ T7543] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.514'.
[   99.979286][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'.
[  100.023442][ T7551] netlink: 'syz.2.519': attribute type 1 has an invalid length.
[  100.067892][ T7551] 8021q: adding VLAN 0 to HW filter on device bond14
[  100.087248][ T7551] bond14: (slave bridge8): making interface the new active one
[  100.091757][ T7551] bond14: (slave bridge8): Enslaving as an active interface with an up link
[  100.113743][ T7551] bond14: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  100.627592][ T7582] netlink: 'syz.2.528': attribute type 1 has an invalid length.
[  100.653175][ T7576] block nbd1: server does not support multiple connections per device.
[  100.657433][ T7576] block nbd1: shutting down sockets
[  100.667253][ T7582] 8021q: adding VLAN 0 to HW filter on device bond15
[  100.700444][ T7582] bond15: (slave bridge9): making interface the new active one
[  100.705229][ T7582] bond15: (slave bridge9): Enslaving as an active interface with an up link
[  100.727379][ T7582] bond15: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  100.776321][ T7586] 8021q: adding VLAN 0 to HW filter on device bond15
[  100.780811][ T7586] bond0: (slave bond15): Enslaving as an active interface with an up link
[  101.198913][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  101.295603][ T7619] netlink: 'syz.0.539': attribute type 1 has an invalid length.
[  101.324707][ T7619] 8021q: adding VLAN 0 to HW filter on device bond9
[  101.344820][ T7619] bond9: (slave bridge10): making interface the new active one
[  101.352164][ T7619] bond9: (slave bridge10): Enslaving as an active interface with an up link
[  101.366157][ T7619] bond9: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  101.828453][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.544'.
[  101.843340][ T7637] syzkaller1: entered promiscuous mode
[  101.845660][ T7637] syzkaller1: entered allmulticast mode
[  101.984991][ T7647] netlink: 44 bytes leftover after parsing attributes in process `syz.1.547'.
[  102.172626][ T7661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.206739][ T7660] 8021q: adding VLAN 0 to HW filter on device bond10
[  102.214360][ T7660] bond0: (slave bond10): Enslaving as an active interface with an up link
[  102.320760][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'.
[  102.346282][ T7668] netlink: 44 bytes leftover after parsing attributes in process `syz.0.555'.
[  102.350434][ T7668] netlink: 43 bytes leftover after parsing attributes in process `syz.0.555'.
[  102.356775][ T7668] netlink: 'syz.0.555': attribute type 5 has an invalid length.
[  102.367317][ T7668] netlink: 43 bytes leftover after parsing attributes in process `syz.0.555'.
[  102.438583][ T7675] netlink: 440 bytes leftover after parsing attributes in process `syz.1.556'.
[  102.553403][ T7677] 8021q: adding VLAN 0 to HW filter on device bond11
[  102.556850][ T7677] bond0: (slave bond11): Enslaving as an active interface with an up link
[  102.821309][ T7698] netlink: 'syz.1.562': attribute type 1 has an invalid length.
[  102.864515][ T7698] 8021q: adding VLAN 0 to HW filter on device bond16
[  102.956852][ T7698] bond16: (slave bridge11): making interface the new active one
[  102.960852][ T7698] bond16: (slave bridge11): Enslaving as an active interface with an up link
[  102.980615][ T7709] bond16: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  103.135915][ T7722] netlink: 'syz.0.568': attribute type 2 has an invalid length.
[  103.284069][ T7733] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  103.594886][ T7751] 8021q: adding VLAN 0 to HW filter on device bond17
[  103.598435][ T7751] bond0: (slave bond17): Enslaving as an active interface with an up link
[  103.946880][ T7776] ipvlan3: entered promiscuous mode
[  103.950607][ T7776] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  103.982258][ T7778] 8021q: adding VLAN 0 to HW filter on device bond12
[  103.986693][ T7778] bond0: (slave bond12): Enslaving as an active interface with an up link
[  104.019356][ T7780] validate_nla: 1 callbacks suppressed
[  104.019380][ T7780] netlink: 'syz.1.589': attribute type 10 has an invalid length.
[  104.047593][ T7780] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  104.466628][ T7796] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  104.649524][ T7817] 8021q: adding VLAN 0 to HW filter on device bond13
[  104.655292][ T7817] bond0: (slave bond13): Enslaving as an active interface with an up link
[  104.707813][ T7824] bond0: (slave bond7): Error -95 calling ndo_bpf
[  104.719288][ T7824] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  104.729700][ T7824] bond0: (slave bond7): Error -95 calling ndo_bpf
[  104.732798][ T7824] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  104.770032][ T7780] syz.1.589 (7780) used greatest stack depth: 18856 bytes left
[  105.037690][ T7846] syz.1.614 (7846) used greatest stack depth: 18360 bytes left
[  105.092710][ T7854] __nla_validate_parse: 11 callbacks suppressed
[  105.092724][ T7854] netlink: 260 bytes leftover after parsing attributes in process `syz.1.617'.
[  105.113937][ T7854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.116677][ T7854] syzkaller0: entered promiscuous mode
[  105.118437][ T7854] syzkaller0: entered allmulticast mode
[  105.145732][ T7854] tipc: Resetting bearer <eth:syzkaller0>
[  105.162143][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'.
[  105.165830][ T7854] tipc: Resetting bearer <eth:syzkaller0>
[  105.175490][ T7854] tipc: Disabling bearer <eth:syzkaller0>
[  105.349886][ T7865] tipc: Resetting bearer <eth:vlan0>
[  105.353683][ T7865] tipc: Resetting bearer <eth:vlan0>
[  105.386970][   T68] tipc: Resetting bearer <eth:vlan0>
[  105.429653][ T7871] 8021q: adding VLAN 0 to HW filter on device bond16
[  105.436613][ T7871] bond0: (slave bond16): Enslaving as an active interface with an up link
[  105.515174][ T7876] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  105.526315][ T7876] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  105.566265][ T7878] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  105.843904][ T7890] netlink: 'syz.2.629': attribute type 1 has an invalid length.
[  105.863815][ T7890] 8021q: adding VLAN 0 to HW filter on device bond17
[  105.875122][ T7890] bond17: (slave bridge10): making interface the new active one
[  105.878338][ T7890] bond17: (slave bridge10): Enslaving as an active interface with an up link
[  105.894787][ T7890] bond17: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  105.998375][ T7900] syzkaller1: entered promiscuous mode
[  106.005135][ T7900] syzkaller1: entered allmulticast mode
[  106.025121][ T7902] pimreg3: entered allmulticast mode
[  106.513793][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'.
[  106.588357][ T7937] geneve2: entered promiscuous mode
[  106.699943][ T7946] netlink: 'syz.0.650': attribute type 1 has an invalid length.
[  106.741476][ T7946] 8021q: adding VLAN 0 to HW filter on device bond14
[  106.789813][ T7946] bond14: (slave bridge11): making interface the new active one
[  106.800922][ T7946] bond14: (slave bridge11): Enslaving as an active interface with an up link
[  106.818308][ T7946] bond14: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  106.953358][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.654'.
[  106.958978][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.654'.
[  106.963769][ T7963] netlink: 'syz.0.654': attribute type 4 has an invalid length.
[  107.386844][ T8008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.389570][ T8008] syzkaller0: entered promiscuous mode
[  107.401671][ T8008] syzkaller0: entered allmulticast mode
[  107.406283][ T8008] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  107.419010][ T8008] tipc: Resetting bearer <eth:syzkaller0>
[  107.432912][ T8006] tipc: Resetting bearer <eth:syzkaller0>
[  107.450292][ T8006] tipc: Disabling bearer <eth:syzkaller0>
[  107.858223][ T8047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.669'.
[  107.890866][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[  107.944155][ T8057] netlink: 'syz.0.670': attribute type 1 has an invalid length.
[  107.969781][ T8057] 8021q: adding VLAN 0 to HW filter on device bond17
[  107.985385][ T8057] bond17: (slave bridge12): making interface the new active one
[  107.988990][ T8057] bond17: (slave bridge12): Enslaving as an active interface with an up link
[  108.001306][ T8057] bond17: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  108.128626][ T8064] 8021q: adding VLAN 0 to HW filter on device bond18
[  108.132464][ T8064] bond0: (slave bond18): Enslaving as an active interface with an up link
[  108.162919][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'.
[  108.810652][ T8087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.680'.
[  108.860728][ T8091] netlink: 'syz.2.681': attribute type 1 has an invalid length.
[  108.880145][ T8091] 8021q: adding VLAN 0 to HW filter on device bond18
[  108.898390][ T8091] bond18: (slave bridge11): making interface the new active one
[  108.903189][ T8091] bond18: (slave bridge11): Enslaving as an active interface with an up link
[  108.917402][ T8097] IPVS: set_ctl: invalid protocol: 29 172.20.20.66:20002
[  108.921313][ T8091] bond18: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  109.711912][ T8128] netlink: 154876 bytes leftover after parsing attributes in process `syz.2.694'.
[  109.714968][ T8128] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  110.070426][ T8147] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[  110.117642][ T8147] 8021q: adding VLAN 0 to HW filter on device bond19
[  110.135500][ T8147] bond19: (slave gretap2): making interface the new active one
[  110.152558][ T8147] bond19: (slave gretap2): Enslaving as an active interface with an up link
[  110.200617][ T8166] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  110.219258][ T8163] 8021q: adding VLAN 0 to HW filter on device bond18
[  110.226227][ T8163] bond0: (slave bond18): Enslaving as an active interface with an up link
[  110.277445][   T33] audit: type=1107 audit(1755559099.643:2): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='znpL܋YDJ
[  110.277445][   T33] @`A}0^;טъF8Ukzl"jF;ZΈ.!#rc
[  110.277445][   T33] HI,޲JՁvC99'
[  110.340972][ T8181] __nla_validate_parse: 1 callbacks suppressed
[  110.340985][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'.
[  110.383417][ T8187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.718'.
[  110.420551][ T8191] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.719'.
[  110.423953][ T8192] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.719'.
[  110.479361][ T8195] 8021q: adding VLAN 0 to HW filter on device bond19
[  110.483990][ T8195] bond0: (slave bond19): Enslaving as an active interface with an up link
[  110.568217][ T8203] netlink: 'syz.0.723': attribute type 9 has an invalid length.
[  110.570788][ T8203] netlink: 'syz.0.723': attribute type 6 has an invalid length.
[  110.573837][ T8203] netlink: 'syz.0.723': attribute type 7 has an invalid length.
[  110.577247][ T8203] netlink: 'syz.0.723': attribute type 8 has an invalid length.
[  110.608699][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'.
[  110.651759][ T8207] openvswitch: netlink: IPv4 tun info is not correct
[  110.817360][ T8216] netlink: 'syz.0.727': attribute type 1 has an invalid length.
[  110.841143][ T8216] 8021q: adding VLAN 0 to HW filter on device bond20
[  110.860395][ T8216] bond20: (slave bridge13): making interface the new active one
[  110.864868][ T8216] bond20: (slave bridge13): Enslaving as an active interface with an up link
[  110.890805][ T8216] bond20: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  110.986726][ T8219] netlink: 'syz.0.728': attribute type 4 has an invalid length.
[  111.246563][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.732'.
[  111.395347][ T8235] 8021q: adding VLAN 0 to HW filter on device bond20
[  111.401180][ T8235] bond0: (slave bond20): Enslaving as an active interface with an up link
[  111.518228][ T8247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.737'.
[  111.656553][ T8260] bridge_slave_0: left allmulticast mode
[  111.659011][ T8260] bridge_slave_0: left promiscuous mode
[  111.666142][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.674025][ T8260] bridge_slave_1: left allmulticast mode
[  111.677291][ T8260] bridge_slave_1: left promiscuous mode
[  111.679889][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.700919][ T8260] bond0: (slave bond_slave_0): Releasing backup interface
[  111.705636][ T8260] bond0: (slave bond_slave_1): Releasing backup interface
[  111.709541][ T8262] block nbd0: NBD_DISCONNECT
[  111.709895][ T8260] team0: Port device team_slave_0 removed
[  111.712106][ T8262] block nbd0: Send disconnect failed -32
[  111.716307][ T8260] team0: Port device team_slave_1 removed
[  111.717848][ T8262] block nbd0: shutting down sockets
[  111.718677][ T8265] netlink: 'syz.0.741': attribute type 1 has an invalid length.
[  111.729039][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.730811][ T8260] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.732425][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  111.739320][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.742612][ T8260] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.745598][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  111.748725][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.752285][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  111.757055][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.760634][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  111.766353][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.766601][ T8260] bond1: (slave bridge1): Releasing active interface
[  111.770133][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  111.770369][ T5854] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.783225][ T5854] Buffer I/O error on dev nbd0, logical block 1, async page read
[  111.786532][ T5854] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.790663][ T5854] Buffer I/O error on dev nbd0, logical block 2, async page read
[  111.794498][ T5854] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.797923][ T8260] bond2: (slave bridge2): Releasing active interface
[  111.800086][ T5854] Buffer I/O error on dev nbd0, logical block 3, async page read
[  111.806156][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.809566][ T8260] bond3: (slave gretap1): Releasing active interface
[  111.812143][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  111.816415][ T5854] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.820535][ T8260] bond5: (slave bridge4): Releasing active interface
[  111.821642][ T5854] Buffer I/O error on dev nbd0, logical block 1, async page read
[  111.828691][ T5854] ldm_validate_partition_table(): Disk read failed.
[  111.836110][ T8260] bond6: (slave bridge5): Releasing active interface
[  111.836785][ T5854] Dev nbd0: unable to read RDB block 0
[  111.847682][ T5854]  nbd0: unable to read partition table
[  111.863398][ T8260] bond0: (slave bond7): Releasing backup interface
[  111.868470][ T5854] ldm_validate_partition_table(): Disk read failed.
