last executing test programs:

639.979887ms ago: executing program 1 (id=1311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="30000000100001080000000015d6000000000000", @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)

526.326654ms ago: executing program 1 (id=1316):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2ae350066cbc9ad95c767b53982b9a5c0000000206050800000000000000000000000005000400000000000900020073797a300000000014000780065d966275f708003040000000000000064000050000050005000000000005000100060000000d000300400000683a6d6163"], 0x5c}}, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}}, 0x20000044)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xceaa279c739714d4}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000009c0)={'team0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf2517000000680001800800030001000000080003000400000014000200766c616e3000000000000000000000001400020076657468305f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="700001c808000140", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f30000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d300000000000001400020064766d72703000000000000000000000080003000300000008000100", @ANYRES32=r6, @ANYBLOB="08000300010000004000000008000300010000001400020300000070636930000000000000000000080001000000000000000000", @ANYRES32=0x0, @ANYBLOB="08000300010100000800030000000000580001801400020076657468315f746f5f7465616d000000140002006261746164765f736c6176655f3000001400020076657468305f6d61637674617000000008000300000000000800030066383e7308000100", @ANYRES32=0x0, @ANYBLOB="2c0001801400020069705f767469300000000000000000001400020076657468305f746f5f626f6e640000003c00018008000300030000001400020076657468305f746f5f6873720000000008000100", @ANYBLOB="f89c47eb1677c04958a0605fd49be055d88ed5e96765ce6ee018f47021a0", @ANYBLOB="14000200626f6e645f736c6176655f30000000005000018008000100", @ANYBLOB="e686f46d66f47ecfc1d90ff26e8a422ebbf1c276114b42cc73b6686e9691080a1546f833bfd4836d34e1fca63bc49b9cc3ee1fd5fe5c58bbfc97b3f3218f680cafafd0ea12cadaa2f5313ccf681e41da75482196989df827ed1c304a4173fd2690bc5557dc32f528d698ea9fcc94c36d496ea33834ed554e1c57434c231be6e040d46cbd3e81320c8abedf30f62043d7d308c6f0ff789fbf975d28265aeed63f0219a7019d8334e5399d763afa", @ANYBLOB], 0x23c}, 0x1, 0x0, 0x0, 0x4000}, 0x80000)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x7a}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39)
ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f00000000c0)={0x5, 0x1, 0xfff, 0x84, 0x7, 0x0, 0x3, "e758cae9ffed00000000b240000000001900", "39e8000000080000a000e303001f000000000004"})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

523.931632ms ago: executing program 1 (id=1320):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6gretap0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB="0000001600"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000002"], 0x50)

457.371614ms ago: executing program 1 (id=1321):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000002140)={0x54, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x289}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x3, 0x5b2, [0x0, 0x200000000a00, 0x200000000a30, 0x200000000d16], 0x0, &(0x7f0000000080), &(0x7f0000000a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x3, 0x49, 0x88a2, 'veth1_to_bond\x00', 'team_slave_0\x00', 'ip6gretap0\x00', 'rose0\x00', @multicast, [0x0, 0xff, 0x0, 0xff, 0xff, 0x9fdcb147723d9f97], @multicast, [0xff, 0xff, 0xff, 0xff, 0xff], 0xde, 0x286, 0x2b6, [@stp={{'stp\x00', 0x0, 0x48}, {{0x5, {0x9, 0xfff0, 0x5, @local, [0xff, 0x0, 0x0, 0xff], 0x7fffffff, 0xd53d, 0x2, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, [0x0, 0x0, 0x0, 0xff], 0x4e24, 0x4e23, 0x7fe0, 0x6, 0x4, 0x1, 0x8, 0xa72, 0x5, 0xfeff}, 0x80, 0xbe06b930baeb24df}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x6, 0x9, 0x0, 0x0, "59104fe48131d8cc93b9a476f364f731720a088cc1c71c7fa289cc52c31cb9fd784f138c8f2073ea8d66aa8a6959c7c171bcc58834df0190180763148af63c91"}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x9, 0x5, 'system_u:object_r:init_exec_t:s0\x00'}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x11, 0x48, 0x809b, 'ip6gre0\x00', 'batadv0\x00', 'veth1_macvtap\x00', 'vlan0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff], 0x6e, 0xce, 0x106, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@mark={'mark\x00', 0x10, {{0x1ffffffe0, 0xffffffffffffffff}}}}, {0x9, 0x0, 0x2, 'veth0_virt_wifi\x00', 'pimreg0\x00', 'bridge_slave_1\x00', 'pimreg\x00', @local, [], @multicast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xbe, 0x136, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz1\x00', {0x80}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x5, 0xe3, 0x9, 0x0, 0x0, "7f768b280e2e5b0dbebef06ecb977807a593c424a2b8fc78aadbbb1f1210365248651e99b7ba0a2558dea1245022050c80f7b2cc839538d859433fedf527ab09"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x62a)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

456.077013ms ago: executing program 2 (id=1322):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000010000100000000000000006c0100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}}, 0xc050)

360.00272ms ago: executing program 2 (id=1323):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0x2d, 0x4, 0x1, 0x22, 0xb4, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @cipso={0x86, 0x14, 0x1, [{0x0, 0xe, "ce3e920cc0e3903c0af55e21"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x33, 0x0, 0x1}, @lsrr={0x83, 0x1b, 0x22, [@multicast2, @remote, @rand_addr=0x64010102, @empty, @local, @loopback]}, @rr={0x7, 0x27, 0x2f, [@multicast2, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, @broadcast, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x18, 0x68, 0x0, 0x9, [0x80, 0x1, 0x4, 0x8, 0x4ce0]}, @timestamp_addr={0x44, 0xc, 0xa2, 0x1, 0x2, [{@loopback, 0x9}]}]}}}}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f0000000040), 0x2, 0x0)
sendfile(r6, r8, &(0x7f0000000240)=0x6, 0x9)

359.596912ms ago: executing program 0 (id=1324):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f1e6ffffffff000000001320002d2b000300", @ANYRES32=r2, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)

358.907579ms ago: executing program 0 (id=1325):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) (async)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x14) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-twofish-avx)\x00'}, 0x58) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(khazad)\x00'}, 0x58)
r3 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x4c}}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000000314010000000000000000000900020073797a31000000000800410072786500140033006d6163766c616e3100000000000000000900020073797a30410072786500140033006c6f00"/96], 0x60}}, 0x20000000) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async)
bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10)

229.404244ms ago: executing program 2 (id=1326):
r0 = socket(0x25, 0x2, 0x7)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x40000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f00761e99319cd3c3197ccf0840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x9, 0x1, 0x4, 0x3, @multicast1, @local}}}}}}, 0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85, 0x2000000}, 0x3c)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="110000001900010000000000000000001d01"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x8004)

227.10599ms ago: executing program 0 (id=1327):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000900000048000380050008007f000000060007004e2100001400020062617461647630000000020000000000080001"], 0x5c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xe}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0xfffffec3}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

226.763171ms ago: executing program 1 (id=1328):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000075000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016800800", @ANYRES16], 0x38}}, 0x10)

222.195168ms ago: executing program 0 (id=1329):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000100004000000000077b19a0bc58ab66b2538b2db1e36c6ced54e4576f74a30af97cf6af284c8b5402c8232163c5084bd9499a8e713e7d61f2c7472fdd4c6536f1263e018cb0dc10524d9f99638d02c1cf6ed94811637e4df0658adb0ad89843ce7e01bc163a3246567f1ca7aced07ef86299a520498cd84aebb7f39096c8729d1a7ce570f5b5465bdaa06fdbba909581707e3052dfdd", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendto$netrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r6=>0x0})
r7 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x1, 0x3}, 0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="28000000100003042fbd7000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="058c01000750050008001300", @ANYRES32=r7, @ANYBLOB="49bc4e64058c7f3119fe5f734d34917a717c831f1d32f728d8fc18d0300cbe724e8766aae3c834d5458f6ae4a7a850e8366556ca8b6437e1f940b8bc67e899dac833faf2039b71359b5331e8f5072d422bf08abc8d3dfd2978f3661dae46ad55775438cc7b6f3010198d711796713a5a142824ca839564c72d8a32976c0c8ffd19e06e1906ff4a5f6032c27147c3aebd36de477d1a2d62d2739b8bda9be758da0a4e5d1b540076da403b24a37aed286c388b1ae6ce4d4a8cbd765456c966c26c342f868f35839d913108e7fddb42"], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000000806010200000000000000000200000a0500010007000000050001000700000030ddd3ab87c79664a07372a91de2bbc4675ad1dd28cd697925c5c1bbb11ca8f1d51fc5e9c42795a48d61aeeb0b86979840ec94d7284d1214a43abb4cd3cf2c5af4d9824c8c798e203f82a31ac2fc66785d923a1a06b694df3036e6bc23afb46104a64692b62f93b508a4cc2fe72606c701ecea736c14bb7d"], 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x4000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70583aaf6f3ee2eede80000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48)
socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001c00000000000000000000009546000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

178.48769ms ago: executing program 2 (id=1330):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x50}}, 0x80)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x2a48, 0x4)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvfrom$inet(r3, 0x0, 0x0, 0x2043, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="51281c06218c9593a5da06a11d67e2d46ae3260503dc7e49a9"], 0xa)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1], 0x38}}, 0x0)
epoll_create1(0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x50}}, 0x80) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x2a48, 0x4) (async)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast1}, 0x10) (async)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
recvfrom$inet(r3, 0x0, 0x0, 0x2043, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="51281c06218c9593a5da06a11d67e2d46ae3260503dc7e49a9"], 0xa) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1], 0x38}}, 0x0) (async)
epoll_create1(0x0) (async)

178.13531ms ago: executing program 1 (id=1331):
socket(0x21, 0x3, 0xa)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7)
r1 = socket$inet6(0xa, 0x4, 0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x3}]}, {0x0, [0x0, 0x2e, 0x5f]}}, 0x0, 0x2d}, 0x28)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r8, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}, 0x1, 0x0, 0xe000000}, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x1)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

175.706624ms ago: executing program 0 (id=1332):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x48}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48804}, 0x0)
r3 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={<r4=>r2})
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000100), 0x4)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newlink={0x26c, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x990}, [@IFLA_PHYS_PORT_ID={0x4}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x396f}, @IFLA_AF_SPEC={0x204, 0x1a, 0x0, 0x1, [@AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x9}, {0x8, 0x10}, {0x8, 0x15, 0x0, 0x0, 0x1eb88989}, {0x8, 0x11, 0x0, 0x0, 0x4}, {0x8, 0x1, 0x0, 0x0, 0xc}, {0x8, 0x12, 0x0, 0x0, 0x10001}, {0x8, 0x1c, 0x0, 0x0, 0x9}, {0x8, 0xe, 0x0, 0x0, 0x6}, {0x8, 0x10, 0x0, 0x0, 0x1}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x0, 0xd0ad}, {0x8, 0x16, 0x0, 0x0, 0x7}, {0x8, 0x8, 0x0, 0x0, 0x6}, {0x8, 0xf, 0x0, 0x0, 0x3}, {0x8, 0x3, 0x0, 0x0, 0x7}, {0x8, 0xf, 0x0, 0x0, 0x6}, {0x8, 0x18, 0x0, 0x0, 0x75f}]}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x11, 0x0, 0x0, 0x3ff}]}}, @AF_MPLS={0x4}, @AF_INET6={0x34, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}, @AF_INET6={0xe0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'netpci0\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xbc8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x26c}, 0x1, 0x0, 0x0, 0x20008080}, 0x24000001)

67.146954ms ago: executing program 2 (id=1333):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111c300000000008510000002000000850000000000000095000000000000009500b0059d350000f8eb70c3d9330b16491e095815635bf7490c180e3be703966bd8fdc277008531ccb9d9ae8dc9e78d9dc5311486fd1d2bfab99b08b4d46852f103d4ed539d04b034d645e2ea69674b1749efdc6a03ab8d5c3d2a2ed722271db8f4b166d4a579abbfc27974"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff00f14a51a67a00"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="280000003e00010000000800000000000500000004000000ebff00800800108004001080040002009f9849e3a6370d8ecf26d107657fccacb1c20fe6c82622cd6c25f174d1b3c078cfd1951a49bdf1974c174de09cc220349b904db4450b041f37ee3d1d762c0dd53fdfc23c967821490b1ac4883dec9b325561a7134959d673b6c7b77f498255b5a26a397df51a03bd3482ab"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