[  111.874500][ T5854] Dev nbd0: unable to read RDB block 0
[  111.878279][ T5854]  nbd0: unable to read partition table
[  111.887549][ T8260] bond8: (slave bridge6): Releasing active interface
[  111.899052][ T8260] bond0: (slave bond9): Releasing backup interface
[  111.909282][ T8260] bond0: (slave bond10): Releasing backup interface
[  111.926077][ T8260] bond0: (slave bond11): Releasing backup interface
[  111.935867][ T8260] bond12: (slave bridge7): Releasing active interface
[  111.943105][ T8260] bond0: (slave bond13): Releasing backup interface
[  111.948882][ T8260] bond14: (slave bridge8): Releasing active interface
[  111.957060][ T8260] bond15: (slave bridge9): Releasing active interface
[  111.964893][ T8260] bond0: (slave bond16): Releasing backup interface
[  111.970131][ T8260] bond17: (slave bridge10): Releasing active interface
[  111.977321][ T8260] bond18: (slave bridge11): Releasing active interface
[  111.984021][ T8260] bond19: (slave gretap2): Releasing active interface
[  111.990208][ T8260] bond0: (slave bond20): Releasing backup interface
[  112.024550][ T8265] 8021q: adding VLAN 0 to HW filter on device bond21
[  112.069232][ T8272] team0: Failed to send options change via netlink (err -105)
[  112.072083][ T8272] team0: Mode changed to "activebackup"
[  112.297616][ T8297] IPv6: addrconf: prefix option has invalid lifetime
[  112.310048][ T8300] netlink: 'syz.2.750': attribute type 1 has an invalid length.
[  112.357665][ T8300] 8021q: adding VLAN 0 to HW filter on device bond21
[  112.382962][ T8300] bond21: (slave bridge12): making interface the new active one
[  112.387185][ T8300] bond21: (slave bridge12): Enslaving as an active interface with an up link
[  112.402868][ T8300] bond21: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  112.415801][ T8307] IPv6: Can't replace route, no match found
[  112.439027][ T8303] netlink: 'syz.0.752': attribute type 1 has an invalid length.
[  112.577271][ T8316] 8021q: adding VLAN 0 to HW filter on device bond22
[  112.584857][ T8316] bond0: (slave bond22): Enslaving as an active interface with an up link
[  112.750169][ T8329] 8021q: adding VLAN 0 to HW filter on device bond23
[  112.773508][ T8329] bond23: (slave bridge13): making interface the new active one
[  112.777671][ T8329] bond23: (slave bridge13): Enslaving as an active interface with an up link
[  112.802811][ T8329] bond23: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  113.095053][ T8343] 8021q: adding VLAN 0 to HW filter on device bond24
[  113.098510][ T8343] bond0: (slave bond24): Enslaving as an active interface with an up link
[  113.229304][ T8351] IPv6: addrconf: prefix option has invalid lifetime
[  113.376361][ T8355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'.
[  113.428229][ T8360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.769'.
[  113.568237][ T8363] syzkaller0: entered promiscuous mode
[  113.570652][ T8363] syzkaller0: entered allmulticast mode
[  113.583988][ T8366] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.771'.
[  113.640493][ T8365] syzkaller1: entered allmulticast mode
[  114.151025][ T8375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.938531][ T8387] IPv6: addrconf: prefix option has invalid lifetime
[  116.121169][ T8409] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  116.215349][ T8414] validate_nla: 2 callbacks suppressed
[  116.215364][ T8414] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  116.220625][ T8414] netlink: 76 bytes leftover after parsing attributes in process `syz.0.787'.
[  116.300618][ T8419] 8021q: adding VLAN 0 to HW filter on device bond19
[  116.313084][ T8419] bond0: (slave bond19): Enslaving as an active interface with an up link
[  116.325943][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.329792][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.446302][ T8440] netlink: 'syz.2.792': attribute type 1 has an invalid length.
[  116.449381][ T8440] netlink: 224 bytes leftover after parsing attributes in process `syz.2.792'.
[  116.531166][ T8446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.538275][ T8446] syzkaller0: entered promiscuous mode
[  116.540486][ T8446] syzkaller0: entered allmulticast mode
[  116.574809][ T8446] tipc: Resetting bearer <eth:syzkaller0>
[  116.580649][ T8444] tipc: Resetting bearer <eth:syzkaller0>
[  116.600645][ T8444] tipc: Disabling bearer <eth:syzkaller0>
[  116.868624][ T8472] netlink: 'syz.0.803': attribute type 1 has an invalid length.
[  116.896965][ T8472] 8021q: adding VLAN 0 to HW filter on device bond23
[  116.915227][ T8472] bond23: (slave bridge15): making interface the new active one
[  116.919723][ T8472] bond23: (slave bridge15): Enslaving as an active interface with an up link
[  116.934618][ T8472] bond23: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  117.080906][ T8476] tipc: Resetting bearer <eth:vlan0>
[  117.236818][ T8494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.810'.
[  117.284812][ T8499] netlink: 'syz.0.813': attribute type 1 has an invalid length.
[  117.310839][ T8499] 8021q: adding VLAN 0 to HW filter on device bond24
[  117.319015][ T8503] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.812'.
[  117.355319][ T8499] bond24: (slave bridge16): making interface the new active one
[  117.363822][ T8499] bond24: (slave bridge16): Enslaving as an active interface with an up link
[  117.405314][ T8499] bond24: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  117.510966][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'.
[  117.564318][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.819'.
[  117.570880][ T8523] netlink: 'syz.0.820': attribute type 1 has an invalid length.
[  117.574115][ T8523] netlink: 'syz.0.820': attribute type 1 has an invalid length.
[  117.577331][ T8523] netlink: 216 bytes leftover after parsing attributes in process `syz.0.820'.
[  117.636072][ T8525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.639468][ T8525] syzkaller0: entered promiscuous mode
[  117.644916][ T8525] syzkaller0: entered allmulticast mode
[  117.727334][ T8537] tipc: Resetting bearer <eth:syzkaller0>
[  117.736641][ T8524] tipc: Resetting bearer <eth:syzkaller0>
[  117.747769][ T8524] tipc: Disabling bearer <eth:syzkaller0>
[  117.782874][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'.
[  117.823534][ T8548] IPv6: addrconf: prefix option has invalid lifetime
[  117.912317][ T6842] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.924535][ T6842] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.931207][ T6842] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.939090][ T6842] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.007632][ T8567] IPv6: addrconf: prefix option has invalid lifetime
[  118.115845][ T8578] openvswitch: netlink: IPv6 tunnel dst address is zero
[  118.121880][ T8578] syzkaller1: entered allmulticast mode
[  118.370967][ T8594] netlink: 'syz.0.849': attribute type 1 has an invalid length.
[  118.404862][ T8594] 8021q: adding VLAN 0 to HW filter on device bond25
[  118.436146][ T8594] bond25: (slave bridge17): making interface the new active one
[  118.450579][ T8594] bond25: (slave bridge17): Enslaving as an active interface with an up link
[  118.466791][ T8601] netlink: 68 bytes leftover after parsing attributes in process `syz.1.850'.
[  118.474306][ T8594] bond25: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  118.545738][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.853'.
[  118.672497][ T8623] IPv6: addrconf: prefix option has invalid lifetime
[  118.690666][ T8621] openvswitch: netlink: Key type 251 is out of range max 32
[  119.174860][ T8661] IPv6: addrconf: prefix option has invalid lifetime
[  119.179806][ T8662] netlink: 'syz.2.873': attribute type 1 has an invalid length.
[  119.203193][ T8662] 8021q: adding VLAN 0 to HW filter on device bond25
[  119.225214][ T8662] bond25: (slave bridge14): making interface the new active one
[  119.229083][ T8662] bond25: (slave bridge14): Enslaving as an active interface with an up link
[  119.237921][ T8666] bond0: (slave bond13): Error -95 calling ndo_bpf
[  119.240963][ T8666] bond0: (slave bond13): Error -95 calling ndo_bpf
[  119.244367][ T8666] bond0: (slave bond13): Error -95 calling ndo_bpf
[  119.262415][ T8662] bond25: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  119.294584][ T8666] bond0: (slave bond13): Error -95 calling ndo_bpf
[  119.502485][ T8675] IPv6: Can't replace route, no match found
[  119.584979][ T8679] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  119.624698][ T8681] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  119.871282][ T8706] ip6erspan0: entered allmulticast mode
[  119.958898][ T8711] IPv6: addrconf: prefix option has invalid lifetime
[  120.121607][ T8715] team0: Port device bond0 removed
[  120.130100][ T8715] veth0_to_bond: left allmulticast mode
[  120.138254][ T8715] veth0_to_bond: left promiscuous mode
[  120.141970][ T8715] bridge9: port 2(veth0_to_bond) entered disabled state
[  120.168590][ T8715] bond1: (slave bridge2): Releasing active interface
[  120.180311][ T8715] bond2: (slave geneve2): Releasing active interface
[  120.210445][ T8715] bond3: (slave bridge3): Releasing active interface
[  120.217473][ T8718] netlink: 'syz.0.891': attribute type 4 has an invalid length.
[  120.227549][ T8715] bond4: (slave bridge4): Releasing active interface
[  120.237814][ T8715] bond5: (slave bridge5): Releasing active interface
[  120.242795][ T8710] netlink: 'syz.1.885': attribute type 6 has an invalid length.
[  120.304619][ T8715] bond6: (slave bridge6): Releasing active interface
[  120.385613][ T8715] bond7: (slave bridge8): Releasing active interface
[  120.415217][ T8715] bond0: (slave bond8): Releasing backup interface
[  120.423197][ T8715] veth3: left allmulticast mode
[  120.425398][ T8715] veth3: left promiscuous mode
[  120.428908][ T8715] bridge9: port 1(veth3) entered disabled state
[  120.438413][ T8715] vlan2: left promiscuous mode
[  120.440331][ T8715] veth1: left promiscuous mode
[  120.444588][ T8715] bridge9: port 3(vlan2) entered disabled state
[  120.450929][ T8715] bond9: (slave bridge10): Releasing active interface
[  120.458481][ T8715] bond0: (slave bond10): Releasing backup interface
[  120.467927][ T8715] bond0: (slave bond11): Releasing backup interface
[  120.474415][ T8715] bond0: (slave bond12): Releasing backup interface
[  120.484878][ T8715] bond0: (slave bond13): Releasing backup interface
[  120.492967][ T8715] bond14: (slave bridge11): Releasing active interface
[  120.500448][ T8715] bond17: (slave bridge12): Releasing active interface
[  120.508557][ T8715] bond0: (slave bond18): Releasing backup interface
[  120.514510][ T8715] bond0: (slave bond19): Releasing backup interface
[  120.520548][ T8715] bond20: (slave bridge13): Releasing active interface
[  120.529523][ T8715] bond23: (slave bridge15): Releasing active interface
[  120.537082][ T8715] bond24: (slave bridge16): Releasing active interface
[  120.546082][ T8715] bond25: (slave bridge17): Releasing active interface
[  120.855214][ T8732] bond26: entered promiscuous mode
[  120.859527][ T8732] 8021q: adding VLAN 0 to HW filter on device bond26
[  121.087700][ T8749] tap0: tun_chr_ioctl cmd 1074025677
[  121.093385][ T8749] tap0: linktype set to 804
[  121.288491][ T8758] __nla_validate_parse: 17 callbacks suppressed
[  121.288542][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'.
[  121.382479][ T8767] net_ratelimit: 1 callbacks suppressed
[  121.382494][ T8767] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  121.388280][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'.
[  121.450909][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'.
[  121.469542][ T8777] netlink: 64 bytes leftover after parsing attributes in process `syz.0.911'.
[  121.513679][ T8784] validate_nla: 3 callbacks suppressed
[  121.513694][ T8784] netlink: 'syz.0.913': attribute type 1 has an invalid length.
[  121.674337][ T8793] 8021q: adding VLAN 0 to HW filter on device bond26
[  121.678805][ T8793] bond0: (slave bond26): Enslaving as an active interface with an up link
[  121.788562][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'.
[  122.010768][ T8804] netlink: 'syz.0.922': attribute type 1 has an invalid length.
[  122.013394][ T8804] netlink: 'syz.0.922': attribute type 4 has an invalid length.
[  122.015910][ T8804] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.922'.
[  122.019188][ T8804] netlink: 'syz.0.922': attribute type 1 has an invalid length.
[  122.021836][ T8804] netlink: 'syz.0.922': attribute type 4 has an invalid length.
[  122.024503][ T8804] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.922'.
[  122.027993][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'.
[  122.519146][ T8831] netlink: 'syz.0.934': attribute type 1 has an invalid length.
[  122.555524][ T8835] bond27: (slave bridge19): making interface the new active one
[  122.558371][ T8835] bond27: (slave bridge19): Enslaving as an active interface with an up link
[  122.607460][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.933'.
[  122.641731][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'.
[  122.648107][   T56] block nbd0: Receive control failed (result -107)
[  122.681502][ T8839] nbd0: detected capacity change from 0 to 32
[  122.685216][ T5854] block nbd0: Dead connection, failed to find a fallback
[  122.689081][ T5854] block nbd0: shutting down sockets
[  122.693339][ T5854] blk_print_req_error: 138 callbacks suppressed
[  122.693351][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.700518][ T5854] buffer_io_error: 138 callbacks suppressed
[  122.700531][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  122.713068][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.716994][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  122.731640][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.735256][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  122.738434][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.742283][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  122.745433][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.748899][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  122.755256][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.758755][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  122.762453][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.770595][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  122.778623][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.785348][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  122.788541][ T5854] ldm_validate_partition_table(): Disk read failed.
[  122.791249][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.804178][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  122.807440][ T5854] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  122.810916][ T5854] Buffer I/O error on dev nbd0, logical block 0, async page read
[  122.819377][ T5854] Dev nbd0: unable to read RDB block 0
[  122.824792][ T5854]  nbd0: unable to read partition table
[  122.830783][ T5854] ldm_validate_partition_table(): Disk read failed.
[  122.834451][ T5854] Dev nbd0: unable to read RDB block 0
[  122.837131][ T5854]  nbd0: unable to read partition table
[  122.880590][ T8860] 8021q: adding VLAN 0 to HW filter on device bond28
[  122.885928][ T8860] bond0: (slave bond28): Enslaving as an active interface with an up link
[  122.950336][ T8865] ip6tnl2: entered promiscuous mode
[  122.955065][ T8865] ip6tnl2: entered allmulticast mode
[  122.959327][ T8865] team0: Device ip6tnl2 is up. Set it down before adding it as a team port
[  123.858996][ T8904] 8021q: adding VLAN 0 to HW filter on device bond20
[  123.862669][ T8904] bond0: (slave bond20): Enslaving as an active interface with an up link
[  123.866007][ T8900] pim6reg1: entered promiscuous mode
[  123.868183][ T8900] pim6reg1: entered allmulticast mode
[  123.889462][ T8907] sctp: [Deprecated]: syz.0.960 (pid 8907) Use of int in maxseg socket option.
[  123.889462][ T8907] Use struct sctp_assoc_value instead
[  123.946670][ T5850] IPVS: starting estimator thread 0...
[  123.961201][ T8915] netlink: 'syz.0.962': attribute type 1 has an invalid length.
[  123.989103][ T8915] 8021q: adding VLAN 0 to HW filter on device bond29
[  124.004010][ T8915] bond29: (slave bridge20): making interface the new active one
[  124.008651][ T8915] bond29: (slave bridge20): Enslaving as an active interface with an up link
[  124.026370][ T8915] bond29: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  124.052278][ T8913] IPVS: using max 61 ests per chain, 146400 per kthread
[  124.116800][ T8923] RDS: rds_bind could not find a transport for fe80::b, load rds_tcp or rds_rdma?
[  124.163024][ T8926] 8021q: adding VLAN 0 to HW filter on device bond30
[  124.167282][ T8926] bond0: (slave bond30): Enslaving as an active interface with an up link
[  124.730537][ T8948] 8021q: adding VLAN 0 to HW filter on device bond21
[  124.738262][ T8948] bond0: (slave bond21): Enslaving as an active interface with an up link
[  125.183320][ T8970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.191917][ T8970] syzkaller0: entered promiscuous mode
[  125.194249][ T8970] syzkaller0: entered allmulticast mode
[  125.251089][ T8970] tipc: Resetting bearer <eth:syzkaller0>
[  125.276396][ T8970] tipc: Disabling bearer <eth:syzkaller0>
[  125.399953][ T8990] bridge0: entered allmulticast mode
[  125.470206][ T8996] 8021q: adding VLAN 0 to HW filter on device bond31
[  125.476886][ T8996] bond0: (slave bond31): Enslaving as an active interface with an up link
[  125.487732][ T8999] netlink: 'syz.1.993': attribute type 11 has an invalid length.
[  125.526289][ T9005] netlink: 'syz.0.994': attribute type 1 has an invalid length.
[  125.570783][ T8999] netlink: 'syz.1.993': attribute type 1 has an invalid length.
[  125.576246][ T9005] 8021q: adding VLAN 0 to HW filter on device bond32
[  125.613739][ T9005] bond32: (slave bridge21): making interface the new active one
[  125.620501][ T9005] bond32: (slave bridge21): Enslaving as an active interface with an up link
[  125.659120][ T9005] bond32: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  126.466955][ T9042] __nla_validate_parse: 6 callbacks suppressed
[  126.466982][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'.
[  126.741575][ T9064] IPv6: addrconf: prefix option has invalid lifetime
[  127.108549][ T9088] netlink: 'syz.1.1016': attribute type 12 has an invalid length.
[  127.476888][ T9110] netlink: 'syz.1.1021': attribute type 1 has an invalid length.
[  127.484872][ T9110] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1021'.
[  127.527107][ T9112] syzkaller1: entered promiscuous mode
[  127.531936][ T9112] syzkaller1: entered allmulticast mode
[  127.544879][ T9112] netlink: 'syz.2.1022': attribute type 1 has an invalid length.
[  127.563028][ T9116] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  127.897656][ T9141] can: request_module (can-proto-5) failed.
[  128.739792][ T9157] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.744257][ T9157] syzkaller0: entered promiscuous mode
[  128.746647][ T9157] syzkaller0: entered allmulticast mode
[  128.793870][ T9156] tipc: Resetting bearer <eth:syzkaller0>
[  128.810750][ T9156] tipc: Disabling bearer <eth:syzkaller0>
[  128.984599][ T9172] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  128.988835][ T9170] tap0: tun_chr_ioctl cmd 1074025677
[  128.995052][ T9170] tap0: linktype set to 804
[  129.019948][ T9172] bond21: (slave bridge12): Releasing active interface
[  129.030198][ T9172] bond0: (slave bond22): Releasing backup interface
[  129.032221][ T9174] rdma_op ffff888031a1c1f0 conn xmit_rdma 0000000000000000
[  129.033301][ T9172] bond0: (slave bond22): the permanent HWaddr of slave - 8a:65:af:58:5f:2e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  129.054350][ T9172] bond23: (slave bridge13): Releasing active interface
[  129.066033][ T9172] bond0: (slave bond24): Releasing backup interface
[  129.074377][ T9172] bond25: (slave bridge14): Releasing active interface
[  129.121997][ T9172] netlink: 'syz.2.1037': attribute type 10 has an invalid length.
[  129.125244][ T9172] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  129.146030][ T9172] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  129.151304][ T9181] IPVS: Scheduler module ip_vs_sip not found
[  129.162968][ T9172] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  129.169898][ T9172] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  129.199440][ T9186] IPv6: addrconf: prefix option has invalid lifetime
[  129.209479][ T9175] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.345679][ T9192] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1045'.
[  129.349859][ T9192] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1045'.
[  129.514845][ T9208] netlink: 786 bytes leftover after parsing attributes in process `syz.1.1051'.
[  129.538120][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'.
[  129.813862][ T9233] netlink: 'syz.1.1058': attribute type 1 has an invalid length.
[  129.846541][ T9233] 8021q: adding VLAN 0 to HW filter on device bond22
[  129.880666][ T9233] bond22: (slave bridge12): making interface the new active one
[  129.887257][ T9233] bond22: (slave bridge12): Enslaving as an active interface with an up link
[  129.920659][ T9233] bond22: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  130.194469][ T9249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1065'.
[  130.387354][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'.
[  130.652119][ T9284] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1078'.
[  130.731093][ T9289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1081'.
[  130.778077][ T9289] bond33: entered promiscuous mode
[  130.782058][ T9289] 8021q: adding VLAN 0 to HW filter on device bond33
[  130.929893][ T9289] bond33 (unregistering): Released all slaves
[  131.237422][ T9317] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  131.364973][ T9323] netlink: 'syz.0.1092': attribute type 1 has an invalid length.
[  131.410380][ T9323] team0: entered promiscuous mode
[  131.557491][ T6842] syzkaller0: tun_net_xmit 76
[  131.561458][ T6842] syzkaller0: tun_net_xmit 48
[  131.563975][ T9321] syzkaller0: create flow: hash 2909469227 index 1
[  131.592912][   T10] syzkaller0: tun_net_xmit 76
[  131.624196][ T9345] syzkaller0: delete flow: hash 2909469227 index 1
[  133.025575][ T9359] __nla_validate_parse: 4 callbacks suppressed
[  133.025591][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'.
[  133.079445][ T9368] IPv6: addrconf: prefix option has invalid lifetime
[  133.130705][ T9354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  133.318854][ T9384] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1111'.
[  133.528033][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'.
[  133.745542][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'.
[  134.554754][ T9465] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  134.713149][ T9476] netlink: 'syz.0.1138': attribute type 3 has an invalid length.
[  134.716443][ T9476] netlink: 'syz.0.1138': attribute type 3 has an invalid length.
[  134.723368][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'.
[  134.728145][ T9476] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1138'.
[  134.840866][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1142'.
[  134.888305][ T9491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1144'.
[  134.896451][ T9491] netlink: 'syz.0.1144': attribute type 1 has an invalid length.
[  134.899099][ T9491] netlink: 'syz.0.1144': attribute type 2 has an invalid length.
[  134.900835][ T9493] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1145'.
[  134.905493][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1144'.
[  135.071265][ T9509] IPv6: addrconf: prefix option has invalid lifetime
[  135.118335][ T9515] batadv_slave_1: entered promiscuous mode
[  135.136733][ T9510] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  135.376065][ T9537] netlink: 'syz.0.1161': attribute type 1 has an invalid length.
[  135.429301][ T9537] 8021q: adding VLAN 0 to HW filter on device bond33
[  135.456518][ T9537] bond33: (slave bridge22): making interface the new active one
[  135.460979][ T9537] bond33: (slave bridge22): Enslaving as an active interface with an up link
[  135.492529][ T9537] bond33: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  135.570876][ T9551] macsec1: entered promiscuous mode
[  135.573207][ T9551] macsec1: entered allmulticast mode
[  135.590062][ T9551] netlink: 'syz.1.1165': attribute type 58 has an invalid length.
[  135.608162][ T9554] bond0: entered promiscuous mode
[  135.610039][ T9554] bond26: entered promiscuous mode
[  135.613012][ T9554] bond28: entered promiscuous mode
[  135.614976][ T9554] bond30: entered promiscuous mode
[  135.616851][ T9554] bond31: entered promiscuous mode
[  135.927993][ T9577] netlink: 'syz.0.1172': attribute type 1 has an invalid length.
[  136.010069][ T9577] 8021q: adding VLAN 0 to HW filter on device bond34
[  136.038925][ T9579] bond34: (slave bridge23): making interface the new active one
[  136.043602][ T9579] bond34: (slave bridge23): Enslaving as an active interface with an up link
[  136.074218][ T9577] bond34: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  136.120172][ T9589] netlink: 'syz.1.1175': attribute type 1 has an invalid length.
[  136.171793][ T9589] 8021q: adding VLAN 0 to HW filter on device bond23
[  136.202233][ T9593] 8021q: adding VLAN 0 to HW filter on device bond23
[  136.204805][ T9593] bond23: (slave vcan1): The slave device specified does not support setting the MAC address
[  136.210412][ T9593] bond23: (slave vcan1): Error -95 calling set_mac_address
[  136.237367][ T9589] gretap3: entered promiscuous mode
[  136.246213][ T9589] macvlan3: entered promiscuous mode
[  136.247996][ T9589] macvlan3: entered allmulticast mode
[  136.250376][ T9589] bond23: entered promiscuous mode
[  136.253571][ T9589] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  136.258895][ T9589] bond23: left promiscuous mode
[  136.328454][ T9600] netlink: 'syz.2.1178': attribute type 8 has an invalid length.
[  136.349692][ T9600] netlink: 'syz.2.1178': attribute type 1 has an invalid length.
[  136.396724][ T9600] 8021q: adding VLAN 0 to HW filter on device bond27
[  136.428898][ T9600] vlan3: entered allmulticast mode
[  136.431106][ T9600] veth1: entered allmulticast mode
[  136.470480][ T9612] veth9: entered promiscuous mode
[  136.566269][ T9623] 8021q: adding VLAN 0 to HW filter on device bond35
[  136.569318][ T9623] bond35: entered promiscuous mode
[  136.571584][ T9623] bond0: (slave bond35): Enslaving as an active interface with an up link
[  136.677427][ T9635] veth0: entered promiscuous mode
[  136.759167][ T9642] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  136.826524][ T9625] veth0: left promiscuous mode
[  136.899075][ T9655] 8021q: adding VLAN 0 to HW filter on device bond28
[  136.925838][ T9655] bond28: (slave bridge15): making interface the new active one
[  136.930582][ T9655] bond28: (slave bridge15): Enslaving as an active interface with an up link
[  136.953010][ T9655] bond28: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  136.980922][ T9661] syzkaller0: entered promiscuous mode
[  136.983721][ T9661] syzkaller0: entered allmulticast mode
[  138.632701][ T9750] 8021q: adding VLAN 0 to HW filter on device bond29
[  138.653126][ T9750] bond29: (slave bridge16): making interface the new active one
[  138.657275][ T9750] bond29: (slave bridge16): Enslaving as an active interface with an up link
[  138.678885][ T9750] bond29: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  138.707036][ T9753] __nla_validate_parse: 11 callbacks suppressed
[  138.707050][ T9753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1228'.
[  138.880714][ T9761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.952088][ T9761] syzkaller0: entered promiscuous mode
[  138.954428][ T9761] syzkaller0: entered allmulticast mode
[  138.957804][ T9761] tipc: Resetting bearer <eth:syzkaller0>
[  138.969116][ T9760] tipc: Resetting bearer <eth:syzkaller0>
[  138.986472][ T9763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1234'.
[  138.989865][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1234'.
[  139.911711][ T5848] Bluetooth: hci2: command 0x0401 tx timeout
[  140.370679][ T9760] tipc: Disabling bearer <eth:syzkaller0>
[  140.375845][ T9771] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1236'.
[  140.541167][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1241'.
[  140.550228][ T9797] bond0: left promiscuous mode
[  140.552209][ T9797] bond26: left promiscuous mode
[  140.554162][ T9797] bond28: left promiscuous mode
[  140.556668][ T9797] bond30: left promiscuous mode
[  140.558851][ T9797] bond31: left promiscuous mode
[  140.562114][ T9797] bond35: left promiscuous mode
[  140.638160][ T9803] IPv6: addrconf: prefix option has invalid lifetime
[  140.688322][ T9798] vlan3: entered allmulticast mode
[  140.691274][ T9798] bridge_slave_0: entered allmulticast mode
[  140.771816][ T9814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'.