66.583945ms ago: executing program 2 (id=1334):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
socket(0x2, 0x3, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000bc0)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x3, 0x0, 0x40}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @rand_addr=0x64010100}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x5, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0xa, 0xe803, 0x41424344}, @generic={0x0, 0x8, "d5b019068b91"}]}}, {"41faadff1b33551b630b2cdd265500c959e0016641563fc04d238cc0d6dae34f6a7837f603f26ed0bc4b9682fe390f88e0894aa8bfd331a44b584bde4eace076d62be82f3277d2bf2be2d9a1890fb472fa0c2d55327d70a10fe59e495580a91f0bd9eae8b213b45499e36bb48c3d462ce2cf5ab79b5728e01f1462f1679da06d68ab8ed99e8c1fb90da8913d6b4e9004ba174d4febc9ca27"}}}}}, 0xe6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x50)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x44, &(0x7f0000000140)=0x1, 0x4)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$packet(0x11, 0x3, 0x300)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x18)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000380)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8)
sendmsg$nl_generic(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYRES16=r2, @ANYRES32=r6, @ANYBLOB="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"], 0x858}, 0x1, 0x0, 0x0, 0x80}, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})

0s ago: executing program 0 (id=1335):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x500}, 0x57)
syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "f16d73c0e798"}]}}}}}}}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000002140)={0x54, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x289}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x160, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x3, 0x5b2, [0x0, 0x200000000a00, 0x200000000a30, 0x200000000d16], 0x0, &(0x7f0000000080), &(0x7f0000000a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x3, 0x49, 0x88a2, 'veth1_to_bond\x00', 'team_slave_0\x00', 'ip6gretap0\x00', 'rose0\x00', @multicast, [0x0, 0xff, 0x0, 0xff, 0xff, 0x9fdcb147723d9f97], @multicast, [0xff, 0xff, 0xff, 0xff, 0xff], 0xde, 0x286, 0x2b6, [@stp={{'stp\x00', 0x0, 0x48}, {{0x5, {0x9, 0xfff0, 0x5, @local, [0xff, 0x0, 0x0, 0xff], 0x7fffffff, 0xd53d, 0x2, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, [0x0, 0x0, 0x0, 0xff], 0x4e24, 0x4e23, 0x7fe0, 0x6, 0x4, 0x1, 0x8, 0xa72, 0x5, 0xfeff}, 0x80, 0xbe06b930baeb24df}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x6, 0x9, 0x0, 0x0, "59104fe48131d8cc93b9a476f364f731720a088cc1c71c7fa289cc52c31cb9fd784f138c8f2073ea8d66aa8a6959c7c171bcc58834df0190180763148af63c91"}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x9, 0x5, 'system_u:object_r:init_exec_t:s0\x00'}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x11, 0x48, 0x809b, 'ip6gre0\x00', 'batadv0\x00', 'veth1_macvtap\x00', 'vlan0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff], 0x6e, 0xce, 0x106, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@mark={'mark\x00', 0x10, {{0x1ffffffe0, 0xffffffffffffffff}}}}, {0x9, 0x0, 0x2, 'veth0_virt_wifi\x00', 'pimreg0\x00', 'bridge_slave_1\x00', 'pimreg\x00', @local, [], @multicast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x6e, 0xbe, 0x136, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz1\x00', {0x80}}}}], @common=@nflog={'nflog\x00', 0x50, {{0x5, 0xe3, 0x9, 0x0, 0x0, "7f768b280e2e5b0dbebef06ecb977807a593c424a2b8fc78aadbbb1f1210365248651e99b7ba0a2558dea1245022050c80f7b2cc839538d859433fedf527ab09"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x62a)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x6}, 0x8)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x1}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840)
close(0x3)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29970' (ED25519) to the list of known hosts.
syzkaller login: [   48.168591][ T5840] cgroup: Unknown subsys name 'net'
[   48.293655][ T5840] cgroup: Unknown subsys name 'cpuset'
[   48.297830][ T5840] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.042794][ T5840] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.320921][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.324334][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.327114][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.329595][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.330331][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.332283][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.335126][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.339635][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.342636][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.345153][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.348317][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.351298][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.367738][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.372179][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.376909][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.607808][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   54.614680][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   54.670678][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   54.712063][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.714413][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.717311][ T5849] bridge_slave_0: entered allmulticast mode
[   54.720483][ T5849] bridge_slave_0: entered promiscuous mode
[   54.729517][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.732409][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.735280][ T5849] bridge_slave_1: entered allmulticast mode
[   54.738376][ T5849] bridge_slave_1: entered promiscuous mode
[   54.801614][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.805331][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.808184][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.812175][ T5848] bridge_slave_0: entered allmulticast mode
[   54.815978][ T5848] bridge_slave_0: entered promiscuous mode
[   54.820422][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.823478][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.826035][ T5848] bridge_slave_1: entered allmulticast mode
[   54.829309][ T5848] bridge_slave_1: entered promiscuous mode
[   54.841838][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.863337][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.866109][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.868921][ T5856] bridge_slave_0: entered allmulticast mode
[   54.872161][ T5856] bridge_slave_0: entered promiscuous mode
[   54.875975][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.879186][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.883078][ T5856] bridge_slave_1: entered allmulticast mode
[   54.886253][ T5856] bridge_slave_1: entered promiscuous mode
[   54.907762][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.921842][ T5849] team0: Port device team_slave_0 added
[   54.937111][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.942396][ T5849] team0: Port device team_slave_1 added
[   54.946757][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.986266][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.003734][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.006528][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.016903][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.042332][ T5848] team0: Port device team_slave_0 added
[   55.045399][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.048168][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.057947][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.063415][ T5856] team0: Port device team_slave_0 added
[   55.072280][ T5848] team0: Port device team_slave_1 added
[   55.093290][ T5856] team0: Port device team_slave_1 added
[   55.095702][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.097957][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.105934][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.127140][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.129342][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.137751][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.164252][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.166445][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.174523][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.181711][ T5849] hsr_slave_0: entered promiscuous mode
[   55.184486][ T5849] hsr_slave_1: entered promiscuous mode
[   55.188300][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.190477][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.198897][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.257795][ T5848] hsr_slave_0: entered promiscuous mode
[   55.260143][ T5848] hsr_slave_1: entered promiscuous mode
[   55.263235][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   55.265529][ T5848] Cannot create hsr debugfs directory
[   55.270251][ T5856] hsr_slave_0: entered promiscuous mode
[   55.272881][ T5856] hsr_slave_1: entered promiscuous mode
[   55.275001][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   55.276813][ T5856] Cannot create hsr debugfs directory
[   55.484282][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.502019][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.510591][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.515908][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.544395][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.549057][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.554649][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.559414][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.619317][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.628321][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.640048][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.646301][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.708740][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.717465][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.734736][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   55.746552][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   55.758237][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.760618][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.766573][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.768814][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.773025][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.775314][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.785039][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.787305][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.836145][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.860583][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   55.870140][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.872456][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.885399][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.887629][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.980044][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.025286][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.028092][ T5849] veth0_vlan: entered promiscuous mode
[   56.037134][ T5849] veth1_vlan: entered promiscuous mode
[   56.042264][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.072839][ T5849] veth0_macvtap: entered promiscuous mode
[   56.084712][ T5848] veth0_vlan: entered promiscuous mode
[   56.086867][ T5849] veth1_macvtap: entered promiscuous mode
[   56.097512][ T5848] veth1_vlan: entered promiscuous mode
[   56.107350][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.122591][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.127538][ T5856] veth0_vlan: entered promiscuous mode
[   56.142842][ T5705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.150135][ T5705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.155432][ T5705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.158302][ T5705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.164825][ T5856] veth1_vlan: entered promiscuous mode
[   56.182126][ T5848] veth0_macvtap: entered promiscuous mode
[   56.192378][ T5848] veth1_macvtap: entered promiscuous mode
[   56.216623][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.227339][ T5034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.229866][ T5034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.230178][ T5856] veth0_macvtap: entered promiscuous mode
[   56.240249][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.247363][ T5856] veth1_macvtap: entered promiscuous mode
[   56.264899][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.268662][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.271816][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.274515][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.274976][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.282895][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.287529][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.304636][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.332807][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.340319][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.345378][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.348101][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.360441][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.384251][ T5860] Bluetooth: hci0: command tx timeout
[   56.386370][ T5860] Bluetooth: hci1: command tx timeout
[   56.418635][ T5034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.428939][ T5034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.448398][  T269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.451007][  T269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.461057][ T5860] Bluetooth: hci2: command tx timeout
[   56.496588][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.499114][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.503538][ T5920] tipc: Failed to remove unknown binding: 66,1,1/0:3597193681/3597193683
[   56.506035][  T269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.508664][  T269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.513918][ T5920] tipc: Failed to remove unknown binding: 66,1,1/0:3597193681/3597193683
[   56.516606][ T5920] tipc: Failed to remove unknown binding: 66,1,1/0:3597193681/3597193683
[   56.661525][ T5931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5'.
[   56.825025][ T5943] Zero length message leads to an empty skb
[   56.866537][ T5948] netlink: 'syz.2.8': attribute type 1 has an invalid length.
[   57.039251][ T5958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12'.
[   57.095892][ T5960] tipc: Started in network mode
[   57.097627][ T5960] tipc: Node identity 9a52bc0d729d, cluster identity 4711
[   57.100006][ T5960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.113396][ T5961] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   57.125757][ T5961] syzkaller0: entered promiscuous mode
[   57.127608][ T5961] syzkaller0: entered allmulticast mode
[   57.145423][ T5964] netlink: 'syz.2.19': attribute type 1 has an invalid length.
[   57.146180][ T5960] tipc: Resetting bearer <eth:syzkaller0>
[   57.147954][ T5964] netlink: 'syz.2.19': attribute type 4 has an invalid length.