[  140.895555][ T9825] bond30 (unregistering): Released all slaves
[  140.906357][ T9830] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1256'.
[  140.966815][ T9349] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  141.069693][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'.
[  141.106842][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'.
[  141.147811][ T9845] validate_nla: 4 callbacks suppressed
[  141.147825][ T9845] netlink: 'syz.2.1260': attribute type 1 has an invalid length.
[  141.167727][ T9845] 8021q: adding VLAN 0 to HW filter on device bond30
[  141.182106][ T9845] bond30: (slave bridge17): making interface the new active one
[  141.185789][ T9845] bond30: (slave bridge17): Enslaving as an active interface with an up link
[  141.198145][ T9845] bond30: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  141.795947][ T9855] netlink: 'syz.2.1263': attribute type 31 has an invalid length.
[  141.952479][ T9860] tap0: tun_chr_ioctl cmd 1074025677
[  141.954759][ T9860] tap0: linktype set to 823
[  141.962384][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[  142.341853][ T9900] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  142.353252][ T9900] macsec1: entered promiscuous mode
[  142.356787][ T9900] macsec1: entered allmulticast mode
[  142.358609][ T9900] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  142.378337][ T9897] netlink: 'syz.0.1276': attribute type 3 has an invalid length.
[  142.454443][ T9904] bridge: RTM_NEWNEIGH with invalid state 0x10
[  142.495544][ T9913] veth0_to_bond: entered allmulticast mode
[  142.511156][ T9914] netlink: 'syz.1.1281': attribute type 1 has an invalid length.
[  142.698079][ T9926] netlink: 'syz.2.1286': attribute type 21 has an invalid length.
[  142.701324][ T9926] netlink: 'syz.2.1286': attribute type 4 has an invalid length.
[  142.855103][ T9942] netlink: 'syz.0.1292': attribute type 1 has an invalid length.
[  142.903607][ T9942] 8021q: adding VLAN 0 to HW filter on device bond36
[  142.920010][ T9947] netlink: 'syz.1.1295': attribute type 1 has an invalid length.
[  142.962758][ T9942] bond36: (slave bridge25): making interface the new active one
[  142.967270][ T9942] bond36: (slave bridge25): Enslaving as an active interface with an up link
[  142.995663][ T9942] bond36: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  143.078713][ T9953] netlink: 'syz.1.1298': attribute type 83 has an invalid length.
[  143.082594][ T9955] openvswitch: netlink: Multiple metadata blocks provided
[  143.086910][ T9956] openvswitch: netlink: Multiple metadata blocks provided
[  144.265788][T10003] __nla_validate_parse: 13 callbacks suppressed
[  144.265804][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'.
[  144.273516][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'.
[  144.360969][T10004] hsr_slave_1 (unregistering): left promiscuous mode
[  144.516642][T10017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1315'.
[  144.551786][T10020] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1317'.
[  144.557851][T10020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1317'.
[  144.576413][T10023] netlink: 'syz.2.1319': attribute type 29 has an invalid length.
[  144.579816][T10023] openvswitch: netlink: Key type 9488 is out of range max 32
[  144.648439][T10022] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.668200][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'.
[  144.687333][T10029] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.705896][T10029] bond0: (slave rose0): Enslaving as an active interface with an up link
[  144.747172][T10040] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1324'.
[  145.107882][T10073] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1330'.
[  145.157671][T10076] bond31 (unregistering): Released all slaves
[  145.161782][T10079] Unsupported ieee802154 address type: 0
[  145.369060][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'.
[  145.514473][T10095] IPv6: addrconf: prefix option has invalid lifetime
[  145.595888][T10101] 8021q: adding VLAN 0 to HW filter on device bond37
[  145.600120][T10101] bond0: (slave bond37): Enslaving as an active interface with an up link
[  145.640611][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'.
[  145.919029][T10126] 8021q: adding VLAN 0 to HW filter on device bond24
[  145.926359][T10126] bond0: (slave bond24): Enslaving as an active interface with an up link
[  145.943808][T10131] erspan0: entered allmulticast mode
[  145.992139][T10133] 8021q: adding VLAN 0 to HW filter on device bond25
[  145.996389][T10131] tap0: tun_chr_ioctl cmd 1074025676
[  145.998554][T10131] tap0: owner set to 0
[  146.013801][T10133] bond25: (slave bridge13): making interface the new active one
[  146.017825][T10133] bond25: (slave bridge13): Enslaving as an active interface with an up link
[  146.046753][T10133] bond25: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  146.540266][T10150] validate_nla: 5 callbacks suppressed
[  146.540283][T10150] netlink: 'syz.2.1356': attribute type 33 has an invalid length.
[  146.642630][T10154] netlink: 'syz.2.1358': attribute type 1 has an invalid length.
[  147.015700][T10169] netlink: 'syz.2.1364': attribute type 10 has an invalid length.
[  147.065956][T10173] raw_sendmsg: syz.0.1365 forgot to set AF_INET. Fix it!
[  147.247231][T10184] tipc: New replicast peer: 255.127.0.0
[  147.249165][T10184] tipc: Enabled bearer <udp:s>, priority 10
[  147.426191][T10198] macvlan3: entered allmulticast mode
[  147.429586][T10198] veth1_vlan: entered allmulticast mode
[  147.435349][T10198] veth1_vlan: left allmulticast mode
[  147.567624][T10210] bond31 (unregistering): Released all slaves
[  147.676650][T10218] netlink: 'syz.1.1379': attribute type 1 has an invalid length.
[  147.684758][T10218] netlink: 'syz.1.1379': attribute type 2 has an invalid length.
[  147.918730][T10246] netlink: 'syz.2.1387': attribute type 1 has an invalid length.
[  147.943398][T10246] 8021q: adding VLAN 0 to HW filter on device bond31
[  148.030552][T10251] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  148.254939][T10279] nbd: nbd0 already in use
[  148.290337][T10288] IPv6: addrconf: prefix option has invalid lifetime
[  148.302811][T10289] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  148.308319][T10291] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  148.350751][T10295] 8021q: adding VLAN 0 to HW filter on device bond26
[  148.356396][T10295] bond0: (slave bond26): Enslaving as an active interface with an up link
[  148.476571][T10309] IPv6: addrconf: prefix option has invalid lifetime
[  148.548829][T10311] netlink: 'syz.1.1408': attribute type 5 has an invalid length.
[  148.670941][T10324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.675772][T10324] syzkaller0: entered promiscuous mode
[  148.677724][T10324] syzkaller0: entered allmulticast mode
[  148.990728][T10327] tipc: Resetting bearer <eth:syzkaller0>
[  149.008449][T10322] tipc: Resetting bearer <eth:syzkaller0>
[  149.035217][T10322] tipc: Disabling bearer <eth:syzkaller0>
[  149.165004][T10338] IPv6: addrconf: prefix option has invalid lifetime
[  149.536384][T10372] __nla_validate_parse: 18 callbacks suppressed
[  149.536400][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'.
[  149.564772][T10376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1428'.
[  149.632191][T10384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1430'.
[  149.636640][T10384] syzkaller1: entered promiscuous mode
[  149.638437][T10384] syzkaller1: entered allmulticast mode
[  149.672346][T10386] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1432'.
[  149.676122][T10386] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1432'.
[  149.850050][T10405] openvswitch: netlink: Message has 8 unknown bytes.
[  149.877126][T10408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  149.880230][T10408] IPv6: NLM_F_CREATE should be set when creating new route
[  149.883474][T10408] IPv6: NLM_F_CREATE should be set when creating new route
[  149.886703][T10408] IPv6: NLM_F_CREATE should be set when creating new route
[  149.892358][T10408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  150.086335][T10424] 8021q: adding VLAN 0 to HW filter on device bond38
[  150.092076][T10424] bond0: (slave bond38): Enslaving as an active interface with an up link
[  150.108367][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'.
[  150.133455][T10430] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1445'.
[  150.176601][T10432] netlink: 'syz.0.1446': attribute type 1 has an invalid length.
[  150.221208][T10432] 8021q: adding VLAN 0 to HW filter on device bond39
[  150.240667][T10432] bond39: (slave ip6gretap1): making interface the new active one
[  150.246284][T10432] bond39: (slave ip6gretap1): Enslaving as an active interface with an up link
[  150.274879][T10432] veth5: entered promiscuous mode
[  150.283651][T10432] bond39: (slave veth5): Enslaving as an active interface with a down link
[  150.290760][T10432] bond39: (slave erspan0): Enslaving as an active interface with an up link
[  150.305866][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'.
[  150.439320][T10444] 8021q: adding VLAN 0 to HW filter on device bond40
[  150.444539][T10444] bond0: (slave bond40): Enslaving as an active interface with an up link
[  150.576432][T10452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  150.774066][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1459'.
[  150.777727][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'.
[  150.866467][T10481] netlink: 'syz.2.1462': attribute type 1 has an invalid length.
[  150.886830][T10481] 8021q: adding VLAN 0 to HW filter on device bond32
[  150.918628][T10481] bond32: (slave bridge18): making interface the new active one
[  150.930092][T10481] bond32: (slave bridge18): Enslaving as an active interface with an up link
[  150.987588][T10481] bond32: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  151.621703][   T33] audit: type=1800 audit(1755559140.983:3): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1474" name="memory.events" dev="tmpfs" ino=2596 res=0 errno=0
[  152.289570][T10573] blkio.reset_stats is deprecated
[  152.414012][T10583] IPv6: addrconf: prefix option has invalid lifetime
[  152.476443][T10581] wireguard0: entered promiscuous mode
[  152.478546][T10581] wireguard0: entered allmulticast mode
[  152.747019][T10604] geneve3: entered allmulticast mode
[  152.750510][ T5911] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  152.760731][ T5911] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  152.771656][ T5911] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  152.789091][ T5911] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  152.998836][T10615] dvmrp1: entered allmulticast mode
[  153.280868][T10637] netlink: 'syz.0.1512': attribute type 10 has an invalid length.
[  153.304738][T10637] batman_adv: batadv0: Adding interface: netdevsim0
[  153.307405][T10637] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.318881][T10637] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  153.382799][T10638] 0{X: renamed from gretap0
[  153.385265][T10644] netlink: 'syz.0.1512': attribute type 10 has an invalid length.
[  153.435067][T10638] 0{X: entered allmulticast mode
[  153.479680][T10638] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  153.833068][T10660] netlink: 'syz.1.1519': attribute type 1 has an invalid length.
[  154.218370][T10679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.247185][T10679] syzkaller0: entered promiscuous mode
[  154.249633][T10679] syzkaller0: entered allmulticast mode
[  154.281730][T10679] tipc: Resetting bearer <eth:syzkaller0>
[  154.294154][T10678] tipc: Resetting bearer <eth:syzkaller0>
[  154.312871][T10678] tipc: Disabling bearer <eth:syzkaller0>
[  154.349252][T10681] bond41: entered promiscuous mode
[  154.361461][T10681] bond41: entered allmulticast mode
[  154.364731][T10681] 8021q: adding VLAN 0 to HW filter on device bond41
[  154.460377][T10690] batman_adv: batadv0: Adding interface: ip6gretap3
[  154.465502][T10690] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  154.475484][T10690] batman_adv: batadv0: Interface activated: ip6gretap3
[  154.889455][T10703] __nla_validate_parse: 19 callbacks suppressed
[  154.889469][T10703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1532'.
[  155.324614][T10713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.339955][T10713] tipc: Resetting bearer <eth:syzkaller0>
[  155.365917][T10712] tipc: Disabling bearer <eth:syzkaller0>
[  155.413766][T10715] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1535'.
[  155.460869][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'.
[  155.506894][T10723] netlink: 'syz.1.1539': attribute type 1 has an invalid length.
[  155.529872][T10723] 8021q: adding VLAN 0 to HW filter on device bond30
[  155.554298][T10723] bond30: (slave bridge14): making interface the new active one
[  155.558674][T10723] bond30: (slave bridge14): Enslaving as an active interface with an up link
[  155.574323][T10723] bond30: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  155.633844][T10726] netlink: 'syz.2.1538': attribute type 10 has an invalid length.
[  155.660401][T10726] netlink: del zone limit has 4 unknown bytes
[  155.686115][T10726] netlink: 210 bytes leftover after parsing attributes in process `syz.2.1538'.
[  155.691081][T10728] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  155.856468][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'.
[  155.929819][T10750] netlink: 'syz.0.1547': attribute type 1 has an invalid length.
[  155.941741][T10750] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1547'.
[  155.967204][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1546'.
[  155.970209][T10753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.087140][T10763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1546'.
[  156.121896][T10762] netlink: 'syz.0.1550': attribute type 39 has an invalid length.
[  156.124257][T10763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.188574][T10763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.242217][T10763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.314302][T10763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.420557][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.466021][T10774] 8021q: adding VLAN 0 to HW filter on device bond42
[  156.472838][T10774] bond0: (slave bond42): Enslaving as an active interface with an up link
[  156.477987][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.487962][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.492537][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.644124][T10786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.660362][T10785] tipc: Disabling bearer <eth:syzkaller0>
[  156.837195][T10792] netlink: 'syz.0.1557': attribute type 1 has an invalid length.
[  156.877623][T10794] netlink: 'syz.1.1559': attribute type 1 has an invalid length.
[  156.890521][T10797] IPv6: addrconf: prefix option has invalid lifetime
[  156.908013][T10794] 8021q: adding VLAN 0 to HW filter on device bond31
[  156.930650][T10794] bond31: (slave bridge15): making interface the new active one
[  156.952468][T10794] bond31: (slave bridge15): Enslaving as an active interface with an up link
[  156.968544][T10794] bond31: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  157.133683][T10809] netlink: 'syz.0.1564': attribute type 10 has an invalid length.
[  157.156808][T10809] tipc: Resetting bearer <eth:vlan0>
[  157.171808][T10809] veth0_vlan: left promiscuous mode
[  157.175862][T10809] veth0_vlan: entered promiscuous mode
[  157.184601][T10809] team0: Device veth0_vlan failed to register rx_handler
[  157.192620][T10809] tipc: Resetting bearer <eth:vlan0>
[  157.303425][T10825] 8021q: adding VLAN 0 to HW filter on device bond33
[  157.342228][T10825] bond33: (slave bridge19): making interface the new active one
[  157.346669][T10825] bond33: (slave bridge19): Enslaving as an active interface with an up link
[  157.386549][T10825] bond33: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  157.502918][T10836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.646599][T10858] geneve2: entered allmulticast mode
[  157.651326][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.657037][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.660297][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.667470][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.716269][T10864] 8021q: adding VLAN 0 to HW filter on device bond34
[  157.730463][T10864] bond34: (slave bridge20): making interface the new active one
[  157.736419][T10864] bond34: (slave bridge20): Enslaving as an active interface with an up link
[  157.767310][T10864] bond34: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  157.999488][T10887] 8021q: adding VLAN 0 to HW filter on device bond32
[  158.004073][T10887] bond0: (slave bond32): Enslaving as an active interface with an up link
[  158.040283][T10885] syzkaller1: entered promiscuous mode
[  158.044733][T10885] syzkaller1: entered allmulticast mode
[  158.091780][T10892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1590'.
[  158.094716][T10892] openvswitch: netlink: Flow key attr not present in new flow.
[  158.156925][T10897] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1591'.
[  159.218552][T10967] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  159.394639][T10980] IPv6: addrconf: prefix option has invalid lifetime
[  159.634895][T10994] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  159.693335][T10996] 8021q: adding VLAN 0 to HW filter on device bond43
[  159.697712][T10996] bond0: (slave bond43): Enslaving as an active interface with an up link
[  159.784939][T11001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.789199][T11001] syzkaller0: entered promiscuous mode
[  159.791748][T11001] syzkaller0: entered allmulticast mode
[  160.070274][T11026] validate_nla: 2 callbacks suppressed
[  160.070290][T11026] netlink: 'syz.2.1629': attribute type 10 has an invalid length.
[  160.077297][T11026] team0: Device ipvlan1 failed to register rx_handler
[  160.544122][T11038] geneve1: entered promiscuous mode
[  160.546044][T11038] geneve1: entered allmulticast mode
[  160.591875][T11038] veth1_macvtap: mtu greater than device maximum
[  160.609012][T11000] tipc: Resetting bearer <eth:syzkaller0>
[  160.626383][T11000] tipc: Disabling bearer <eth:syzkaller0>
[  160.729435][T11045] IPv6: addrconf: prefix option has invalid lifetime
[  160.809972][T11048] __nla_validate_parse: 9 callbacks suppressed
[  160.809992][T11048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1639'.
[  160.853946][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'.
[  160.857458][T11051] netlink: 'syz.1.1640': attribute type 3 has an invalid length.
[  161.064251][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1648'.
[  161.149217][T11081] tipc: MTU too low for tipc bearer
[  161.287208][T11092] netlink: 'syz.0.1653': attribute type 1 has an invalid length.
[  161.290336][T11092] netlink: 'syz.0.1653': attribute type 1 has an invalid length.
[  161.948603][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'.
[  161.954347][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'.
[  162.015204][T11122] syzkaller1: entered promiscuous mode
[  162.017719][T11122] syzkaller1: entered allmulticast mode
[  162.297039][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'.
[  162.494262][T11147] netlink: 'syz.0.1671': attribute type 29 has an invalid length.
[  162.498753][T11147] netlink: 'syz.0.1671': attribute type 29 has an invalid length.
[  162.506254][T11147] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1671'.
[  162.508625][T11150] netlink: 'syz.1.1672': attribute type 1 has an invalid length.
[  162.513301][T11150] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1672'.
[  162.548211][T11153] IPv6: addrconf: prefix option has invalid lifetime
[  162.566007][T11154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1673'.
[  162.625008][T11164] netlink: 'syz.1.1678': attribute type 1 has an invalid length.
[  162.659136][T11164] 8021q: adding VLAN 0 to HW filter on device bond33
[  162.664470][T11162] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1679'.
[  162.678939][T11164] bond33: (slave bridge16): making interface the new active one
[  162.685210][T11164] bond33: (slave bridge16): Enslaving as an active interface with an up link
[  162.707040][T11164] bond33: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  162.789723][T11177] netlink: 'syz.0.1684': attribute type 23 has an invalid length.
[  163.216646][T11193] netlink: 'syz.0.1689': attribute type 13 has an invalid length.
[  163.631620][ T5894] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.643849][ T5894] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.649339][ T5894] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  163.653389][ T5894] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.656169][ T5894] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.659325][ T5894] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  163.666550][ T5894] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.670083][ T5894] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.674644][ T5894] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  163.680130][ T5894] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.685771][ T5894] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.689791][ T5894] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  163.712711][T11197] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  164.035051][T11228] IPv6: addrconf: prefix option has invalid lifetime
[  164.092992][T11230] bond44: entered promiscuous mode
[  164.358084][T11258] 8021q: adding VLAN 0 to HW filter on device bond34
[  164.363809][T11258] bond0: (slave bond34): Enslaving as an active interface with an up link
[  165.064838][T11301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.067562][T11301] syzkaller0: entered promiscuous mode
[  165.069543][T11301] syzkaller0: entered allmulticast mode
[  165.082928][T11302] netlink: 'syz.0.1724': attribute type 1 has an invalid length.
[  165.086459][T11301] netlink: 'syz.0.1724': attribute type 1 has an invalid length.
[  165.089331][T11302] syzkaller0: mtu less than device minimum
[  165.093009][T11301] syzkaller0: mtu less than device minimum
[  165.097367][T11299] tipc: Resetting bearer <eth:syzkaller0>
[  165.112542][T11299] tipc: Disabling bearer <eth:syzkaller0>
[  165.719708][ T5894] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  165.724271][ T5894] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  165.728251][ T5894] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  165.732228][ T5894] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.108139][T11338] netlink: 'syz.1.1736': attribute type 1 has an invalid length.
[  166.128873][T11338] 8021q: adding VLAN 0 to HW filter on device bond35
[  166.138017][T11338] bond35: (slave gretap4): making interface the new active one
[  166.141271][T11338] bond35: (slave gretap4): Enslaving as an active interface with an up link
[  166.393668][T11358] netlink: 'syz.2.1740': attribute type 9 has an invalid length.
[  166.449473][T11361] __nla_validate_parse: 13 callbacks suppressed
[  166.449486][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'.
[  166.455696][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'.
[  166.458944][T11361] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  166.464936][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'.
[  166.467839][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'.
[  166.471210][T11362] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  166.477530][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'.
[  166.517001][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1742'.
[  166.534021][T11365] bond36: entered promiscuous mode
[  166.536097][T11365] 8021q: adding VLAN 0 to HW filter on device bond36
[  166.607433][T11369] 8021q: adding VLAN 0 to HW filter on device bond45
[  166.610871][T11369] bond0: (slave bond45): Enslaving as an active interface with an up link
[  166.626099][T11373] netlink: 'syz.2.1745': attribute type 12 has an invalid length.
[  166.636992][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1744'.
[  166.696253][T11379] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1748'.
[  166.699162][T11379] bond0: option min_links: invalid value (18446744072019614533)
[  166.701760][T11379] bond0: option min_links: allowed values 0 - 2147483647
[  166.776110][T11386] vlan3: entered allmulticast mode
[  166.827857][T11387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.041080][T11417] macvtap0: entered promiscuous mode
[  167.044466][T11417] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  167.048327][T11417] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  167.186065][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'.
[  167.699768][T11457] 8021q: adding VLAN 0 to HW filter on device bond37
[  167.704452][T11457] bond0: (slave bond37): Enslaving as an active interface with an up link
[  167.822543][T11471] netlink: 'syz.1.1773': attribute type 1 has an invalid length.
[  167.915124][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1774'.
[  168.074190][T11483] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  168.183745][T11486] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073006284800)
[  168.187273][T11486] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  168.418241][T11506] netlink: 'syz.0.1785': attribute type 1 has an invalid length.
[  168.458524][T11506] 8021q: adding VLAN 0 to HW filter on device bond46
[  168.483300][T11506] bond46: (slave bridge28): making interface the new active one
[  168.488093][T11506] bond46: (slave bridge28): Enslaving as an active interface with an up link
[  168.511693][T11506] bond46: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  168.768623][T11521] TCP: TCP_TX_DELAY enabled
[  168.977775][T11531] netlink: 'syz.0.1795': attribute type 1 has an invalid length.
[  169.006986][T11531] 8021q: adding VLAN 0 to HW filter on device bond47
[  169.032456][T11531] bond47: (slave bridge29): making interface the new active one
[  169.037785][T11531] bond47: (slave bridge29): Enslaving as an active interface with an up link
[  169.054599][T11531] bond47: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  170.020784][T11567] tipc: Resetting bearer <eth:vlan0>
[  170.029811][T11567] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  170.266773][T11590] netlink: 'syz.1.1813': attribute type 1 has an invalid length.
[  170.269588][T11594] netlink: 'syz.1.1813': attribute type 1 has an invalid length.
[  170.328444][T11600] vlan3: entered allmulticast mode
[  170.434409][T11612] bond26: left promiscuous mode
[  170.439968][T11612] macsec1: left promiscuous mode
[  170.443554][T11613] netlink: 'syz.0.1814': attribute type 1 has an invalid length.
[  170.447986][T11612] wireguard0: left promiscuous mode
[  170.487850][T11613] bond48: (slave vxcan1): The slave device specified does not support setting the MAC address
[  170.492710][T11613] bond48: (slave vxcan1): Error -95 calling set_mac_address
[  171.201749][T11623] netlink: 'syz.0.1819': attribute type 21 has an invalid length.
[  171.257763][T11630] bridge30: entered promiscuous mode
[  171.259536][T11630] bridge30: entered allmulticast mode
[  171.454915][T11654] netlink: 'syz.2.1830': attribute type 29 has an invalid length.
[  171.458884][T11654] netlink: 'syz.2.1830': attribute type 29 has an invalid length.
[  171.470629][T11654] __nla_validate_parse: 16 callbacks suppressed
[  171.470645][T11654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1830'.
[  171.584548][T11661] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1832'.
[  171.620824][T11663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.624933][T11663] syzkaller0: entered promiscuous mode
[  171.627074][T11663] syzkaller0: entered allmulticast mode
[  171.648349][T11663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1833'.
[  171.658728][T11663] tipc: Resetting bearer <eth:syzkaller0>
[  171.665243][T11662] tipc: Resetting bearer <eth:syzkaller0>
[  171.689668][T11662] tipc: Disabling bearer <eth:syzkaller0>
[  171.700848][T11667] gtp1: entered promiscuous mode
[  171.704130][T11667] gtp1: entered allmulticast mode
[  172.188125][T11683] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1839'.
[  172.193996][T11683] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1839'.
[  172.202254][T11683] netlink: 'syz.0.1839': attribute type 5 has an invalid length.
[  172.208965][T11683] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1839'.
[  172.400169][T11703] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1843'.
[  172.410280][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1843'.
[  172.493721][T11710] netlink: 'syz.0.1845': attribute type 2 has an invalid length.
[  172.545688][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'.
[  172.773409][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'.
[  173.220253][T11759] nbd: couldn't find device at index 536870912
[  173.377364][T11773] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  173.478702][T11786] geneve3: entered promiscuous mode
[  173.635090][T11798] netlink: 'syz.2.1873': attribute type 1 has an invalid length.
[  173.639611][T11802] netlink: 'syz.1.1872': attribute type 1 has an invalid length.
[  173.665968][T11798] 8021q: adding VLAN 0 to HW filter on device bond35
[  173.669630][T11801] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551600)
[  173.676819][T11801] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  173.720132][T11798] bond35: (slave bridge22): making interface the new active one
[  173.724419][T11798] bond35: (slave bridge22): Enslaving as an active interface with an up link
[  173.756583][T11798] bond35: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  174.044253][T11833] vlan0: entered promiscuous mode
[  174.703048][T11863] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.891603][T11870] 8021q: adding VLAN 0 to HW filter on device bond49
[  174.895408][T11870] bond0: (slave bond49): Enslaving as an active interface with an up link
[  175.067604][   T33] audit: type=1800 audit(1755559164.433:4): pid=11879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1898" name="memory.events" dev="tmpfs" ino=2767 res=0 errno=0
[  175.473999][T11905] syzkaller0: entered promiscuous mode
[  175.475880][T11905] syzkaller0: entered allmulticast mode
[  175.480036][T11904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.485325][T11903] tipc: Resetting bearer <eth:syzkaller0>
[  175.500789][T11903] tipc: Disabling bearer <eth:syzkaller0>
[  175.576506][T11912] validate_nla: 4 callbacks suppressed
[  175.576520][T11912] netlink: 'syz.2.1911': attribute type 21 has an invalid length.
[  175.679352][T11918] 8021q: adding VLAN 0 to HW filter on device bond38
[  175.687743][T11918] bond0: (slave bond38): Enslaving as an active interface with an up link
[  175.770794][T11925] tap0: tun_chr_ioctl cmd 1074025675
[  175.778123][T11925] tap0: persist disabled
[  176.147061][T11949] lo speed is unknown, defaulting to 1000
[  176.149200][T11949] lo speed is unknown, defaulting to 1000
[  176.154134][T11949] lo speed is unknown, defaulting to 1000
[  176.164297][T11949] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  176.178865][T11949] lo speed is unknown, defaulting to 1000
[  176.192355][T11949] lo speed is unknown, defaulting to 1000
[  176.197018][T11949] lo speed is unknown, defaulting to 1000
[  176.352364][T11955] 8021q: adding VLAN 0 to HW filter on device bond50
[  176.357220][T11955] bond0: (slave bond50): Enslaving as an active interface with an up link
[  176.468036][T11965] netlink: 'syz.0.1926': attribute type 15 has an invalid length.