[   57.155079][ T5959] tipc: Resetting bearer <eth:syzkaller0>
[   57.163314][ T5959] tipc: Disabling bearer <eth:syzkaller0>
[   57.175481][ T5964] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   57.477070][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'.
[   57.480037][ T5979] netlink: 'syz.2.15': attribute type 5 has an invalid length.
[   57.484306][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15'.
[   57.548810][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'.
[   57.598163][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   57.699738][ T5994] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20'.
[   57.757855][ T6000] netlink: 'syz.2.22': attribute type 5 has an invalid length.
[   57.964403][ T6012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'.
[   57.967697][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'.
[   58.072473][ T6019] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   58.085795][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26'.
[   58.357331][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.362859][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.416158][ T6033] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   58.419340][ T6032] IPVS: stopping backup sync thread 6033 ...
[   58.460953][ T5860] Bluetooth: hci1: command tx timeout
[   58.461306][ T5852] Bluetooth: hci0: command tx timeout
[   58.541069][ T5852] Bluetooth: hci2: command tx timeout
[   58.665230][ T6038] openvswitch: netlink: Port -8 exceeds max allowable 65535
[   58.818726][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.821409][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.877563][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.884122][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.960313][ T5899] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.964332][ T5899] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.967305][ T5899] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.971293][ T5899] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.914110][ T6057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.964035][ T6071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.966635][ T6071] syzkaller0: entered promiscuous mode
[   59.970885][ T6071] syzkaller0: entered allmulticast mode
[   59.988414][ T6071] tipc: Resetting bearer <eth:syzkaller0>
[   59.996381][ T6070] tipc: Resetting bearer <eth:syzkaller0>
[   60.020404][ T6070] tipc: Disabling bearer <eth:syzkaller0>
[   60.137366][ T6079] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   60.140633][ T6079] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   60.149224][ T6079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.157832][ T6079] netlink: 'syz.0.49': attribute type 21 has an invalid length.
[   60.167123][ T6081] netlink: 'syz.1.50': attribute type 3 has an invalid length.
[   60.287625][ T6090] syz_tun: entered allmulticast mode
[   60.290368][ T6087] netlink: 'syz.0.53': attribute type 21 has an invalid length.
[   60.297471][ T6090] dvmrp1: entered allmulticast mode
[   60.324115][ T6089] syz_tun: left allmulticast mode
[   60.373060][ T6092] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.380547][ T6096] sctp: [Deprecated]: syz.1.55 (pid 6096) Use of int in max_burst socket option deprecated.
[   60.380547][ T6096] Use struct sctp_assoc_value instead
[   60.437946][ T6100] openvswitch: netlink: Flow key attr not present in new flow.
[   60.538784][ T6107] syzkaller1: entered promiscuous mode
[   60.540622][ T6107] syzkaller1: entered allmulticast mode
[   60.542831][ T5852] Bluetooth: hci0: command tx timeout
[   60.542911][ T5860] Bluetooth: hci1: command tx timeout
[   60.552967][ T6107] netlink: 'syz.0.61': attribute type 29 has an invalid length.
[   60.558097][ T6107] netlink: 'syz.0.61': attribute type 29 has an invalid length.
[   60.567284][ T6107] unsupported nla_type 58
[   60.572645][ T6110] syz.2.63 uses obsolete (PF_INET,SOCK_PACKET)
[   60.621982][ T5860] Bluetooth: hci2: command tx timeout
[   60.655782][ T6119] syz_tun: entered allmulticast mode
[   60.679994][ T6118] syz_tun: left allmulticast mode
[   60.734465][ T6131] Bluetooth: MGMT ver 1.23
[   60.892303][ T6139] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   61.123055][ T6162] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   61.242456][ T6169] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   61.244982][ T6169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.277976][ T6171] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   61.408073][ T6185] team0: Port device dummy0 added
[   61.423371][ T6185] team0: Failed to send options change via netlink (err -105)
[   61.425807][ T6185] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   61.428717][ T6185] team0: Port device dummy0 removed
[   61.433283][ T6185] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   61.464564][ T6188] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   61.652006][ T6198] bond2 (unregistering): Released all slaves
[   61.698738][ T6201] __nla_validate_parse: 20 callbacks suppressed
[   61.698754][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'.
[   61.740372][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'.
[   61.772876][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   61.775696][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.96'.
[   61.906988][   T24] IPVS: starting estimator thread 0...
[   61.992600][ T6219] IPVS: using max 64 ests per chain, 153600 per kthread
[   62.000397][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'.
[   62.021268][ T6231] IPv6: addrconf: prefix option has invalid lifetime
[   62.029632][ T6233] IPv6: addrconf: prefix option has invalid lifetime
[   62.087337][ T6238] gtp0: entered promiscuous mode
[   62.100150][ T6238] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   62.385180][ T6267] netlink: 276 bytes leftover after parsing attributes in process `syz.2.115'.
[   62.462427][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'.
[   62.482695][ T6270] netlink: 452 bytes leftover after parsing attributes in process `syz.2.118'.
[   62.544094][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'.
[   62.600663][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'.
[   62.621134][ T5860] Bluetooth: hci0: command tx timeout
[   62.630903][ T5860] Bluetooth: hci1: command tx timeout
[   62.701143][ T5860] Bluetooth: hci2: command tx timeout
[   62.719605][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.722648][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.834693][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.842640][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.905836][ T5705] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.913682][ T5705] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.925742][ T5705] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.940295][ T5705] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.064209][ T6295] validate_nla: 7 callbacks suppressed
[   63.064231][ T6295] netlink: 'syz.1.126': attribute type 3 has an invalid length.
[   63.142883][ T6305] syz_tun: entered allmulticast mode
[   63.152811][ T6304] syz_tun: left allmulticast mode
[   63.207546][ T6316] openvswitch: netlink: Flow key attr not present in new flow.
[   64.141519][ T6339] syz_tun: entered allmulticast mode
[   64.144888][ T6335] syz_tun: left allmulticast mode
[   64.237892][ T6358] tipc: Started in network mode
[   64.239497][ T6358] tipc: Node identity 26890ce41ab3, cluster identity 4711
[   64.245481][ T6358] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   64.278568][ T6358] tipc: Resetting bearer <eth:syzkaller0>
[   64.287942][ T6353] batadv_slave_1: entered promiscuous mode
[   64.295627][ T6365] netlink: 'syz.2.151': attribute type 29 has an invalid length.
[   64.298543][ T6365] netlink: 'syz.2.151': attribute type 29 has an invalid length.
[   64.302489][ T6365] netlink: 'syz.2.151': attribute type 29 has an invalid length.
[   64.305467][ T6365] netlink: 'syz.2.151': attribute type 29 has an invalid length.
[   64.307912][ T6365] netlink: 'syz.2.151': attribute type 29 has an invalid length.
[   64.310513][ T6365] netlink: 'syz.2.151': attribute type 29 has an invalid length.
[   64.313181][ T6365] netlink: 'syz.2.151': attribute type 29 has an invalid length.
[   64.315685][ T6365] netlink: 'syz.2.151': attribute type 29 has an invalid length.
[   64.318165][ T6365] netlink: 'syz.2.151': attribute type 29 has an invalid length.
[   64.344532][ T6357] tipc: Resetting bearer <eth:syzkaller0>
[   65.006136][ T6357] tipc: Disabling bearer <eth:syzkaller0>
[   65.154227][ T6372] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.186079][ T6383] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   65.189323][ T6383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.218823][ T6372] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.287205][ T6372] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.339522][ T6372] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.450290][ T5899] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.459738][ T5899] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.469395][ T5899] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.478330][ T5705] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.540284][ T6396] 0: renamed from hsr0 (while UP)
[   65.545001][ T6396] 0: entered allmulticast mode
[   65.546992][ T6396] hsr_slave_0: entered allmulticast mode
[   65.549226][ T6396] hsr_slave_1: entered allmulticast mode
[   65.551689][ T6396] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   66.209231][ T6415] bond1 (unregistering): Released all slaves
[   66.334926][ T6431] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.454793][ T6442] bond2: entered promiscuous mode
[   66.457396][ T6442] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.482578][ T6447] sctp: [Deprecated]: syz.1.179 (pid 6447) Use of int in maxseg socket option.
[   66.482578][ T6447] Use struct sctp_assoc_value instead
[   66.674738][ T6465] batadv_slave_0: entered promiscuous mode
[   66.711379][ T6464] batadv_slave_0: left promiscuous mode
[   66.736969][ T6474] __nla_validate_parse: 18 callbacks suppressed
[   66.736987][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.188'.
[   66.906870][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'.
[   66.918664][ T6488] warning: `syz.2.193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.014893][ T6496] dvmrp8: entered allmulticast mode
[   67.017408][ T6495] dvmrp8: left allmulticast mode
[   67.049199][ T6497] veth0_to_team: entered promiscuous mode
[   67.155249][ T6501] netlink: 596 bytes leftover after parsing attributes in process `syz.0.199'.
[   67.163914][ T6501] macsec1: entered promiscuous mode
[   67.165793][ T6501] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   67.188347][ T6501] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   67.335916][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'.
[   67.359401][ T6515] syz_tun: entered allmulticast mode
[   67.366652][ T6515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.206'.
[   67.371709][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'.
[   67.378562][ T6515] dvmrp1: entered allmulticast mode
[   67.401501][ T6514] syz_tun: left allmulticast mode
[   67.436218][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'.
[   67.439100][ T6524] openvswitch: netlink: Flow key attr not present in new flow.
[   67.566344][ T6523] netlink: 185952 bytes leftover after parsing attributes in process `syz.0.209'.
[   67.728727][ T6558] syz_tun: entered allmulticast mode
[   67.773039][ T6557] syz_tun: left allmulticast mode
[   67.900684][ T6566] netlink: 208 bytes leftover after parsing attributes in process `syz.0.223'.
[   68.002451][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'.
[   68.098209][ T6582] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   68.101939][ T6582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.152368][ T6584] validate_nla: 27 callbacks suppressed
[   68.152379][ T6584] netlink: 'syz.1.231': attribute type 7 has an invalid length.
[   68.156715][ T6584] netlink: 'syz.1.231': attribute type 8 has an invalid length.
[   69.440615][ T6625] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[   69.458750][ T6625] bond2 (unregistering): Released all slaves
[   69.558330][ T6628] netlink: 'syz.0.243': attribute type 2 has an invalid length.
[   69.569386][ T6628] : entered promiscuous mode
[   69.595995][ T6630] netlink: 'syz.0.244': attribute type 5 has an invalid length.
[   69.797054][ T6642] tipc: Enabling of bearer <dp:s> rejected, media not registered
[   69.975011][ T6653] bridge_slave_0: left allmulticast mode
[   69.977370][ T6653] bridge_slave_0: left promiscuous mode
[   69.979533][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.984210][ T6653] bridge_slave_1: left allmulticast mode
[   69.986157][ T6653] bridge_slave_1: left promiscuous mode
[   69.988203][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.993609][ T6653] bond0: (slave bond_slave_0): Releasing backup interface
[   69.997567][ T6653] bond0: (slave bond_slave_1): Releasing backup interface
[   70.003593][ T6653] team0: Port device team_slave_0 removed
[   70.007469][ T6653] team0: Port device team_slave_1 removed
[   70.010086][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.014466][ T6653] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.022091][ T6653] tipc: Enabled bearer <eth:team0>, priority 0
[   70.097490][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.102402][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.235208][ T6665] bridge_slave_0: default FDB implementation only supports local addresses
[   70.836137][ T6723] macsec1: entered promiscuous mode
[   70.837847][ T6723] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   70.842200][ T6723] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   70.886140][ T6726] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   70.889203][ T6726] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   70.899268][ T6727] netlink: 'syz.1.265': attribute type 1 has an invalid length.
[   70.945005][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   70.947476][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   70.992471][ T6732] team0: Port device gtp0 added
[   71.051778][ T6737] netlink: 'syz.1.269': attribute type 1 has an invalid length.
[   71.118338][ T6742] veth5: entered promiscuous mode
[   71.141726][ T5902] tipc: Node number set to 1010437348
[   71.224099][ T6753] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   71.278858][ T6759] netlink: 'syz.2.278': attribute type 3 has an invalid length.
[   71.376366][ T6767] syz_tun: entered allmulticast mode
[   71.399193][ T6766] syz_tun: left allmulticast mode
[   71.483265][ T6777] openvswitch: netlink: Flow key attr not present in new flow.
[   71.824835][ T6796] __nla_validate_parse: 23 callbacks suppressed
[   71.824846][ T6796] netlink: 224 bytes leftover after parsing attributes in process `syz.0.289'.
[   72.290427][ T6807] syz_tun: entered allmulticast mode
[   72.294616][ T6806] syz_tun: left allmulticast mode
[   72.324319][ T6809] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   72.383331][ T6809] batadv_slave_0: entered promiscuous mode
[   72.386190][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'.
[   72.390658][ T6809] netlink: 428 bytes leftover after parsing attributes in process `syz.2.295'.
[   72.393575][ T6809] netlink: 32 bytes leftover after parsing attributes in process `syz.2.295'.
[   72.535494][ T6817] tipc: Started in network mode
[   72.537084][ T6817] tipc: Node identity 9a7272fd8f78, cluster identity 4711
[   72.539460][ T6817] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.545206][ T6818] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   72.562279][ T6817] syzkaller0: entered promiscuous mode
[   72.564014][ T6817] syzkaller0: entered allmulticast mode
[   72.577714][ T6817] tipc: Resetting bearer <eth:syzkaller0>
[   72.583111][ T6816] tipc: Resetting bearer <eth:syzkaller0>
[   72.595748][ T6816] tipc: Disabling bearer <eth:syzkaller0>
[   72.644575][ T6822] netlink: 92 bytes leftover after parsing attributes in process `syz.2.301'.
[   72.695110][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'.
[   72.697948][ T6828] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   72.720642][ T6828] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.825214][ T6833] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.865830][ T6833] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.906862][ T6833] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.967348][ T6833] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.044119][ T5899] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.059146][ T5899] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.069426][ T5899] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.080872][ T5899] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.131637][ T6841] netlink: 'syz.1.307': attribute type 2 has an invalid length.
[   73.134174][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'.
[   73.137654][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'.
[   73.179032][ T6840] netlink: 60 bytes leftover after parsing attributes in process `syz.0.308'.
[   73.182259][ T6840] netlink: 56 bytes leftover after parsing attributes in process `syz.0.308'.
[   73.188651][ T6840] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   73.192346][ T6840] gretap1: entered promiscuous mode
[   73.194144][ T6840] gretap1: entered allmulticast mode
[   73.932021][ T6894] IPVS: Unknown mcast interface: pim6reg
[   74.112650][ T6916] netlink: 'syz.0.316': attribute type 1 has an invalid length.
[   74.138250][ T6916] bond2 (unregistering): Released all slaves
[   74.235330][ T6923] netlink: 'syz.0.318': attribute type 5 has an invalid length.
[   74.444373][ T6936] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   74.667285][ T6949] netlink: 'syz.2.326': attribute type 6 has an invalid length.
[   74.672282][ T6949] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[   74.720035][ T6951] pimreg: entered allmulticast mode
[   74.722786][ T6951] pimreg: left allmulticast mode
[   75.116478][ T6967] tipc: New replicast peer: 255.255.255.255
[   75.119427][ T6967] tipc: Enabled bearer <udp:sG2>, priority 10
[   75.303310][ T6978] sch_tbf: burst 0 is lower than device bridge5 mtu (1514) !
[   75.665510][ T7013] netlink: 'syz.2.345': attribute type 7 has an invalid length.
[   75.703049][ T7017] vlan0: entered promiscuous mode
[   75.704777][ T7017] vlan0: entered allmulticast mode
[   75.706491][ T7017] hsr_slave_1: entered allmulticast mode
[   75.715751][ T7017] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   75.718137][ T7017] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.732008][ T7019] netlink: 'syz.0.350': attribute type 3 has an invalid length.
[   75.853717][ T7027] syz_tun: entered allmulticast mode
[   75.874726][ T7022] syz_tun: left allmulticast mode
[   75.976451][ T7036] openvswitch: netlink: Flow key attr not present in new flow.
[   76.132172][   T47] tipc: Node number set to 353006333
[   76.155505][ T7056] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[   76.191428][ T7061] syz_tun: entered allmulticast mode
[   76.193871][ T7060] syz_tun: left allmulticast mode
[   76.236315][   T55] block nbd0: Receive control failed (result -104)
[   76.413751][ T7085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.453624][ T7084] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[   76.475405][ T7084] bond1: entered promiscuous mode
[   76.477307][ T7084] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.521086][ T7090] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   76.523515][ T7090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.525536][ T7084] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.528572][ T7084] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   76.533758][ T7084] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   76.538532][ T7091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.541040][ T7091] IPv6: NLM_F_CREATE should be set when creating new route
[   76.543467][ T7091] IPv6: NLM_F_CREATE should be set when creating new route
[   76.550452][ T7091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.551688][ T7084] bond1: (slave wireguard0): making interface the new active one
[   76.555214][ T7084] wireguard0: entered promiscuous mode
[   76.558558][ T7084] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[   76.580586][ T7091] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[   76.586442][ T7091] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[   77.543028][ T7138] netlink: 'syz.2.388': attribute type 1 has an invalid length.
[   77.562373][ T7138] bond3 (unregistering): Released all slaves
[   77.581034][ T7142] __nla_validate_parse: 28 callbacks suppressed
[   77.581045][ T7142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.387'.
[   77.638156][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[   77.642884][ T7147] netlink: 'syz.2.390': attribute type 5 has an invalid length.
[   77.645949][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.390'.
[   77.657903][ T7149] netlink: 'syz.1.391': attribute type 7 has an invalid length.
[   77.667071][ T7149] netlink: 208 bytes leftover after parsing attributes in process `syz.1.391'.
[   77.816415][ T7155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.393'.
[   77.819621][ T7155] bond0: option arp_all_targets: invalid value (196616)
[   77.861274][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'.
[   77.875597][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'.
[   77.938647][ T7173] syzkaller0: entered promiscuous mode
[   77.940908][ T7173] syzkaller0: entered allmulticast mode
[   78.126489][ T7183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.284473][ T7184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.338764][ T7184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.364563][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'.
[   78.381469][ T7186] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.437493][ T7186] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.474922][ T7186] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.564527][ T7186] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.580670][ T7196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.407'.
[   78.621594][ T5705] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.639062][ T5899] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.642883][ T7200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.409'.
[   78.649196][ T5899] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.663105][ T5899] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.274915][ T7204] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.278434][ T7204] syzkaller0: entered promiscuous mode
[   79.280920][ T7204] syzkaller0: entered allmulticast mode
[   79.289917][ T7205] tipc: Resetting bearer <eth:syzkaller0>
[   79.295082][ T7203] tipc: Resetting bearer <eth:syzkaller0>
[   79.303092][ T7203] tipc: Disabling bearer <eth:syzkaller0>
[   79.612535][ T7211] syzkaller0: entered promiscuous mode
[   79.614297][ T7211] syzkaller0: entered allmulticast mode
[   79.656072][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.659120][ T7216] 8021q: adding VLAN 0 to HW filter on device team0
[   79.663516][ T7216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.902695][ T7239] validate_nla: 4 callbacks suppressed
[   79.902706][ T7239] netlink: 'syz.1.422': attribute type 3 has an invalid length.
[   79.915768][ T7241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.924906][ T7241] team0: Device gtp0 is of different type
[   79.948005][ T7243] syz_tun: entered allmulticast mode
[   79.962560][ T7242] syz_tun: left allmulticast mode
[   80.024885][ T7241] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   80.108295][ T7258] openvswitch: netlink: Flow key attr not present in new flow.
[   80.212424][ T7256] netlink: 'syz.2.427': attribute type 29 has an invalid length.
[   80.369565][ T7274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.375852][ T7275] syzkaller0: entered promiscuous mode
[   80.377802][ T7275] syzkaller0: entered allmulticast mode
[   80.385287][ T7275] tipc: Resetting bearer <eth:syzkaller0>
[   80.390183][ T7273] tipc: Resetting bearer <eth:syzkaller0>
[   80.398247][ T7273] tipc: Disabling bearer <eth:syzkaller0>
[   80.639521][ T7287] syz_tun: entered allmulticast mode
[   80.642336][ T7286] syz_tun: left allmulticast mode
[   81.098078][ T7309] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   81.102746][ T7309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.197488][  T924] cfg80211: failed to load regulatory.db
[   81.393436][ T7324] _Z`Ԁ@: entered promiscuous mode
[   81.755523][ T7334] ieee802154 phy0 wpan0: encryption failed: -22
[   81.832037][ T7351] netlink: 'syz.1.460': attribute type 1 has an invalid length.
[   81.854374][ T7351] bond2 (unregistering): Released all slaves
[   81.885521][ T7357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.888197][ T7357] syzkaller0: entered promiscuous mode
[   81.889962][ T7357] syzkaller0: entered allmulticast mode
[   81.902456][ T7357] tipc: Resetting bearer <eth:syzkaller0>
[   81.911288][ T7356] tipc: Resetting bearer <eth:syzkaller0>
[   81.936891][ T7356] tipc: Disabling bearer <eth:syzkaller0>
[   81.945744][ T7359] netlink: 'syz.1.462': attribute type 5 has an invalid length.
[   82.028877][ T7365] team0: Port device gtp0 removed
[   82.032962][ T7365] bond1: (slave wireguard0): Releasing backup interface
[   82.035702][ T7365] wireguard0: left promiscuous mode
[   82.037490][ T7365] bond1: (slave wireguard1): making interface the new active one
[   82.040348][ T7365] wireguard1: entered promiscuous mode
[   82.045854][ T7365] bond1: (slave wireguard1): Releasing backup interface
[   82.048105][ T7365] wireguard1: left promiscuous mode
[   82.320480][ T7370] netlink: 'syz.1.467': attribute type 3 has an invalid length.
[   82.590305][ T7391] bridge_slave_1: left allmulticast mode
[   82.593138][ T7391] bridge_slave_1: left promiscuous mode
[   82.595906][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.600354][ T7391] bridge_slave_0: left allmulticast mode
[   82.603844][ T7391] bridge_slave_0: left promiscuous mode
[   82.608774][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.718800][ T7399] 8021q: VLANs not supported on team0
[   82.839001][ T7409] __nla_validate_parse: 28 callbacks suppressed
[   82.839013][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'.
[   83.100241][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'.
[   83.189546][ T7425] netlink: 'syz.1.485': attribute type 21 has an invalid length.
[   83.237577][ T7425] netlink: 'syz.1.485': attribute type 6 has an invalid length.
[   83.240696][ T7425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.485'.
[   83.248014][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'.
[   83.270636][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'.
[   83.297404][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'.
[   83.347418][ T7448] netlink: 'syz.1.492': attribute type 3 has an invalid length.
[   83.349970][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'.
[   83.428979][ T7452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.493'.
[   83.471180][ T7462] syz_tun: entered allmulticast mode
[   83.473231][ T7462] netlink: 132 bytes leftover after parsing attributes in process `syz.0.494'.
[   83.497575][ T7461] syz_tun: left allmulticast mode
[   83.663475][ T7477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.498'.
[   83.667768][ T7477] openvswitch: netlink: Flow key attr not present in new flow.
[   83.693085][ T7479] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[   83.757957][ T7483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.760366][ T7483] syzkaller0: entered promiscuous mode
[   83.764190][ T7483] syzkaller0: entered allmulticast mode
[   83.784835][ T7483] tipc: Resetting bearer <eth:syzkaller0>
[   83.788251][ T7482] tipc: Resetting bearer <eth:syzkaller0>
[   83.800705][ T7482] tipc: Disabling bearer <eth:syzkaller0>
[   83.862301][ T7492] netlink: 'syz.0.505': attribute type 21 has an invalid length.
[   84.039145][ T7506] syz_tun: entered allmulticast mode
[   84.045678][ T7505] syz_tun: left allmulticast mode
[   84.109219][ T7513] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   84.111628][ T7513] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   84.233505][ T7527] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   84.235974][ T7527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.532968][ T7544] IPVS: length: 49 != 24
[   84.974313][ T7558] netlink: 'syz.1.528': attribute type 1 has an invalid length.
[   84.991971][ T7558] bond2 (unregistering): Released all slaves
[   85.159633][ T7566] netlink: 'syz.1.530': attribute type 5 has an invalid length.
[   85.354057][ T7581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.356832][ T7581] gre0: entered allmulticast mode
[   85.363149][ T7581] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   85.367276][ T7581] tipc: Resetting bearer <eth:syzkaller0>
[   85.372580][ T7580] tipc: Disabling bearer <eth:syzkaller0>
[   85.380296][ T7585] netlink: 'syz.0.537': attribute type 6 has an invalid length.
[   85.690064][ T7607] lo speed is unknown, defaulting to 1000
[   85.695116][ T7607] lo speed is unknown, defaulting to 1000
[   85.700146][ T7607] lo speed is unknown, defaulting to 1000
[   85.708959][ T7607] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   85.720138][ T7607] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   85.740258][ T7607] lo speed is unknown, defaulting to 1000
[   85.745743][ T7607] lo speed is unknown, defaulting to 1000
[   85.748352][ T7607] lo speed is unknown, defaulting to 1000
[   86.076620][ T7641] netlink: 'syz.2.558': attribute type 3 has an invalid length.
[   86.133691][ T7643] IPVS: Scheduler module ip_vs_sip not found
[   86.174069][ T7649] syz_tun: entered allmulticast mode
[   86.181461][ T7649] dvmrp1: entered allmulticast mode
[   86.200078][ T7648] syz_tun: left allmulticast mode
[   86.276486][ T7655] netlink: 'syz.2.563': attribute type 1 has an invalid length.
[   86.279736][ T7655] netlink: 'syz.2.563': attribute type 1 has an invalid length.
[   86.283941][ T7655] netlink: 'syz.2.563': attribute type 1 has an invalid length.
[   86.287319][ T7655] netlink: 'syz.2.563': attribute type 1 has an invalid length.
[   86.289729][ T7655] netlink: 'syz.2.563': attribute type 2 has an invalid length.