[  176.496429][ T6842] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.496518][T11965] __nla_validate_parse: 22 callbacks suppressed
[  176.496536][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'.
[  176.499279][ T6842] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.509842][ T6842] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.517122][T11965] netlink: 'syz.0.1926': attribute type 15 has an invalid length.
[  176.517571][ T6842] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.632590][T11971] netlink: 'syz.1.1928': attribute type 1 has an invalid length.
[  176.635748][T11971] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1928'.
[  176.766423][T11983] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1931'.
[  176.769615][T11982] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1931'.
[  176.917468][T11996] netlink: 'syz.2.1935': attribute type 1 has an invalid length.
[  176.987851][T11996] 8021q: adding VLAN 0 to HW filter on device bond36
[  176.997666][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'.
[  177.044346][T11996] bond36: (slave bridge23): making interface the new active one
[  177.048729][T11996] bond36: (slave bridge23): Enslaving as an active interface with an up link
[  177.058902][T12003] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.064417][T12003] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.084280][T11996] bond36: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  177.109604][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1937'.
[  177.128647][T12003] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.132402][T12003] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.209651][T12003] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.215429][T12003] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.226909][T12006] netlink: 'syz.2.1938': attribute type 32 has an invalid length.
[  177.267286][T12003] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.271054][T12003] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.377724][ T5911] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.380685][ T5911] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.410826][T12021] bond37 (unregistering): Released all slaves
[  177.423952][ T5911] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.427852][ T5911] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.437358][ T5911] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.440791][ T5911] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.455184][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.466119][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.519795][T12026] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1945'.
[  177.528127][T12028] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1945'.
[  177.862867][T12056] netlink: 'syz.1.1954': attribute type 7 has an invalid length.
[  177.866586][T12056] netlink: 'syz.1.1954': attribute type 3 has an invalid length.
[  177.869756][T12056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1954'.
[  177.934480][T12063] team0: entered promiscuous mode
[  177.936430][T12063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'.
[  178.056173][T12063] team0 (unregistering): left promiscuous mode
[  178.088602][T12067] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.130359][T12075] netlink: 'syz.1.1960': attribute type 1 has an invalid length.
[  178.174346][T12067] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.273726][T12067] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.284841][T12083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.317564][T12083] syzkaller0: entered promiscuous mode
[  178.320562][T12083] syzkaller0: entered allmulticast mode
[  178.325638][T12083] tipc: Resetting bearer <eth:syzkaller0>
[  178.394188][ T6752] tipc: Resetting bearer <eth:syzkaller0>
[  178.422771][T12067] batman_adv: batadv0: Removing interface: netdevsim0
[  178.427609][T12067] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.438195][T12082] tipc: Resetting bearer <eth:syzkaller0>
[  179.848808][T12082] tipc: Disabling bearer <eth:syzkaller0>
[  179.873422][T12085] lo speed is unknown, defaulting to 1000
[  179.894656][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.940156][T12091] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  179.969673][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.978230][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.981152][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.990101][T12068] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.033130][T12094] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4023994438/4023994440
[  180.037135][T12094] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4023994438/4023994440
[  180.071236][T12068] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.138265][T12068] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.209841][T12068] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.188447][ T9349] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  181.207890][ T9349] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  181.224510][ T9349] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  181.240582][ T9349] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  181.619227][T12162] __nla_validate_parse: 7 callbacks suppressed
[  181.619239][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'.
[  181.675506][T12169] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1986'.
[  181.718116][T12171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.723564][T12171] syzkaller0: entered promiscuous mode
[  181.725841][T12171] syzkaller0: entered allmulticast mode
[  181.850644][T12171] tipc: Resetting bearer <eth:syzkaller0>
[  181.858089][T12170] tipc: Resetting bearer <eth:syzkaller0>
[  181.879947][T12170] tipc: Disabling bearer <eth:syzkaller0>
[  181.958339][T12185] gtp0: entered promiscuous mode
[  181.960160][T12185] gtp0: entered allmulticast mode
[  182.012678][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'.
[  182.095422][T12196] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  182.226168][T12211] netlink: 'syz.0.1999': attribute type 1 has an invalid length.
[  182.228831][T12211] netlink: 'syz.0.1999': attribute type 2 has an invalid length.
[  182.234070][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'.
[  182.514617][T12223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2004'.
[  183.013412][T12241] netlink: 'syz.0.2008': attribute type 1 has an invalid length.
[  183.036837][T12241] 8021q: adding VLAN 0 to HW filter on device bond51
[  183.058402][T12241] bond51: (slave bridge31): making interface the new active one
[  183.063083][T12241] bond51: (slave bridge31): Enslaving as an active interface with an up link
[  183.077736][T12241] bond51: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  183.100948][T12248] IPv6: addrconf: prefix option has invalid lifetime
[  183.253032][T12259] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2015'.
[  183.355379][T12263] lo speed is unknown, defaulting to 1000
[  183.365443][T12263] lo speed is unknown, defaulting to 1000
[  183.368733][T12263] lo speed is unknown, defaulting to 1000
[  183.385052][T12263] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  183.429087][T12263] lo speed is unknown, defaulting to 1000
[  183.438627][T12263] lo speed is unknown, defaulting to 1000
[  183.444486][T12263] lo speed is unknown, defaulting to 1000
[  183.470985][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'.
[  183.491772][T12268] team1: entered promiscuous mode
[  183.493635][T12268] team1: entered allmulticast mode
[  183.496032][T12268] 8021q: adding VLAN 0 to HW filter on device team1
[  183.620626][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'.
[  183.630606][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'.
[  183.690007][T12292] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  183.827124][T12306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2031'.
[  183.873973][T12306] netlink: 'syz.1.2031': attribute type 15 has an invalid length.
[  183.877256][T12306] netlink: 'syz.1.2031': attribute type 15 has an invalid length.
[  183.979310][T12315] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  183.979435][T12314] IPVS: stopping backup sync thread 12315 ...
[  184.014342][T12312] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  184.070842][T12319] netlink: 'syz.2.2035': attribute type 23 has an invalid length.
[  184.126856][T12324] netlink: 'syz.0.2037': attribute type 4 has an invalid length.
[  184.162362][T12324] : entered promiscuous mode
[  184.528779][T12364] geneve0: entered promiscuous mode
[  184.671966][T12373] netlink: 'syz.2.2054': attribute type 1 has an invalid length.
[  184.675556][T12376] netlink: 'syz.2.2054': attribute type 1 has an invalid length.
[  184.815804][   T33] audit: type=1800 audit(1755559174.183:5): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2059" name="memory.events" dev="tmpfs" ino=3806 res=0 errno=0
[  184.856551][T12395] netlink: 'syz.2.2060': attribute type 15 has an invalid length.
[  184.910623][T12399] netlink: 'syz.1.2062': attribute type 11 has an invalid length.
[  185.796185][T12432] geneve4: entered promiscuous mode
[  185.798033][T12432] geneve4: entered allmulticast mode
[  185.800925][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  185.804868][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  185.807679][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  185.810609][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  185.986386][T12449] tipc: Enabling of bearer <et:g> rejected, media not registered
[  185.989888][T12450] tipc: Enabling of bearer <et:g> rejected, media not registered
[  186.578270][T12486] 8021q: adding VLAN 0 to HW filter on device bond52
[  186.582939][T12486] bond0: (slave bond52): Enslaving as an active interface with an up link
[  186.780454][T12503] __nla_validate_parse: 50 callbacks suppressed
[  186.780465][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2095'.
[  187.019791][T12514] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2098'.
[  187.458122][T12528] validate_nla: 5 callbacks suppressed
[  187.458138][T12528] netlink: 'syz.0.2102': attribute type 1 has an invalid length.
[  187.483786][T12528] 8021q: adding VLAN 0 to HW filter on device bond53
[  187.503742][T12528] bond53: (slave bridge32): making interface the new active one
[  187.508045][T12528] bond53: (slave bridge32): Enslaving as an active interface with an up link
[  187.524037][T12528] bond53: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  187.780659][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2106'.
[  187.796435][T12534] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  187.799146][T12534] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  187.990730][T12558] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  187.995003][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'.
[  187.999221][T12558] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2111'.
[  188.057384][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'.
[  188.061075][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2113'.
[  188.107046][T12564] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2115'.
[  188.119091][T12566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2116'.
[  188.145637][T12566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.187256][T12568] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.367038][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2124'.
[  188.370723][T12585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.484513][T12590] lo speed is unknown, defaulting to 1000
[  188.493476][T12590] lo speed is unknown, defaulting to 1000
[  188.496695][T12590] lo speed is unknown, defaulting to 1000
[  188.539798][T12592] erspan0: left allmulticast mode
[  188.567170][T12592] syz_tun: left promiscuous mode
[  188.592448][T12592] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.595831][T12592] team0: left promiscuous mode
[  188.598505][T12592] 8021q: adding VLAN 0 to HW filter on device team0
[  188.612411][T12592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.618511][T11353] lo speed is unknown, defaulting to 1000
[  188.621243][T11353] syz1: Port: 1 Link ACTIVE
[  188.743533][T12590] infiniband syz0: set active
[  188.746671][T11353] lo speed is unknown, defaulting to 1000
[  188.749075][T11353] syz0: Port: 1 Link ACTIVE
[  188.750803][T12590] infiniband syz0: added lo
[  188.794549][T12590] RDS/IB: syz0: added
[  188.802001][T12590] smc: adding ib device syz0 with port count 1
[  188.805602][T12590] smc:    ib device syz0 port 1 has pnetid 
[  188.810302][T11353] lo speed is unknown, defaulting to 1000
[  188.817280][T12590] lo speed is unknown, defaulting to 1000
[  188.994333][T12590] lo speed is unknown, defaulting to 1000
[  189.109848][T12590] lo speed is unknown, defaulting to 1000
[  189.368082][T12600] lo speed is unknown, defaulting to 1000
[  189.373936][T12600] lo speed is unknown, defaulting to 1000
[  189.604195][T12614] netlink: 'syz.0.2132': attribute type 2 has an invalid length.
[  189.614742][T12617] netlink: 'syz.1.2131': attribute type 4 has an invalid length.
[  189.619770][T12612] netlink: 'syz.1.2131': attribute type 4 has an invalid length.
[  189.677655][T12612] syzkaller1: entered allmulticast mode
[  189.928858][T12627] IPv6: addrconf: prefix option has invalid lifetime
[  190.087560][T12636] netlink: 'syz.0.2141': attribute type 10 has an invalid length.
[  190.106741][T12636] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.120298][T12636] team0: Port device bond0 added
[  190.414605][T12653] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  190.514673][T12657] 8021q: adding VLAN 0 to HW filter on device bond54
[  190.521043][T12657] bond0: (slave bond54): Enslaving as an active interface with an up link
[  190.900576][T12678] IPv6: addrconf: prefix option has invalid lifetime
[  190.927267][T12680] unsupported nlmsg_type 40
[  190.935526][T12682] netlink: 'syz.0.2156': attribute type 29 has an invalid length.
[  190.954422][ T5234] Bluetooth: hci1: command 0x0406 tx timeout
[  191.074267][ T5909] lo speed is unknown, defaulting to 1000
[  191.079688][ T5909] syz0: Port: 1 Link DOWN
[  191.082602][ T5909] lo speed is unknown, defaulting to 1000
[  191.124977][T12690] syzkaller1: entered promiscuous mode
[  191.126878][T12690] syzkaller1: entered allmulticast mode
[  191.734929][T12695] lo speed is unknown, defaulting to 1000
[  191.738509][T12695] lo speed is unknown, defaulting to 1000
[  191.889855][T12702] __nla_validate_parse: 69 callbacks suppressed
[  191.889874][T12702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'.
[  191.980573][T12705] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2161'.
[  192.163318][T12707] netlink: 'syz.1.2162': attribute type 9 has an invalid length.
[  192.166514][T12707] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.2162'.
[  192.696838][T12737] 8021q: adding VLAN 0 to HW filter on device bond56
[  192.701084][T12737] bond0: (slave bond56): Enslaving as an active interface with an up link
[  192.747158][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2172'.
[  192.757517][T12740] batman_adv: batadv0: Adding interface: ipvlan5
[  192.759612][T12740] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.769441][T12740] batman_adv: batadv0: Not using interface ipvlan5 (retrying later): interface not active
[  192.777618][T12740] 8021q: VLANs not supported on syzkaller1
[  192.859015][T12742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2173'.
[  192.864878][T12742] dummy0: entered promiscuous mode
[  192.867485][T12743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2173'.
[  193.025046][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2179'.
[  193.028050][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2179'.
[  193.077014][T12772] netlink: 'syz.0.2181': attribute type 1 has an invalid length.
[  193.079723][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'.
[  193.094016][T12772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.167715][T12780] netlink: 'syz.1.2183': attribute type 1 has an invalid length.
[  193.188079][T12780] 8021q: adding VLAN 0 to HW filter on device bond39
[  193.209901][T12780] bond39: (slave bridge19): making interface the new active one
[  193.213776][T12780] bond39: (slave bridge19): Enslaving as an active interface with an up link
[  193.232044][T12780] bond39: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  193.459060][T12792] pim6reg1: entered promiscuous mode
[  193.461805][T12792] pim6reg1: entered allmulticast mode
[  193.575064][T12799] netlink: 'syz.2.2189': attribute type 14 has an invalid length.
[  193.578791][T12799] netlink: 'syz.2.2189': attribute type 14 has an invalid length.
[  193.713055][T12812] netlink: 'syz.2.2193': attribute type 1 has an invalid length.
[  193.714231][T12811] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2192'.