[   86.292225][ T7655] netlink: 'syz.2.563': attribute type 1 has an invalid length.
[   86.295081][ T7655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.320839][ T7657] openvswitch: netlink: Flow key attr not present in new flow.
[   86.525694][ T7681] syz_tun: entered allmulticast mode
[   86.528564][ T7679] syz_tun: left allmulticast mode
[   86.648758][ T7687] openvswitch: netlink: Port -8 exceeds max allowable 65535
[   86.955523][ T7708] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   86.958313][ T7708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.984905][ T7710] nft_compat: unsupported protocol 0
[   87.350881][ T7730] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.369852][ T7730] tipc: Resetting bearer <eth:syzkaller0>
[   87.507666][ T7733] bond2 (unregistering): Released all slaves
[   87.706065][ T7741] syzkaller0: entered promiscuous mode
[   87.707968][ T7741] syzkaller0: entered allmulticast mode
[   87.942763][ T7744] __nla_validate_parse: 26 callbacks suppressed
[   87.942774][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.596'.
[   88.062304][ T5860] Bluetooth: hci2: command tx timeout
[   88.147295][ T7754] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   88.150441][ T7754] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   88.202574][ T7728] tipc: Resetting bearer <eth:syzkaller0>
[   88.211806][ T7728] tipc: Disabling bearer <eth:syzkaller0>
[   88.274635][ T7759] geneve3: entered promiscuous mode
[   88.276693][ T7759] geneve3: entered allmulticast mode
[   88.279754][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 35739 - 0
[   88.290918][   T13] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 53722 - 0
[   88.295363][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 35739 - 0
[   88.299132][   T13] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 53722 - 0
[   88.303040][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 35739 - 0
[   88.306405][   T13] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 53722 - 0
[   88.308969][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 35739 - 0
[   88.311707][   T13] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 53722 - 0
[   88.330618][    T9] lo speed is unknown, defaulting to 1000
[   88.337741][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'.
[   88.398254][ T7773] tc_dump_action: action bad kind
[   88.407374][ T7770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.605'.
[   88.411347][ T7771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.605'.
[   88.470342][ T7775] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   88.475508][ T7775] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   88.514388][ T7779] netlink: 48 bytes leftover after parsing attributes in process `syz.0.608'.
[   88.552494][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'.
[   88.598760][ T7784] netlink: 152 bytes leftover after parsing attributes in process `syz.2.610'.
[   88.605863][ T7786] netlink: 152 bytes leftover after parsing attributes in process `syz.2.610'.
[   88.645487][ T7790] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.648535][ T7790] syzkaller0: entered promiscuous mode
[   88.649394][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'.
[   88.650635][ T7790] syzkaller0: entered allmulticast mode
[   88.664667][ T7790] netlink: 52 bytes leftover after parsing attributes in process `syz.2.612'.
[   88.675782][ T7790] tipc: Resetting bearer <eth:syzkaller0>
[   88.680311][ T7789] tipc: Resetting bearer <eth:syzkaller0>
[   88.689747][ T7789] tipc: Disabling bearer <eth:syzkaller0>
[   88.773370][ T7799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.785467][ T7799] veth0_to_team: entered promiscuous mode
[   88.787666][ T7799] veth0_to_team: entered allmulticast mode
[   89.125616][ T7808] syzkaller0: entered promiscuous mode
[   89.127940][ T7808] syzkaller0: entered allmulticast mode
[   89.164838][ T7805] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   89.167441][ T7805] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   89.219147][ T7804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.226783][ T7804] netlink: zone id is out of range
[   89.228427][ T7804] netlink: zone id is out of range
[   89.229979][ T7804] netlink: zone id is out of range
[   89.232330][ T7804] netlink: zone id is out of range
[   89.234384][ T7804] netlink: zone id is out of range
[   89.240824][ T7804] netlink: zone id is out of range
[   89.242522][ T7804] netlink: zone id is out of range
[   89.244110][ T7804] netlink: zone id is out of range
[   89.309358][ T7824] syz_tun: entered allmulticast mode
[   89.352961][ T7822] syz_tun: left allmulticast mode
[   89.453574][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.456718][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.459665][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.463070][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.659431][ T7837] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   89.664471][ T7837] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   89.699213][ T7841] syzkaller0: entered promiscuous mode
[   89.701487][ T7841] syzkaller0: entered allmulticast mode
[   89.999571][ T7851] IPVS: stopping backup sync thread 6936 ...
[   90.528098][ T7859] validate_nla: 10 callbacks suppressed
[   90.528109][ T7859] netlink: 'syz.2.636': attribute type 3 has an invalid length.
[   90.613734][ T7864] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   90.616158][ T7864] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   90.733008][ T7872] syz_tun: entered allmulticast mode
[   90.735961][ T7871] syz_tun: left allmulticast mode
[   90.785967][ T7876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.822841][ T7876] syzkaller0: entered promiscuous mode
[   90.825272][ T7876] syzkaller0: entered allmulticast mode
[   90.827522][ T7876] tipc: Resetting bearer <eth:syzkaller0>
[   90.841525][ T7874] tipc: Resetting bearer <eth:syzkaller0>
[   91.739843][ T7874] tipc: Disabling bearer <eth:syzkaller0>
[   91.754584][ T7884] ipvlan2: entered promiscuous mode
[   91.826597][ T7896] netlink: 'syz.0.648': attribute type 7 has an invalid length.
[   91.830248][ T7896] netlink: 'syz.0.648': attribute type 21 has an invalid length.
[   92.054951][ T7919] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.060237][ T7919] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[   92.065007][ T7923] netlink: 'syz.1.656': attribute type 1 has an invalid length.
[   92.067332][ T7919] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 53722 - 0
[   92.089087][ T7923] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.135155][ T7919] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.141716][ T7919] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[   92.144707][ T7919] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 53722 - 0
[   92.159257][ T7928] netlink: 'syz.2.657': attribute type 1 has an invalid length.
[   92.180351][ T7928] bond3 (unregistering): Released all slaves
[   92.213687][ T7919] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.220234][ T7919] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[   92.226642][ T7919] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 53722 - 0
[   92.280922][ T7919] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.284064][ T7919] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[   92.287622][ T7919] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 53722 - 0
[   92.326493][ T7939] netlink: 'syz.1.659': attribute type 1 has an invalid length.
[   92.368142][ T7943] netlink: 'syz.2.660': attribute type 5 has an invalid length.
[   92.411401][ T5705] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 53722 - 0
[   92.414726][ T5705] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 35739 - 0
[   92.417948][ T5705] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[   92.429338][ T5705] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 53722 - 0
[   92.433174][ T5705] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 35739 - 0
[   92.436167][ T5705] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[   92.448689][ T5705] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 53722 - 0
[   92.455561][ T5705] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 35739 - 0
[   92.459305][ T5705] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[   92.474629][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 53722 - 0
[   92.477597][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 35739 - 0
[   92.484599][   T12] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[   92.730476][ T7971] veth3: entered promiscuous mode
[   92.804338][ T7975] lo speed is unknown, defaulting to 1000
[   92.894314][ T7978] sock: sock_timestamping_bind_phc: sock not bind to device
[   93.487125][ T7992] tc_dump_action: action bad kind
[   93.531021][ T7994] Driver unsupported XDP return value 0 on prog  (id 230) dev N/A, expect packet loss!
[   93.865366][ T8021] __nla_validate_parse: 24 callbacks suppressed
[   93.865377][ T8021] netlink: 248 bytes leftover after parsing attributes in process `syz.2.686'.
[   93.991129][ T8030] netlink: 'syz.2.689': attribute type 3 has an invalid length.
[   93.993612][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'.
[   94.027231][ T8034] netlink: 277 bytes leftover after parsing attributes in process `syz.1.688'.
[   94.093252][ T8040] syz_tun: entered allmulticast mode
[   94.096730][ T8040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.691'.
[   94.120969][ T8039] syz_tun: left allmulticast mode
[   94.194040][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'.
[   94.223748][ T8055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'.
[   94.226415][ T8055] net_ratelimit: 34 callbacks suppressed
[   94.226422][ T8055] openvswitch: netlink: Flow key attr not present in new flow.
[   94.305163][ T8063] netlink: 'syz.2.699': attribute type 5 has an invalid length.
[   94.485134][ T8086] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   94.521565][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'.
[   94.525823][ T8089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.706'.
[   94.543399][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.706'.
[   94.663452][ T8095] syz_tun: entered allmulticast mode
[   94.671895][ T8094] syz_tun: left allmulticast mode
[   95.445249][ T8127] netlink: 'syz.1.709': attribute type 5 has an invalid length.
[   95.515736][ T8131] lo speed is unknown, defaulting to 1000
[   95.651976][ T8139] vlan2: entered promiscuous mode
[   95.653818][ T8139] vlan2: entered allmulticast mode
[   95.655482][ T8139] hsr_slave_1: entered allmulticast mode
[   95.703729][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'.
[   95.867783][ T8147] netlink: 'syz.2.719': attribute type 1 has an invalid length.
[   95.870370][ T8147] netlink: 'syz.2.719': attribute type 1 has an invalid length.
[   95.899447][ T8149] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   95.902799][ T8149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.050401][ T8157] netlink: 'syz.2.724': attribute type 1 has an invalid length.
[   96.077994][ T8157] bond3 (unregistering): Released all slaves
[   96.205857][ T8166] batadv_slave_1: entered promiscuous mode
[   96.226265][ T8169] netlink: 'syz.2.727': attribute type 5 has an invalid length.
[   96.253034][ T8171] openvswitch: netlink: IP tunnel TTL not specified.
[   97.125527][ T8196] netlink: 'syz.0.732': attribute type 5 has an invalid length.
[   97.238831][ T8202] batadv1: entered promiscuous mode
[   97.240563][ T8202] batadv1: entered allmulticast mode
[   97.423187][ T8218] tc_dump_action: action bad kind
[   97.448855][ T8220] ieee802154 phy0 wpan0: encryption failed: -22
[   97.531467][ T8226] lo speed is unknown, defaulting to 1000
[   97.904546][ T8232] batadv_slave_0: entered promiscuous mode
[   97.913042][ T8231] batadv_slave_0: left promiscuous mode
[   98.235085][ T8258] netlink: 'syz.0.753': attribute type 5 has an invalid length.
[   98.258378][ T8260] netlink: 'syz.2.757': attribute type 3 has an invalid length.
[   98.287813][ T8262] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744072564227003)
[   98.292028][ T8262] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   98.317868][ T8264] syz_tun: entered allmulticast mode
[   98.345270][ T8263] syz_tun: left allmulticast mode
[   98.399668][ T8266] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.492078][ T8275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.528631][ T8275] syzkaller0: entered promiscuous mode
[   98.530381][ T8275] syzkaller0: entered allmulticast mode
[   98.533183][ T8275] tipc: Resetting bearer <eth:syzkaller0>
[   98.538969][ T8274] tipc: Resetting bearer <eth:syzkaller0>
[   99.406544][ T8274] tipc: Disabling bearer <eth:syzkaller0>
[   99.516011][ T8310] __nla_validate_parse: 14 callbacks suppressed
[   99.516022][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'.
[   99.536115][ T8305] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   99.539523][ T5899] bond0: (slave bond_slave_0): interface is now down
[   99.542736][ T5899] bond0: (slave bond_slave_1): interface is now down
[   99.545023][ T5899] bond0: (slave dummy0): interface is now down
[   99.552917][ T5899] bond0: now running without any active interface!
[   99.564966][ T8312] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   99.606019][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'.
[   99.609973][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'.
[   99.614303][ T8317] syz_tun: entered allmulticast mode
[   99.644127][ T8318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.647912][ T8318] syzkaller0: entered promiscuous mode
[   99.649986][ T8318] syzkaller0: entered allmulticast mode
[   99.659566][ T8316] syz_tun: left allmulticast mode
[   99.671215][ T8318] tipc: Resetting bearer <eth:syzkaller0>
[  100.341841][ T8309] tipc: Resetting bearer <eth:syzkaller0>
[  100.349857][ T8309] tipc: Disabling bearer <eth:syzkaller0>
[  100.442908][ T8346] netlink: 'syz.1.781': attribute type 1 has an invalid length.
[  100.449348][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'.
[  100.540010][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.782'.
[  100.543696][ T8348] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  100.726641][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'.
[  100.730312][ T8365] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  100.733159][ T8365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.778282][ T8363] netlink: 'syz.1.787': attribute type 10 has an invalid length.
[  100.782136][ T8363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.785881][ T8363] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  100.788945][ T8367] netlink: 'syz.0.794': attribute type 1 has an invalid length.
[  100.802807][ T8363] syz.1.787 (8363) used greatest stack depth: 18744 bytes left
[  100.824647][ T8367] bond2 (unregistering): Released all slaves
[  100.855985][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'.
[  100.858927][ T8372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.796'.
[  100.887651][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'.
[  100.931745][ T8370] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  100.931802][   T13] bond0: (slave bond_slave_0): interface is now down
[  100.940387][   T13] bond0: (slave bond_slave_1): interface is now down
[  100.948204][   T13] bond0: now running without any active interface!
[  100.995182][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'.
[  100.999184][ T8387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.004656][ T8387] syzkaller0: entered promiscuous mode
[  101.006461][ T8387] syzkaller0: entered allmulticast mode
[  101.037704][ T8391] validate_nla: 1 callbacks suppressed
[  101.037715][ T8391] netlink: 'syz.1.797': attribute type 10 has an invalid length.
[  101.045425][ T8391] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  101.058318][ T8386] tipc: Resetting bearer <eth:syzkaller0>
[  101.067841][ T8386] tipc: Disabling bearer <eth:syzkaller0>
[  101.249968][ T8404] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  101.523570][ T8435] tc_dump_action: action bad kind
[  102.218708][ T8472] bond0: invalid ARP target 0.0.0.0 specified for addition
[  102.222053][ T8472] bond0: option arp_ip_target: invalid value (0)
[  102.224239][ T8472] bond0: Removing last arp target with arp_interval on
[  102.307412][ T8481] netlink: 'syz.0.827': attribute type 3 has an invalid length.
[  102.337871][ T8484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.372403][ T8486] syz_tun: entered allmulticast mode
[  102.395832][ T8485] syz_tun: left allmulticast mode
[  102.443794][ T8490] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  102.446985][ T8490] netlink: 'syz.2.830': attribute type 6 has an invalid length.
[  102.473555][ T8493] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  102.528982][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.580055][ T8504] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  102.603184][ T8506] batadv_slave_0: entered promiscuous mode
[  102.668063][ T8520] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  102.702150][ T8529] syz_tun: entered allmulticast mode
[  102.725872][ T8527] syz_tun: left allmulticast mode
[  102.771329][ T8534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.774352][ T8534] syzkaller0: entered promiscuous mode
[  102.776454][ T8534] syzkaller0: entered allmulticast mode
[  102.794006][ T8533] tipc: Resetting bearer <eth:syzkaller0>
[  102.805374][ T8533] tipc: Disabling bearer <eth:syzkaller0>
[  102.820492][ T8537] lo speed is unknown, defaulting to 1000
[  103.057383][ T8560] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  103.060510][ T8560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.115133][ T8567] netlink: 'syz.1.858': attribute type 5 has an invalid length.
[  103.156609][ T8563] lo speed is unknown, defaulting to 1000
[  103.237085][ T8574] netlink: 'syz.1.860': attribute type 1 has an invalid length.
[  103.273036][ T8574] bond3 (unregistering): Released all slaves
[  103.669958][ T8607] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  103.676866][ T8607] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  103.679980][ T8607] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  103.726734][ T8624] netlink: 'syz.1.876': attribute type 1 has an invalid length.
[  103.746239][ T8624] netlink: 'syz.1.876': attribute type 3 has an invalid length.
[  103.753155][ T8607] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  103.757428][ T8607] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  103.761983][ T8607] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  103.769215][ T8625] netlink: 'syz.2.875': attribute type 13 has an invalid length.
[  103.772197][ T8625] netlink: 'syz.2.875': attribute type 17 has an invalid length.
[  103.786057][ T8625] gre0: left allmulticast mode
[  103.887967][ T8625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.897136][ T8607] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  103.900281][ T8607] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  103.906345][ T8607] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  103.918732][ T8625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.952938][ T8626] lo speed is unknown, defaulting to 1000
[  103.957284][ T8607] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  103.961263][ T8607] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  103.964755][ T8607] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  103.974455][ T8625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.975481][ T8632] tc_dump_action: action bad kind
[  104.010671][ T8634] netlink: 'syz.1.879': attribute type 1 has an invalid length.
[  104.041134][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.047362][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 53722 - 0
[  104.050053][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 35739 - 0
[  104.053330][   T12] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  104.062328][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 53722 - 0
[  104.065029][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 35739 - 0
[  104.067655][   T12] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  104.088378][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 53722 - 0
[  104.091962][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 35739 - 0
[  104.094621][   T12] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  104.104976][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 53722 - 0
[  104.107535][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 35739 - 0
[  104.110006][   T12] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  104.279263][ T8653] IPVS: set_ctl: invalid protocol: 49 172.20.20.187:20001
[  104.433317][ T8668] syz_tun: entered allmulticast mode
[  104.437655][ T8667] syz_tun: left allmulticast mode
[  104.471498][ T5860] Bluetooth: hci0: command tx timeout
[  104.669219][ T8691] __nla_validate_parse: 33 callbacks suppressed
[  104.669231][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'.
[  104.687125][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'.
[  104.692955][ T8697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.794412][ T8704] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  104.905208][ T8718] syz_tun: entered allmulticast mode
[  104.909215][ T8717] syz_tun: left allmulticast mode
[  105.012723][ T8730] netlink: 48 bytes leftover after parsing attributes in process `syz.2.913'.
[  105.164741][ T8740] netlink: 2 bytes leftover after parsing attributes in process `syz.0.916'.
[  105.167602][ T8740] team0: entered promiscuous mode
[  105.169220][ T8740] team_slave_0: entered promiscuous mode
[  105.175272][ T8740] team_slave_1: entered promiscuous mode
[  105.179550][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'.
[  105.184748][ T8746] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  105.187516][ T8746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.225337][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'.
[  105.228428][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.921'.
[  105.336305][ T8764] bond3 (unregistering): Released all slaves
[  105.355198][ T8762] !: renamed from dummy0 (while UP)
[  105.450032][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.928'.
[  105.465593][ T8773] siw: device registration error -23
[  105.576617][ T8795] netlink: 244 bytes leftover after parsing attributes in process `syz.0.934'.
[  105.684069][ T8809] tc_dump_action: action bad kind
[  105.690110][ T8807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.695249][ T8807] syzkaller0: entered promiscuous mode
[  105.697137][ T8807] syzkaller0: entered allmulticast mode
[  105.708524][ T8807] tipc: Resetting bearer <eth:syzkaller0>
[  105.713113][ T8805] tipc: Resetting bearer <eth:syzkaller0>
[  105.722124][ T8811] netlink: 60 bytes leftover after parsing attributes in process `syz.0.940'.
[  105.725846][ T8805] tipc: Disabling bearer <eth:syzkaller0>
[  106.162282][ T8848] validate_nla: 35 callbacks suppressed
[  106.162293][ T8848] netlink: 'syz.1.949': attribute type 3 has an invalid length.
[  106.219231][ T8855] syz_tun: entered allmulticast mode
[  106.245911][ T8853] syz_tun: left allmulticast mode
[  106.363092][ T8867] netlink: 'syz.2.954': attribute type 4 has an invalid length.
[  106.399359][ T8869] openvswitch: netlink: Flow key attr not present in new flow.
[  106.472747][ T8872] openvswitch: netlink: Message has 8 unknown bytes.
[  106.508235][ T5916] IPVS: starting estimator thread 0...
[  106.514200][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.516706][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.537268][ T8878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.603140][ T8892] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  106.624591][ T8880] IPVS: using max 63 ests per chain, 151200 per kthread
[  106.727861][ T8903] syz_tun: entered allmulticast mode
[  106.730628][ T8901] syz_tun: left allmulticast mode
[  106.994170][ T8920] netlink: 'syz.1.968': attribute type 13 has an invalid length.
[  106.998787][ T8920] netlink: 'syz.1.968': attribute type 17 has an invalid length.
[  107.033349][   T12] bond0: (slave batadv0): interface is now down
[  107.034227][ T8920] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.038492][ T8920] 8021q: adding VLAN 0 to HW filter on device team0
[  107.040727][ T8920] tipc: Resetting bearer <eth:team0>
[  107.043117][ T8920] tipc: Resetting bearer <eth:team0>
[  107.046607][ T8920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.061587][ T5705] bond0: (slave batadv0): interface is now down
[  107.065598][ T5705] bond0: now running without any active interface!
[  107.189628][ T8933] netlink: 'syz.1.970': attribute type 5 has an invalid length.
[  107.386746][ T8935] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  107.389804][ T8935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.435956][ T8937] netlink: 'syz.2.974': attribute type 12 has an invalid length.
[  107.562378][ T8940] netlink: 'syz.2.975': attribute type 5 has an invalid length.
[  107.843415][ T8958] netlink: 'syz.2.981': attribute type 1 has an invalid length.
[  107.862349][ T8962] tipc: Invalid UDP bearer configuration
[  107.862379][ T8962] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  107.870360][ T8958] bond3 (unregistering): Released all slaves
[  107.885966][ T8962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.888554][ T8962] syzkaller0: entered promiscuous mode
[  107.890402][ T8962] syzkaller0: entered allmulticast mode
[  107.905749][ T8962] tipc: Resetting bearer <eth:syzkaller0>
[  107.908806][ T8962] : renamed from batadv_slave_1 (while UP)
[  107.917366][ T8960] tipc: Resetting bearer <eth:syzkaller0>
[  107.947499][ T8960] tipc: Disabling bearer <eth:syzkaller0>
[  107.963009][ T8966] nbd: must specify a device to reconfigure
[  107.985344][ T8971] tipc: Resetting bearer <eth:team0>
[  108.102839][ T8980] syzkaller0: entered promiscuous mode
[  108.104590][ T8980] syzkaller0: entered allmulticast mode
[  108.244142][ T8988] netlink: 'syz.2.989': attribute type 5 has an invalid length.
[  108.554345][ T8999] netlink: 'syz.1.995': attribute type 6 has an invalid length.
[  108.958880][ T8989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.966422][ T8990] syzkaller0: entered promiscuous mode
[  108.968676][ T8990] syzkaller0: entered allmulticast mode
[  109.003616][ T8999] tipc: Resetting bearer <eth:syzkaller0>
[  109.024505][ T8999] tipc: Disabling bearer <eth:syzkaller0>
[  109.153249][ T9016] tc_dump_action: action bad kind
[  112.208366][ T9029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.317524][ T9041] netlink: 'syz.0.998': attribute type 5 has an invalid length.
[  112.473750][ T9053] __nla_validate_parse: 17 callbacks suppressed
[  112.473760][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'.
[  112.522826][ T9056] netlink: 'syz.2.1009': attribute type 3 has an invalid length.
[  112.525409][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'.
[  112.575627][ T9062] syz_tun: entered allmulticast mode
[  112.577731][ T9062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1011'.
[  112.598305][ T9060] syz_tun: left allmulticast mode
[  112.644704][ T9064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.648050][ T9064] syzkaller0: entered promiscuous mode
[  112.650000][ T9064] syzkaller0: entered allmulticast mode
[  112.732065][ T9074] syzkaller0: entered promiscuous mode
[  112.734103][ T9074] syzkaller0: entered allmulticast mode
[  112.774246][ T9064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  112.814781][ T9063] tipc: Resetting bearer <eth:syzkaller0>
[  112.828037][ T9063] tipc: Disabling bearer <eth:syzkaller0>
[  112.915836][ T9079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1015'.
[  112.918649][ T9079] openvswitch: netlink: Flow key attr not present in new flow.
[  112.949643][ T9081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.958184][ T9081] netlink: 'syz.1.1016': attribute type 1 has an invalid length.
[  112.995902][ T9081] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.006326][ T9086] syz_tun: entered allmulticast mode
[  113.009907][ T9086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1018'.
[  113.010369][ T9081] netlink: 'syz.1.1016': attribute type 3 has an invalid length.
[  113.016521][ T9081] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1016'.
[  113.063713][ T9085] syz_tun: left allmulticast mode
[  113.098188][ T9090] netlink: 'syz.0.1019': attribute type 4 has an invalid length.
[  113.156019][ T9098] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  113.186617][ T9103] syz_tun: entered allmulticast mode
[  113.194510][ T9101] syz_tun: left allmulticast mode
[  113.352979][ T9110] netlink: 'syz.0.1026': attribute type 5 has an invalid length.
[  114.098862][ T9112] syz_tun: entered allmulticast mode
[  114.101168][ T9112] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1027'.
[  114.105718][ T9111] syz_tun: left allmulticast mode
[  114.119040][ T9116] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.1029'.
[  114.176471][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'.
[  114.221773][ T9122] netlink: 'syz.1.1031': attribute type 23 has an invalid length.
[  114.415971][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'.
[  114.419289][ T9140] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  114.423717][ T9140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.568592][ T9151] syz_tun: entered allmulticast mode
[  114.601760][ T9150] syz_tun: left allmulticast mode
[  114.647463][ T9154] netlink: 'syz.2.1039': attribute type 5 has an invalid length.
[  114.775010][ T9164] netlink: 'syz.2.1042': attribute type 1 has an invalid length.
[  114.803695][ T9164] veth9: entered promiscuous mode
[  114.843573][ T9165] erspan0: entered allmulticast mode
[  114.895680][ T9167] netlink: 'syz.2.1043': attribute type 1 has an invalid length.
[  114.913789][ T9167] bond4 (unregistering): Released all slaves
[  115.086929][ T9181] tipc: Resetting bearer <eth:team0>
[  115.096227][ T9183] tun0: tun_chr_ioctl cmd 1074025672
[  115.098298][ T9183] tun0: ignored: set checksum disabled
[  115.117281][ T9183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.120221][ T9183] syzkaller0: entered promiscuous mode
[  115.123510][ T9183] syzkaller0: entered allmulticast mode
[  115.130124][ T9183] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  115.142204][ T9183] tipc: Resetting bearer <eth:syzkaller0>
[  115.146559][ T9182] tipc: Resetting bearer <eth:syzkaller0>