[  193.737384][T12812] 8021q: adding VLAN 0 to HW filter on device bond37
[  193.764106][T12812] bond37: (slave bridge25): making interface the new active one
[  193.767365][T12812] bond37: (slave bridge25): Enslaving as an active interface with an up link
[  193.798537][T12812] bond37: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  193.882339][T12819] netlink: 'syz.0.2195': attribute type 1 has an invalid length.
[  193.971340][T12822] lo speed is unknown, defaulting to 1000
[  193.975535][T12822] lo speed is unknown, defaulting to 1000
[  194.397291][T12844] netlink: 'syz.0.2201': attribute type 21 has an invalid length.
[  194.491067][T12848] netlink: 'syz.0.2202': attribute type 1 has an invalid length.
[  194.524207][T12848] 8021q: adding VLAN 0 to HW filter on device bond57
[  194.569249][T12848] bond57: (slave bridge34): making interface the new active one
[  194.573292][T12848] bond57: (slave bridge34): Enslaving as an active interface with an up link
[  194.589058][T12848] bond57: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  194.619306][T12853] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  195.093248][T12896] 8021q: adding VLAN 0 to HW filter on device bond58
[  195.098692][T12896] bond0: (slave bond58): Enslaving as an active interface with an up link
[  195.608805][T12930] 8021q: adding VLAN 0 to HW filter on device bond40
[  195.613221][T12930] bond0: (slave bond40): Enslaving as an active interface with an up link
[  196.015126][T12982] netlink: 'syz.2.2242': attribute type 13 has an invalid length.
[  196.017806][T12981] netlink: 'syz.2.2242': attribute type 13 has an invalid length.
[  196.243025][T12982] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  196.319056][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.331870][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.339484][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.352993][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.397042][T13010] 8021q: adding VLAN 0 to HW filter on device bond59
[  196.567651][T13026] 8021q: adding VLAN 0 to HW filter on device bond60
[  196.574869][T13026] bond0: (slave bond60): Enslaving as an active interface with an up link
[  196.929455][T13055] __nla_validate_parse: 11 callbacks suppressed
[  196.929469][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'.
[  196.976211][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'.
[  196.984885][T13056] delete_channel: no stack
[  197.112097][T13071] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  197.115704][T13071] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  197.195576][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'.
[  197.327350][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'.
[  197.576280][T13124] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  197.588465][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2284'.
[  197.597272][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2284'.
[  197.775213][T13140] rdma_rxe: rxe_newlink: failed to add macvlan1
[  198.085900][T13164] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2296'.
[  198.103820][T13164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2296'.
[  198.200286][T13181] macsec2: entered promiscuous mode
[  198.207628][T13181] veth0_to_bridge: entered promiscuous mode
[  198.209703][T13181] macsec2: entered allmulticast mode
[  198.211881][T13181] veth0_to_bridge: entered allmulticast mode
[  198.234094][T13181] veth0_to_bridge: left allmulticast mode
[  198.236068][T13181] veth0_to_bridge: left promiscuous mode
[  198.430669][T13193] validate_nla: 4 callbacks suppressed
[  198.430687][T13193] netlink: 'syz.0.2301': attribute type 1 has an invalid length.
[  198.458784][T13193] bond61: (slave gretap3): making interface the new active one
[  198.462638][T13193] bond61: (slave gretap3): Enslaving as an active interface with an up link
[  198.696191][T13225] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  198.878887][T13240] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  198.995246][T13249] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2316'.
[  198.998596][T13249] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2316'.
[  199.216863][T13261] 8021q: adding VLAN 0 to HW filter on device bond41
[  199.220680][T13261] bond0: (slave bond41): Enslaving as an active interface with an up link
[  199.304217][T13270] netlink: 'syz.1.2324': attribute type 1 has an invalid length.
[  199.329724][T13270] 8021q: adding VLAN 0 to HW filter on device bond42
[  199.351818][T13270] bond42: (slave bridge20): making interface the new active one
[  199.356048][T13270] bond42: (slave bridge20): Enslaving as an active interface with an up link
[  199.378058][T13270] bond42: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  201.079643][T13336] netlink: 'syz.2.2346': attribute type 1 has an invalid length.
[  201.107373][T13336] 8021q: adding VLAN 0 to HW filter on device bond38
[  201.124907][T13336] bond38: (slave bridge26): making interface the new active one
[  201.129354][T13336] bond38: (slave bridge26): Enslaving as an active interface with an up link
[  201.145616][T13336] bond38: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  201.195026][T13339] netlink: 'syz.0.2347': attribute type 12 has an invalid length.
[  201.257295][T13341] netlink: 'syz.0.2348': attribute type 1 has an invalid length.
[  201.442287][T13356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.445273][T13356] syzkaller0: entered promiscuous mode
[  201.447321][T13356] syzkaller0: entered allmulticast mode
[  201.454523][T13353] tipc: Resetting bearer <eth:syzkaller0>
[  201.456253][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.460299][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.477782][T13353] tipc: Disabling bearer <eth:syzkaller0>
[  201.636114][T13372] sch_tbf: burst 6 is lower than device bridge_slave_0 mtu (1514) !
[  201.697522][T13375] openvswitch: netlink: Message has 20 unknown bytes.
[  201.700331][T13375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.715738][T13374] batadv1: entered promiscuous mode
[  201.717911][T13374] batadv1: entered allmulticast mode
[  202.145623][T13414] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  202.173993][T13403] __nla_validate_parse: 14 callbacks suppressed
[  202.174004][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'.
[  202.179093][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'.
[  202.186834][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'.
[  202.191218][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'.
[  202.195924][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'.
[  202.199276][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'.
[  202.203569][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'.
[  202.206770][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'.
[  202.209861][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'.
[  202.216341][T13403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'.
[  202.429727][T13437] syzkaller0: entered promiscuous mode
[  202.432839][T13437] syzkaller0: entered allmulticast mode
[  204.188360][T13476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.192039][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.195006][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.197913][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.205701][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.208943][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.212836][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.216725][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.220351][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.233638][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.237474][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.241025][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.248598][T13477] syzkaller0: MTU too low for tipc bearer
[  204.250791][T13477] tipc: Disabling bearer <eth:syzkaller0>
[  204.254504][T13476] syzkaller0: MTU too low for tipc bearer
[  204.256900][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.260804][T13476] syzkaller0: MTU too low for tipc bearer
[  204.266449][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.271812][T13476] syzkaller0: MTU too low for tipc bearer
[  204.274118][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.277574][T13476] syzkaller0: MTU too low for tipc bearer
[  204.283200][T13476] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  204.301316][T13486] lo speed is unknown, defaulting to 1000
[  204.308281][T13486] lo speed is unknown, defaulting to 1000
[  204.686526][T13506] netlink: 'syz.2.2381': attribute type 13 has an invalid length.
[  205.055274][T13522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.058547][T13522] syzkaller0: entered promiscuous mode
[  205.060349][T13522] syzkaller0: entered allmulticast mode
[  205.105913][T13522] tipc: Resetting bearer <eth:syzkaller0>
[  205.110928][T13519] tipc: Resetting bearer <eth:syzkaller0>
[  205.191266][T13519] tipc: Disabling bearer <eth:syzkaller0>
[  205.580652][T13546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.639093][T13548] netlink: 'syz.0.2392': attribute type 1 has an invalid length.
[  205.642704][T13548] netlink: 'syz.0.2392': attribute type 1 has an invalid length.
[  205.685742][T13546] syzkaller0: entered promiscuous mode
[  205.688376][T13546] syzkaller0: entered allmulticast mode
[  205.692378][T13546] tipc: Resetting bearer <eth:syzkaller0>
[  205.759162][T13545] tipc: Resetting bearer <eth:syzkaller0>
[  206.701643][ T5848] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  207.405706][T13545] tipc: Disabling bearer <eth:syzkaller0>
[  207.573028][T13575] netlink: 'syz.1.2400': attribute type 1 has an invalid length.
[  207.644328][T13575] 8021q: adding VLAN 0 to HW filter on device bond43
[  207.654921][T13585] bond43: (slave bridge21): making interface the new active one
[  207.658130][T13585] bond43: (slave bridge21): Enslaving as an active interface with an up link
[  207.670573][T13575] bond43: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  207.781558][T13598] __nla_validate_parse: 29 callbacks suppressed
[  207.781570][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2407'.
[  207.823907][T13605] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  208.043296][T13628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2415'.
[  208.046188][T13628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2415'.
[  208.105490][T13633] netlink: 212404 bytes leftover after parsing attributes in process `syz.0.2417'.
[  208.140887][T13636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2418'.
[  208.195950][T13645] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  208.199156][T13646] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  208.243502][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'.
[  208.269252][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'.
[  208.431733][T13664] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  208.433901][T13667] netlink: 'syz.0.2427': attribute type 1 has an invalid length.
[  208.471716][T13667] 8021q: adding VLAN 0 to HW filter on device bond62
[  208.492981][T13667] bond62: (slave bridge35): making interface the new active one
[  208.497062][T13667] bond62: (slave bridge35): Enslaving as an active interface with an up link
[  208.509927][T13667] bond62: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  209.084523][T13710] lo speed is unknown, defaulting to 1000
[  209.087366][T13710] lo speed is unknown, defaulting to 1000
[  209.216007][T13724] netlink: 'syz.0.2441': attribute type 1 has an invalid length.
[  209.236100][T13724] 8021q: adding VLAN 0 to HW filter on device bond63
[  209.256803][T13724] bond63: (slave bridge36): making interface the new active one
[  209.260175][T13724] bond63: (slave bridge36): Enslaving as an active interface with an up link
[  209.278365][T13724] bond63: (slave vlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  209.439959][T13734] sctp: [Deprecated]: syz.1.2443 (pid 13734) Use of int in max_burst socket option.
[  209.439959][T13734] Use struct sctp_assoc_value instead
[  209.554771][T13747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2447'.
[  209.604713][T13744] bond39 (unregistering): Released all slaves
[  209.609544][T13748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2447'.
[  209.639440][T13749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2447'.
[  209.714625][T13754] netlink: 'syz.0.2450': attribute type 1 has an invalid length.
[  210.076308][T13784] netlink: 'syz.0.2459': attribute type 1 has an invalid length.
[  210.079706][T13784] netlink: 'syz.0.2459': attribute type 2 has an invalid length.
[  210.084704][T13784] netlink: 'syz.0.2459': attribute type 8 has an invalid length.
[  210.117589][T13787] netlink: 'syz.2.2460': attribute type 1 has an invalid length.
[  210.134383][T13787] 8021q: adding VLAN 0 to HW filter on device bond39
[  210.146537][T13787] bond39: (slave bridge27): making interface the new active one
[  210.149768][T13787] bond39: (slave bridge27): Enslaving as an active interface with an up link
[  210.175909][T13787] bond39: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  210.203429][T13790] syzkaller1: entered promiscuous mode
[  210.205234][T13790] syzkaller1: entered allmulticast mode
[  210.650448][T13836] bridge37: entered promiscuous mode
[  210.656578][T13836] bridge37: entered allmulticast mode
[  210.674267][T13836] team0: Port device bridge37 added
[  210.824511][T13847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.830509][T13847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.889644][T13851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.096928][T13857] netlink: zone id is out of range
[  211.098736][T13857] netlink: zone id is out of range
[  211.100363][T13857] netlink: zone id is out of range
[  211.102147][T13857] netlink: zone id is out of range
[  211.104340][T13857] netlink: zone id is out of range
[  211.105983][T13857] netlink: zone id is out of range
[  211.107683][T13857] netlink: zone id is out of range
[  211.675052][T13879] netlink: 'syz.1.2488': attribute type 1 has an invalid length.
[  211.755491][T13886] netlink: 'syz.0.2491': attribute type 1 has an invalid length.
[  211.765902][T13886] netlink: 'syz.0.2491': attribute type 1 has an invalid length.
[  211.815063][T13889] bridge0: port 1(veth0_to_bridge) entered blocking state
[  211.818205][T13889] bridge0: port 1(veth0_to_bridge) entered disabled state
[  211.821290][T13889] veth0_to_bridge: entered allmulticast mode
[  211.826180][T13889] veth0_to_bridge: entered promiscuous mode
[  212.136122][T13911] netlink: 'syz.1.2497': attribute type 1 has an invalid length.
[  212.165725][T13911] 8021q: adding VLAN 0 to HW filter on device bond45
[  212.188365][T13911] bond45: (slave bridge22): making interface the new active one
[  212.197300][T13911] bond45: (slave bridge22): Enslaving as an active interface with an up link
[  212.230177][T13911] bond45: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  212.450522][T13924] bond40 (unregistering): Released all slaves
[  212.962130][T13953] __nla_validate_parse: 22 callbacks suppressed
[  212.962150][T13953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2505'.
[  213.033770][T13957] bond64: entered promiscuous mode
[  213.226810][T13967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'.
[  213.436973][T13979] net_ratelimit: 3 callbacks suppressed
[  213.436991][T13979] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  213.647987][T13986] bond40 (unregistering): Released all slaves
[  213.752830][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'.
[  213.806177][T13997] netlink: 'syz.2.2518': attribute type 29 has an invalid length.
[  213.812113][T13997] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2518'.