[  115.155384][ T9182] tipc: Disabling bearer <eth:syzkaller0>
[  115.313968][ T9199] tc_dump_action: action bad kind
[  115.353671][ T9201] tipc: Resetting bearer <eth:team0>
[  115.405531][ T9212] sctp: [Deprecated]: syz.0.1058 (pid 9212) Use of int in max_burst socket option.
[  115.405531][ T9212] Use struct sctp_assoc_value instead
[  115.452168][ T9215] erspan0: left allmulticast mode
[  116.242328][ T9215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.308304][ T9225] erspan0: entered promiscuous mode
[  116.310538][ T9225] gretap0: entered promiscuous mode
[  116.316139][ T9225] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  116.319361][ T9225] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  116.536913][ T9247] syz_tun: entered allmulticast mode
[  116.555787][ T9246] syz_tun: left allmulticast mode
[  116.603198][ T9250] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  116.777429][ T9257] openvswitch: netlink: Flow key attr not present in new flow.
[  116.912046][ T9272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.923909][ T9272] tipc: Disabling bearer <eth:syzkaller0>
[  117.172485][ T9288] vlan0: entered allmulticast mode
[  117.174130][ T9288] bridge0: entered allmulticast mode
[  117.175873][ T9288] bridge13: port 1(vlan0) entered blocking state
[  117.177839][ T9288] bridge13: port 1(vlan0) entered disabled state
[  117.182874][ T9288] vlan0: entered promiscuous mode
[  117.185038][ T9288] bridge0: entered promiscuous mode
[  117.192438][ T9288] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  117.254960][ T9292] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  117.258427][ T9292] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  117.263185][ T9292] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  117.298166][ T9292] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  117.302147][ T9292] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  117.305647][ T9292] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  117.345451][ T9303] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  117.348307][ T9303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.356424][ T9292] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  117.361949][ T9292] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  117.365325][ T9292] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  117.388743][ T9306] tipc: Resetting bearer <eth:team0>
[  117.446218][ T9306] tipc: Disabling bearer <eth:team0>
[  117.462016][ T9292] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  117.465949][ T9292] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  117.469956][ T9292] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  117.547848][ T8303] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 53722 - 0
[  117.550552][ T8303] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 35739 - 0
[  117.554031][ T8303] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  117.561100][ T8303] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 53722 - 0
[  117.563736][ T8303] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 35739 - 0
[  117.566436][ T8303] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  117.575105][ T5705] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 53722 - 0
[  117.577859][ T5705] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 35739 - 0
[  117.580586][ T5705] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  117.589917][ T5705] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 53722 - 0
[  117.593320][ T5705] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 35739 - 0
[  117.595912][ T5705] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  117.640358][ T9310] __nla_validate_parse: 27 callbacks suppressed
[  117.640370][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'.
[  117.648442][ T9310] validate_nla: 9 callbacks suppressed
[  117.648454][ T9310] netlink: 'syz.2.1091': attribute type 5 has an invalid length.
[  117.662202][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1091'.
[  117.721932][ T9320] netlink: 'syz.2.1095': attribute type 1 has an invalid length.
[  117.742448][ T9320] bond4 (unregistering): Released all slaves
[  117.852639][ T9329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1097'.
[  117.942280][ T9334] netlink: 'syz.2.1098': attribute type 13 has an invalid length.
[  117.944859][ T9334] netlink: 'syz.2.1098': attribute type 17 has an invalid length.
[  117.951384][ T9334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.984816][ T9332] lo speed is unknown, defaulting to 1000
[  118.258731][ T9344] netlink: 'syz.1.1102': attribute type 1 has an invalid length.
[  118.281905][ T9344] 8021q: adding VLAN 0 to HW filter on device bond4
[  118.295925][ T9344] 8021q: adding VLAN 0 to HW filter on device bond4
[  118.299187][ T9344] bond4: (slave vcan0): The slave device specified does not support setting the MAC address
[  118.306266][ T9344] bond4: (slave vcan0): Error -95 calling set_mac_address
[  118.344387][ T9346] gretap1: entered promiscuous mode
[  118.353946][ T9346] bond4: (slave gretap1): making interface the new active one
[  118.357912][ T9346] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  118.370284][ T9344] macvlan2: entered promiscuous mode
[  118.372185][ T9344] macvlan2: entered allmulticast mode
[  118.375136][ T9344] bond4: entered promiscuous mode
[  118.378091][ T9344] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  118.383415][ T9344] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  118.388570][ T9344] bond4: left promiscuous mode
[  118.514877][ T9350] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  118.537234][ T9350] 8021q: adding VLAN 0 to HW filter on device bond5
[  118.665009][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'.
[  118.675421][ T9361] tc_dump_action: action bad kind
[  118.759964][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'.
[  118.962390][ T9338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.989899][ T9398] netlink: 'syz.1.1117': attribute type 3 has an invalid length.
[  118.990102][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1116'.
[  118.996285][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'.
[  119.035260][ T9404] syz_tun: entered allmulticast mode
[  119.038047][ T9404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1119'.
[  119.043405][ T9403] syz_tun: left allmulticast mode
[  119.048992][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'.
[  119.054458][ T9402] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  119.057201][ T9402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.083154][ T9406] geneve4: entered promiscuous mode
[  119.181577][ T9414] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  119.184920][ T9414] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  119.188047][ T9414] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  119.207743][ T5916] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1
[  119.210699][ T5916] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22
[  119.234108][ T9414] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  119.237113][ T9414] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  119.240221][ T9414] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  119.253474][ T9423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1125'.
[  119.256264][ T9423] openvswitch: netlink: Flow key attr not present in new flow.
[  119.279133][ T9414] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  119.282437][ T9414] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  119.285565][ T9414] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  119.357811][ T9414] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  119.361436][ T9414] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  119.364672][ T9414] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  119.689511][ T9442] xt_socket: unknown flags 0xfc
[  120.019278][ T9465] netlink: 'syz.1.1141': attribute type 5 has an invalid length.
[  120.069119][ T9467] netlink: 'syz.2.1142': attribute type 11 has an invalid length.
[  120.089471][ T9475] netlink: 'syz.1.1145': attribute type 1 has an invalid length.
[  120.107184][ T9475] bond6 (unregistering): Released all slaves
[  120.356087][ T9495] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  120.396453][ T9499] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  120.405799][ T9499] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  120.446830][ T9503] tc_dump_action: action bad kind
[  120.597674][ T9514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.600582][ T9514] syzkaller0: entered promiscuous mode
[  120.604581][ T9514] syzkaller0: entered allmulticast mode
[  120.609059][ T9514] tipc: Resetting bearer <eth:syzkaller0>
[  120.613524][ T9513] tipc: Resetting bearer <eth:syzkaller0>
[  120.621808][ T9513] tipc: Disabling bearer <eth:syzkaller0>
[  121.176160][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 53722 - 0
[  121.178844][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 35739 - 0
[  121.182267][   T12] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  121.190308][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 53722 - 0
[  121.193134][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 35739 - 0
[  121.196362][   T12] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  121.205041][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 53722 - 0
[  121.207792][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 35739 - 0
[  121.210437][   T12] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  121.219100][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 53722 - 0
[  121.221832][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 35739 - 0
[  121.224794][   T12] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  121.493638][ T9532] syz_tun: entered allmulticast mode
[  121.497191][ T9531] syz_tun: left allmulticast mode
[  121.605448][ T9541] openvswitch: netlink: Flow key attr not present in new flow.
[  121.671795][ T9547] lo speed is unknown, defaulting to 1000
[  121.674125][ T9547] lo speed is unknown, defaulting to 1000
[  121.676778][ T9547] lo speed is unknown, defaulting to 1000
[  121.690181][ T9547] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  121.706793][ T9547] lo speed is unknown, defaulting to 1000
[  121.710155][ T9547] lo speed is unknown, defaulting to 1000
[  121.714505][ T9547] lo speed is unknown, defaulting to 1000
[  121.904665][ T9566] sit0: entered promiscuous mode
[  122.028919][ T9571] lo speed is unknown, defaulting to 1000
[  122.033812][ T9571] lo speed is unknown, defaulting to 1000
[  122.061041][ T9576] siw: device registration error -23
[  122.417960][ T9591] net_ratelimit: 2 callbacks suppressed
[  122.417965][ T9591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.479877][ T9596] bond4 (unregistering): Released all slaves
[  122.598246][ T9605] macsec1: entered promiscuous mode
[  122.599920][ T9605] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  122.614368][ T9605] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  122.678268][ T9609] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  122.714339][ T9614] __nla_validate_parse: 96 callbacks suppressed
[  122.714350][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1197'.
[  122.915289][ T9628] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.933490][ T9632] validate_nla: 4 callbacks suppressed
[  122.933501][ T9632] netlink: 'syz.0.1204': attribute type 1 has an invalid length.
[  122.982190][ T9639] tc_dump_action: action bad kind
[  123.132218][ T9646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1211'.
[  123.135117][ T9646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1211'.
[  123.368364][ T9669] lo speed is unknown, defaulting to 1000
[  123.371642][ T9669] lo speed is unknown, defaulting to 1000
[  123.432917][ T9673] netlink: 'syz.1.1219': attribute type 3 has an invalid length.
[  123.435826][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'.
[  123.734182][ T9679] syz_tun: entered allmulticast mode
[  123.742863][ T9679] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1221'.
[  123.747147][ T9678] syz_tun: left allmulticast mode
[  123.817865][ T9685] netlink: 'syz.2.1224': attribute type 1 has an invalid length.
[  123.825686][ T9686] netlink: 'syz.2.1224': attribute type 1 has an invalid length.
[  123.848319][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1225'.
[  123.852915][ T5294] udevd[5294]: worker [9026] terminated by signal 33 (Unknown signal 33)
[  123.855655][ T5294] udevd[5294]: worker [9026] failed while handling '/fs/nfs/net/nfs_client'
[  123.857910][ T9689] openvswitch: netlink: Flow key attr not present in new flow.
[  123.909267][ T9693] dvmrp1: left allmulticast mode
[  124.346734][ T9704] netlink: 'syz.1.1231': attribute type 21 has an invalid length.
[  124.349458][ T9704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1231'.
[  124.856115][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'.
[  124.858975][ T9725] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  124.861847][ T9725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.886977][ T9728] netlink: 'syz.2.1242': attribute type 4 has an invalid length.
[  124.889496][ T9728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1242'.
[  124.975616][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'.
[  125.057760][ T9743] netlink: 'syz.2.1246': attribute type 5 has an invalid length.
[  125.234168][ T9764] netlink: 'syz.0.1251': attribute type 1 has an invalid length.
[  125.258207][ T9764] bond2 (unregistering): Released all slaves
[  125.526575][ T9791] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  125.685626][ T9801] veth0_to_team: left promiscuous mode
[  125.687680][ T9801] batadv_slave_0: left promiscuous mode
[  125.695981][ T9801] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  125.701747][ T9801] bond2: left promiscuous mode
[  125.717140][ T5916] lo speed is unknown, defaulting to 1000
[  125.718988][ T5916] syz2: Port: 1 Link DOWN
[  125.720564][ T9803] tc_dump_action: action bad kind
[  125.748603][ T9801] hsr_slave_0: left promiscuous mode
[  125.896698][ T9815] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  125.901497][ T9815] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  125.953163][ T9817] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  125.956406][ T9817] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  125.959778][ T9817] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  126.010104][ T9826] netlink: 'syz.1.1272': attribute type 3 has an invalid length.
[  126.016439][ T9817] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  126.019691][ T9817] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  126.024445][ T9817] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  126.077043][ T9817] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  126.081168][ T9817] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  126.084764][ T9817] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  126.120428][ T9832] syz_tun: entered allmulticast mode
[  126.126818][ T9831] syz_tun: left allmulticast mode
[  126.138377][ T9817] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53722 - 0
[  126.144877][ T9817] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 35739 - 0
[  126.148313][ T9817] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  126.235878][ T5705] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 53722 - 0
[  126.238649][ T5705] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 35739 - 0
[  126.244247][ T5705] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  126.254041][ T5705] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 53722 - 0
[  126.256804][ T5705] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 35739 - 0
[  126.259539][ T5705] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  126.273893][ T5705] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 53722 - 0
[  126.276582][ T5705] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 35739 - 0
[  126.279280][ T5705] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  126.285243][ T5705] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 53722 - 0
[  126.285626][ T9841] netlink: 'syz.1.1277': attribute type 39 has an invalid length.
[  126.290648][ T5705] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 35739 - 0
[  126.294967][ T5705] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  126.323169][ T9843] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  126.442114][ T9849] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  126.513501][ T9855] ieee802154 phy0 wpan0: encryption failed: -22
[  126.565074][ T9862] ieee802154 phy0 wpan0: encryption failed: -22
[  126.852942][ T9893] bond6 (unregistering): Released all slaves
[  127.037345][ T9917] veth0_vlan: left promiscuous mode
[  127.039794][ T9917] veth0_vlan: entered promiscuous mode
[  127.105988][   T10] lo speed is unknown, defaulting to 1000
[  127.124093][ T9931] IPVS: Error joining to the multicast group
[  127.153640][ T9937] tc_dump_action: action bad kind
[  127.217564][ T9941] veth0_vlan: left promiscuous mode
[  127.219916][ T9941] veth0_vlan: entered promiscuous mode
[  127.458930][ T9975] syz_tun: entered allmulticast mode
[  127.488018][ T9974] syz_tun: left allmulticast mode
[  127.725438][T10000] __nla_validate_parse: 28 callbacks suppressed
[  127.725449][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1335'.
[  127.735105][T10000] ==================================================================
[  127.737585][T10000] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  127.740049][T10000] Read of size 1 at addr ffff88802ee50c30 by task syz.0.1335/10000
[  127.743197][T10000] 
[  127.743973][T10000] CPU: 1 UID: 0 PID: 10000 Comm: syz.0.1335 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0 PREEMPT(full) 
[  127.743985][T10000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.743990][T10000] Call Trace:
[  127.744001][T10000]  <TASK>
[  127.744011][T10000]  dump_stack_lvl+0x189/0x250
[  127.744025][T10000]  ? __kasan_check_byte+0x12/0x40
[  127.744038][T10000]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.744046][T10000]  ? lock_release+0x4b/0x3e0
[  127.744059][T10000]  ? __virt_addr_valid+0x4a5/0x5c0
[  127.744070][T10000]  print_report+0xca/0x240
[  127.744078][T10000]  ? xfrm_state_find+0x2cf2/0x5400
[  127.744089][T10000]  kasan_report+0x118/0x150
[  127.744099][T10000]  ? xfrm_state_find+0x2cf2/0x5400
[  127.744113][T10000]  xfrm_state_find+0x2cf2/0x5400
[  127.744124][T10000]  ? __lock_acquire+0xab9/0xd20
[  127.744139][T10000]  ? xfrm_state_find+0x1da/0x5400
[  127.744151][T10000]  ? __pfx_xfrm_state_find+0x10/0x10
[  127.744165][T10000]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  127.744178][T10000]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  127.744193][T10000]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  127.744204][T10000]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  127.744213][T10000]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  127.744228][T10000]  ? xfrm_expand_policies+0x41f/0x6a0
[  127.744238][T10000]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  127.744248][T10000]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  127.744259][T10000]  ? __lock_acquire+0xab9/0xd20
[  127.744271][T10000]  xfrm_lookup_route+0x3c/0x1c0
[  127.744280][T10000]  __ip4_datagram_connect+0x9a5/0x1270
[  127.744292][T10000]  udp_connect+0x33/0x1f0
[  127.744303][T10000]  __sys_connect+0x316/0x440
[  127.744314][T10000]  ? __pfx___sys_connect+0x10/0x10
[  127.744328][T10000]  __x64_sys_connect+0x7a/0x90
[  127.744339][T10000]  do_syscall_64+0xfa/0x3b0
[  127.744350][T10000]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.744359][T10000]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.744367][T10000]  ? exc_page_fault+0x9f/0xf0
[  127.744377][T10000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.744385][T10000] RIP: 0033:0x7f084958ebe9
[  127.744393][T10000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.744400][T10000] RSP: 002b:00007f084a347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  127.744408][T10000] RAX: ffffffffffffffda RBX: 00007f08497b5fa0 RCX: 00007f084958ebe9
[  127.744414][T10000] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000007
[  127.744419][T10000] RBP: 00007f0849611e19 R08: 0000000000000000 R09: 0000000000000000
[  127.744424][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.744428][T10000] R13: 00007f08497b6038 R14: 00007f08497b5fa0 R15: 00007fffcd291128
[  127.744437][T10000]  </TASK>
[  127.744440][T10000] 
[  127.830474][T10000] Allocated by task 7799:
[  127.831824][T10000]  kasan_save_track+0x3e/0x80
[  127.833667][T10000]  __kasan_slab_alloc+0x6c/0x80
[  127.835577][T10000]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  127.837480][T10000]  xfrm_state_alloc+0x24/0x2f0
[  127.838974][T10000]  __find_acq_core+0x8a7/0x1c00
[  127.840482][T10000]  xfrm_find_acq+0x78/0xa0
[  127.841854][T10000]  xfrm_alloc_userspi+0x6b3/0xc90
[  127.843427][T10000]  xfrm_user_rcv_msg+0x7a3/0xab0
[  127.844953][T10000]  netlink_rcv_skb+0x208/0x470
[  127.846431][T10000]  xfrm_netlink_rcv+0x79/0x90
[  127.847879][T10000]  netlink_unicast+0x82f/0x9e0
[  127.849360][T10000]  netlink_sendmsg+0x805/0xb30
[  127.850909][T10000]  __sock_sendmsg+0x21c/0x270
[  127.852419][T10000]  ____sys_sendmsg+0x505/0x830
[  127.853895][T10000]  ___sys_sendmsg+0x21f/0x2a0
[  127.855332][T10000]  __x64_sys_sendmsg+0x19b/0x260
[  127.856861][T10000]  do_syscall_64+0xfa/0x3b0
[  127.858276][T10000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.860288][T10000] 
[  127.861117][T10000] Freed by task 6303:
[  127.862529][T10000]  kasan_save_track+0x3e/0x80
[  127.864270][T10000]  kasan_save_free_info+0x46/0x50
[  127.865831][T10000]  __kasan_slab_free+0x5b/0x80
[  127.867316][T10000]  kmem_cache_free+0x18f/0x400
[  127.868824][T10000]  xfrm_state_gc_task+0x52d/0x6b0
[  127.870613][T10000]  process_scheduled_works+0xae1/0x17b0
[  127.872355][T10000]  worker_thread+0x8a0/0xda0
[  127.873886][T10000]  kthread+0x711/0x8a0
[  127.875175][T10000]  ret_from_fork+0x3fc/0x770
[  127.876622][T10000]  ret_from_fork_asm+0x1a/0x30
[  127.878148][T10000] 
[  127.878916][T10000] The buggy address belongs to the object at ffff88802ee50900
[  127.878916][T10000]  which belongs to the cache xfrm_state of size 928
[  127.883167][T10000] The buggy address is located 816 bytes inside of
[  127.883167][T10000]  freed 928-byte region [ffff88802ee50900, ffff88802ee50ca0)
[  127.887361][T10000] 
[  127.888113][T10000] The buggy address belongs to the physical page:
[  127.890091][T10000] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ee51200 pfn:0x2ee50
[  127.893208][T10000] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  127.895806][T10000] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  127.898120][T10000] page_type: f5(slab)
[  127.899368][T10000] raw: 00fff00000000040 ffff88801af23780 dead000000000122 0000000000000000
[  127.902028][T10000] raw: ffff88802ee51200 00000000800e000b 00000000f5000000 0000000000000000
[  127.904687][T10000] head: 00fff00000000040 ffff88801af23780 dead000000000122 0000000000000000
[  127.907348][T10000] head: ffff88802ee51200 00000000800e000b 00000000f5000000 0000000000000000
[  127.910000][T10000] head: 00fff00000000002 ffffea0000bb9401 00000000ffffffff 00000000ffffffff
[  127.912797][T10000] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  127.915461][T10000] page dumped because: kasan: bad access detected
[  127.917434][T10000] page_owner tracks the page as allocated
[  127.919199][T10000] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7122, tgid 7118 (syz.1.385), ts 77296321124, free_ts 77292221119
[  127.924954][T10000]  post_alloc_hook+0x240/0x2a0
[  127.926460][T10000]  get_page_from_freelist+0x21e4/0x22c0
[  127.928192][T10000]  __alloc_frozen_pages_noprof+0x181/0x370
[  127.930012][T10000]  alloc_pages_mpol+0x232/0x4a0
[  127.931520][T10000]  allocate_slab+0x8a/0x370
[  127.932946][T10000]  ___slab_alloc+0xbeb/0x1410
[  127.934405][T10000]  kmem_cache_alloc_noprof+0x283/0x3c0
[  127.936086][T10000]  xfrm_state_alloc+0x24/0x2f0
[  127.937565][T10000]  pfkey_add+0x6e4/0x2e00
[  127.938916][T10000]  pfkey_sendmsg+0xbfe/0x1090
[  127.940397][T10000]  __sock_sendmsg+0x21c/0x270
[  127.941871][T10000]  ____sys_sendmsg+0x505/0x830
[  127.943360][T10000]  ___sys_sendmsg+0x21f/0x2a0
[  127.944821][T10000]  __x64_sys_sendmsg+0x19b/0x260
[  127.946345][T10000]  do_syscall_64+0xfa/0x3b0
[  127.947761][T10000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.949578][T10000] page last free pid 7110 tgid 7110 stack trace:
[  127.951534][T10000]  __free_frozen_pages+0xbc4/0xd30
[  127.953136][T10000]  free_large_kmalloc+0x13a/0x1f0
[  127.954702][T10000]  device_release+0x9c/0x1c0
[  127.956136][T10000]  kobject_put+0x22b/0x480
[  127.957522][T10000]  netdev_run_todo+0xd2e/0xea0
[  127.959006][T10000]  tun_chr_close+0x13c/0x1c0
[  127.960441][T10000]  __fput+0x44c/0xa70
[  127.961708][T10000]  task_work_run+0x1d4/0x260
[  127.963136][T10000]  exit_to_user_mode_loop+0xec/0x110
[  127.964795][T10000]  do_syscall_64+0x2bd/0x3b0
[  127.966224][T10000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.968057][T10000] 
[  127.968831][T10000] Memory state around the buggy address:
[  127.970643][T10000]  ffff88802ee50b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.973112][T10000]  ffff88802ee50b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.975564][T10000] >ffff88802ee50c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.978035][T10000]                                      ^
[  127.979767][T10000]  ffff88802ee50c80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  127.982217][T10000]  ffff88802ee50d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  127.984829][T10000] ==================================================================
[  127.992293][T10000] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  127.994678][T10000] CPU: 1 UID: 0 PID: 10000 Comm: syz.0.1335 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691-dirty #0 PREEMPT(full) 
[  127.999419][T10000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.003487][T10000] Call Trace:
[  128.004720][T10000]  <TASK>
[  128.005689][T10000]  dump_stack_lvl+0x99/0x250
[  128.007543][T10000]  ? __asan_memcpy+0x40/0x70
[  128.009343][T10000]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.011370][T10000]  ? __pfx__printk+0x10/0x10
[  128.013223][T10000]  vpanic+0x281/0x750
[  128.014810][T10000]  ? preempt_schedule+0xae/0xc0
[  128.016727][T10000]  ? __pfx_vpanic+0x10/0x10
[  128.018512][T10000]  ? preempt_schedule_common+0x83/0xd0
[  128.020663][T10000]  ? preempt_schedule+0xae/0xc0
[  128.022563][T10000]  ? __pfx_preempt_schedule+0x10/0x10
[  128.024657][T10000]  panic+0xb9/0xc0
[  128.026113][T10000]  ? __pfx_panic+0x10/0x10
[  128.027888][T10000]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  128.029906][T10000]  ? xfrm_state_find+0x2cf2/0x5400
[  128.031506][T10000]  check_panic_on_warn+0x89/0xb0
[  128.033061][T10000]  ? xfrm_state_find+0x2cf2/0x5400
[  128.034674][T10000]  end_report+0x78/0x160
[  128.036291][T10000]  kasan_report+0x129/0x150
[  128.038082][T10000]  ? xfrm_state_find+0x2cf2/0x5400
[  128.040026][T10000]  xfrm_state_find+0x2cf2/0x5400
[  128.041969][T10000]  ? __lock_acquire+0xab9/0xd20
[  128.043883][T10000]  ? xfrm_state_find+0x1da/0x5400
[  128.045872][T10000]  ? __pfx_xfrm_state_find+0x10/0x10
[  128.047932][T10000]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  128.050307][T10000]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  128.052600][T10000]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  128.055166][T10000]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  128.057474][T10000]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  128.059822][T10000]  ? xfrm_expand_policies+0x41f/0x6a0
[  128.061930][T10000]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  128.064016][T10000]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  128.066290][T10000]  ? __lock_acquire+0xab9/0xd20
[  128.068207][T10000]  xfrm_lookup_route+0x3c/0x1c0
[  128.070107][T10000]  __ip4_datagram_connect+0x9a5/0x1270
[  128.072242][T10000]  udp_connect+0x33/0x1f0
[  128.073955][T10000]  __sys_connect+0x316/0x440
[  128.075774][T10000]  ? __pfx___sys_connect+0x10/0x10
[  128.077925][T10000]  __x64_sys_connect+0x7a/0x90
[  128.079807][T10000]  do_syscall_64+0xfa/0x3b0
[  128.081569][T10000]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.083587][T10000]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.085947][T10000]  ? exc_page_fault+0x9f/0xf0
[  128.087807][T10000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.090096][T10000] RIP: 0033:0x7f084958ebe9
[  128.091853][T10000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.099120][T10000] RSP: 002b:00007f084a347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  128.102345][T10000] RAX: ffffffffffffffda RBX: 00007f08497b5fa0 RCX: 00007f084958ebe9
[  128.105329][T10000] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000007
[  128.108273][T10000] RBP: 00007f0849611e19 R08: 0000000000000000 R09: 0000000000000000
[  128.110744][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.113207][T10000] R13: 00007f08497b6038 R14: 00007f08497b5fa0 R15: 00007fffcd291128
[  128.116061][T10000]  </TASK>
[  128.117854][T10000] Kernel Offset: disabled
[  128.119224][T10000] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:49:41  Registers:
info registers vcpu 0

CPU#0
RAX=7ad08580bc3a2200 RBX=ffffffff81968308 RCX=7ad08580bc3a2200 RDX=0000000000000001
RSI=ffffffff8d9b6ed3 RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32712ff8 CR3=0000000026b42000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0849612e53
XMM06=0000000000000000 00007f0849612e4d XMM07=0000000000000000 00007f0849612e61
XMM08=0000000000000000 00007f0849612ee7 XMM09=0000000000000000 00007f0849612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001679 RDI=000000000000167a RBP=ffffffff99dee630 RSP=ffffc90007736db0
R8 =ffff8880207d0237 R9 =1ffff110040fa046 R10=dffffc0000000000 R11=ffffffff854efde0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efe57 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f084a3476c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f68ed735440 CR3=000000010f0ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffff000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f084a2ed100 00007f0849787460 XMM05=00007f0849787478 00007f08497874c0
XMM06=00007f08497874b8 00007f08497874b0 XMM07=00007f08497874a8 00007f08497874a0
XMM08=0000000000000000 00007f0849612ee7 XMM09=0000000000000000 00007f0849612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