[  213.818247][T13997] ==================================================================
[  213.821632][T13997] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  213.824435][T13997] Read of size 4 at addr ffff888032d089c4 by task syz.2.2518/13997
[  213.828303][T13997] 
[  213.829726][T13997] CPU: 0 UID: 0 PID: 13997 Comm: syz.2.2518 Not tainted syzkaller #0 PREEMPT(full) 
[  213.829747][T13997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.829759][T13997] Call Trace:
[  213.829766][T13997]  <TASK>
[  213.829823][T13997]  dump_stack_lvl+0x189/0x250
[  213.829847][T13997]  ? __kasan_check_byte+0x12/0x40
[  213.829872][T13997]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.829890][T13997]  ? lock_release+0x4b/0x3e0
[  213.829914][T13997]  ? __virt_addr_valid+0x4a5/0x5c0
[  213.829934][T13997]  print_report+0xca/0x240
[  213.829948][T13997]  ? xfrm_alloc_spi+0x570/0xf30
[  213.829964][T13997]  kasan_report+0x118/0x150
[  213.829986][T13997]  ? xfrm_alloc_spi+0x570/0xf30
[  213.830005][T13997]  xfrm_alloc_spi+0x570/0xf30
[  213.830021][T13997]  ? xfrm_alloc_spi+0x2a0/0xf30
[  213.830049][T13997]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  213.830066][T13997]  ? xfrm_find_acq+0x87/0xa0
[  213.830084][T13997]  xfrm_alloc_userspi+0x70b/0xc90
[  213.830106][T13997]  ? apparmor_capable+0x137/0x1b0
[  213.830130][T13997]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  213.830150][T13997]  ? __nla_parse+0x40/0x60
[  213.830172][T13997]  xfrm_user_rcv_msg+0x7a3/0xab0
[  213.830190][T13997]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  213.830219][T13997]  ? __pfx___mutex_trylock_common+0x10/0x10
[  213.830236][T13997]  ? rcu_is_watching+0x15/0xb0
[  213.830251][T13997]  ? trace_contention_end+0x39/0x120
[  213.830267][T13997]  ? __mutex_lock+0x335/0x1360
[  213.830290][T13997]  netlink_rcv_skb+0x208/0x470
[  213.830311][T13997]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  213.830326][T13997]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  213.830347][T13997]  ? netlink_deliver_tap+0x2e/0x1b0
[  213.830364][T13997]  ? netlink_deliver_tap+0x2e/0x1b0
[  213.830381][T13997]  xfrm_netlink_rcv+0x79/0x90
[  213.830396][T13997]  netlink_unicast+0x82f/0x9e0
[  213.830415][T13997]  ? __pfx_netlink_unicast+0x10/0x10
[  213.830433][T13997]  ? netlink_sendmsg+0x642/0xb30
[  213.830452][T13997]  ? skb_put+0x11b/0x210
[  213.830466][T13997]  netlink_sendmsg+0x805/0xb30
[  213.830489][T13997]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.830512][T13997]  ? aa_sock_msg_perm+0xf1/0x1d0
[  213.830533][T13997]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  213.830549][T13997]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.830569][T13997]  __sock_sendmsg+0x21c/0x270
[  213.830589][T13997]  ____sys_sendmsg+0x505/0x830
[  213.830605][T13997]  ? __pfx_____sys_sendmsg+0x10/0x10
[  213.830622][T13997]  ? import_iovec+0x74/0xa0
[  213.830639][T13997]  ___sys_sendmsg+0x21f/0x2a0
[  213.830654][T13997]  ? __pfx____sys_sendmsg+0x10/0x10
[  213.830681][T13997]  ? __fget_files+0x2a/0x420
[  213.830702][T13997]  ? __fget_files+0x3a0/0x420
[  213.830727][T13997]  __x64_sys_sendmsg+0x19b/0x260
[  213.830742][T13997]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  213.830760][T13997]  ? rcu_is_watching+0x15/0xb0
[  213.830775][T13997]  ? do_syscall_64+0xbe/0x3b0
[  213.830828][T13997]  do_syscall_64+0xfa/0x3b0
[  213.830849][T13997]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.830870][T13997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.830884][T13997]  ? exc_page_fault+0x9f/0xf0
[  213.830905][T13997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.830918][T13997] RIP: 0033:0x7f6bbed8ebe9
[  213.830933][T13997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.830946][T13997] RSP: 002b:00007f6bbfccc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.830963][T13997] RAX: ffffffffffffffda RBX: 00007f6bbefb5fa0 RCX: 00007f6bbed8ebe9
[  213.830975][T13997] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000005
[  213.830986][T13997] RBP: 00007f6bbee11e19 R08: 0000000000000000 R09: 0000000000000000
[  213.830996][T13997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  213.831005][T13997] R13: 00007f6bbefb6038 R14: 00007f6bbefb5fa0 R15: 00007ffebe0d2148
[  213.831024][T13997]  </TASK>
[  213.831030][T13997] 
[  213.977610][T13997] The buggy address belongs to the physical page:
[  213.980178][T13997] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032d0bc00 pfn:0x32d08
[  213.984092][T13997] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  213.986885][T13997] raw: 00fff00000000000 ffffea0000cb4248 ffffea0000cf79c8 0000000000000000
[  213.990309][T13997] raw: ffff888032d0bc00 0000000000000000 00000000ffffffff 0000000000000000
[  213.993628][T13997] page dumped because: kasan: bad access detected
[  213.996155][T13997] page_owner tracks the page as freed
[  213.998291][T13997] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13330, tgid 13329 (syz.1.2345), ts 201016161243, free_ts 205021825354
[  214.006662][T13997]  post_alloc_hook+0x240/0x2a0
[  214.008577][T13997]  get_page_from_freelist+0x21e4/0x22c0
[  214.010835][T13997]  __alloc_frozen_pages_noprof+0x181/0x370
[  214.013155][T13997]  alloc_pages_mpol+0x232/0x4a0
[  214.015117][T13997]  allocate_slab+0x8a/0x370
[  214.016912][T13997]  ___slab_alloc+0xbeb/0x1410
[  214.018807][T13997]  __kmalloc_cache_noprof+0x296/0x3d0
[  214.020948][T13997]  __genradix_ptr_alloc+0x352/0x4a0
[  214.023040][T13997]  __genradix_prealloc+0x44/0x90
[  214.025051][T13997]  sctp_stream_init+0x14b/0x440
[  214.027012][T13997]  sctp_association_new+0x10dd/0x25f0
[  214.029203][T13997]  sctp_connect_new_asoc+0x2c5/0x690
[  214.031337][T13997]  __sctp_connect+0x5ba/0xd50
[  214.033212][T13997]  sctp_getsockopt_connectx3+0x2c4/0x440
[  214.035438][T13997]  sctp_getsockopt+0x98a/0xb60
[  214.037373][T13997]  do_sock_getsockopt+0x372/0x450
[  214.039444][T13997] page last free pid 5849 tgid 5849 stack trace:
[  214.041969][T13997]  __free_frozen_pages+0xbc4/0xd30
[  214.044011][T13997]  __put_partials+0x156/0x1a0
[  214.045897][T13997]  put_cpu_partial+0x17c/0x250
[  214.047830][T13997]  __slab_free+0x2d5/0x3c0
[  214.049632][T13997]  qlist_free_all+0x97/0x140
[  214.051528][T13997]  kasan_quarantine_reduce+0x148/0x160
[  214.053708][T13997]  __kasan_slab_alloc+0x22/0x80
[  214.055679][T13997]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  214.058152][T13997]  shmem_alloc_inode+0x28/0x40
[  214.059673][T13997]  alloc_inode+0x6a/0x1b0
[  214.061040][T13997]  new_inode+0x22/0x170
[  214.062338][T13997]  shmem_get_inode+0x346/0xe90
[  214.063856][T13997]  shmem_mknod+0x18c/0x3e0
[  214.065240][T13997]  shmem_mkdir+0x33/0x70
[  214.066552][T13997]  vfs_mkdir+0x306/0x510
[  214.067948][T13997]  do_mkdirat+0x247/0x590
[  214.069471][T13997] 
[  214.070230][T13997] Memory state around the buggy address:
[  214.071975][T13997]  ffff888032d08880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  214.074568][T13997]  ffff888032d08900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  214.077309][T13997] >ffff888032d08980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  214.079811][T13997]                                            ^
[  214.081685][T13997]  ffff888032d08a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  214.084512][T13997]  ffff888032d08a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  214.087452][T13997] ==================================================================
[  214.090355][T13997] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  214.092927][T13997] CPU: 0 UID: 0 PID: 13997 Comm: syz.2.2518 Not tainted syzkaller #0 PREEMPT(full) 
[  214.096078][T13997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.099278][T13997] Call Trace:
[  214.100521][T13997]  <TASK>
[  214.101487][T13997]  dump_stack_lvl+0x99/0x250
[  214.102977][T13997]  ? __asan_memcpy+0x40/0x70
[  214.104483][T13997]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.106204][T13997]  ? __pfx__printk+0x10/0x10
[  214.107714][T13997]  vpanic+0x281/0x750
[  214.109034][T13997]  ? __pfx_vpanic+0x10/0x10
[  214.110571][T13997]  ? irqentry_exit+0x74/0x90
[  214.112071][T13997]  panic+0xb9/0xc0
[  214.113289][T13997]  ? __pfx_panic+0x10/0x10
[  214.114800][T13997]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  214.116710][T13997]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  214.118699][T13997]  ? xfrm_alloc_spi+0x570/0xf30
[  214.120510][T13997]  check_panic_on_warn+0x89/0xb0
[  214.122087][T13997]  ? xfrm_alloc_spi+0x570/0xf30
[  214.123649][T13997]  end_report+0x78/0x160
[  214.125110][T13997]  kasan_report+0x129/0x150
[  214.126735][T13997]  ? xfrm_alloc_spi+0x570/0xf30
[  214.128600][T13997]  xfrm_alloc_spi+0x570/0xf30
[  214.130451][T13997]  ? xfrm_alloc_spi+0x2a0/0xf30
[  214.132195][T13997]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  214.133873][T13997]  ? xfrm_find_acq+0x87/0xa0
[  214.135406][T13997]  xfrm_alloc_userspi+0x70b/0xc90
[  214.137237][T13997]  ? apparmor_capable+0x137/0x1b0
[  214.138897][T13997]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  214.140735][T13997]  ? __nla_parse+0x40/0x60
[  214.142224][T13997]  xfrm_user_rcv_msg+0x7a3/0xab0
[  214.143872][T13997]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  214.145666][T13997]  ? __pfx___mutex_trylock_common+0x10/0x10
[  214.147709][T13997]  ? rcu_is_watching+0x15/0xb0
[  214.149364][T13997]  ? trace_contention_end+0x39/0x120
[  214.151486][T13997]  ? __mutex_lock+0x335/0x1360
[  214.153267][T13997]  netlink_rcv_skb+0x208/0x470
[  214.154914][T13997]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  214.156637][T13997]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  214.158640][T13997]  ? netlink_deliver_tap+0x2e/0x1b0
[  214.160614][T13997]  ? netlink_deliver_tap+0x2e/0x1b0
[  214.162636][T13997]  xfrm_netlink_rcv+0x79/0x90
[  214.164312][T13997]  netlink_unicast+0x82f/0x9e0
[  214.165877][T13997]  ? __pfx_netlink_unicast+0x10/0x10
[  214.167546][T13997]  ? netlink_sendmsg+0x642/0xb30
[  214.169237][T13997]  ? skb_put+0x11b/0x210
[  214.170916][T13997]  netlink_sendmsg+0x805/0xb30
[  214.172602][T13997]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.174296][T13997]  ? aa_sock_msg_perm+0xf1/0x1d0
[  214.175926][T13997]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  214.177593][T13997]  ? __pfx_netlink_sendmsg+0x10/0x10
[  214.179327][T13997]  __sock_sendmsg+0x21c/0x270
[  214.181078][T13997]  ____sys_sendmsg+0x505/0x830
[  214.182677][T13997]  ? __pfx_____sys_sendmsg+0x10/0x10
[  214.184406][T13997]  ? import_iovec+0x74/0xa0
[  214.185872][T13997]  ___sys_sendmsg+0x21f/0x2a0
[  214.187403][T13997]  ? __pfx____sys_sendmsg+0x10/0x10
[  214.189190][T13997]  ? __fget_files+0x2a/0x420
[  214.191091][T13997]  ? __fget_files+0x3a0/0x420
[  214.192703][T13997]  __x64_sys_sendmsg+0x19b/0x260
[  214.194264][T13997]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  214.195957][T13997]  ? rcu_is_watching+0x15/0xb0
[  214.197451][T13997]  ? do_syscall_64+0xbe/0x3b0
[  214.198939][T13997]  do_syscall_64+0xfa/0x3b0
[  214.200401][T13997]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.201961][T13997]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.203820][T13997]  ? exc_page_fault+0x9f/0xf0
[  214.205267][T13997]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.207100][T13997] RIP: 0033:0x7f6bbed8ebe9
[  214.208537][T13997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.214943][T13997] RSP: 002b:00007f6bbfccc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.217477][T13997] RAX: ffffffffffffffda RBX: 00007f6bbefb5fa0 RCX: 00007f6bbed8ebe9
[  214.219983][T13997] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000005
[  214.222360][T13997] RBP: 00007f6bbee11e19 R08: 0000000000000000 R09: 0000000000000000
[  214.224730][T13997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.227167][T13997] R13: 00007f6bbefb6038 R14: 00007f6bbefb5fa0 R15: 00007ffebe0d2148
[  214.229806][T13997]  </TASK>
[  214.231483][T13997] Kernel Offset: disabled
[  214.232944][T13997] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:20:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015d6 RDI=00000000000015d7 RBP=00000000000003f8 RSP=ffffc90006bd69f0
R8 =ffff888021448237 R9 =1ffff11004289046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af990f R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6bbfccc6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000004140 CR3=000000003f3b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dffffc0000000000 RBX=ffffc90006aa7ca8 RCX=ffff88802aa83980 RDX=0000000000000000
RSI=0000000000000004 RDI=ffffc90006aa79c0 RBP=ffffc90006aa7b18 RSP=ffffc90006aa7a40
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000d54f38
R12=ffff8880312f30a0 R13=ffff8880312f30a0 R14=ffff88811242de39 R15=1ffff1100625e614
RIP=ffffffff86fda259 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555569304500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2bfb8d CR3=0000000112b52000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=b2976179ca54f9de beffa91246afc2bc XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=57d74c44552cb079 067e0fe4a54aeb54
XMM06=adb2976179ca54f9 debeffa91246afc2 XMM07=bcb1398475b6235a e08043850fd23fab
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f3883812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
