last executing test programs:

33.836637275s ago: executing program 1 (id=1582):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
listen(r0, 0x0) (async, rerun: 32)
r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) (rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64)
openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) (rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r6 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64)
socket(0x10, 0x80002, 0x0) (rerun: 64)
socket$rds(0x15, 0x5, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002700000000000000070000001c0000fffffffb000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x400)

27.23302434s ago: executing program 1 (id=1582):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
listen(r0, 0x0) (async, rerun: 32)
r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) (rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64)
openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) (rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r6 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64)
socket(0x10, 0x80002, 0x0) (rerun: 64)
socket$rds(0x15, 0x5, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002700000000000000070000001c0000fffffffb000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x400)

21.009301217s ago: executing program 1 (id=1582):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
listen(r0, 0x0) (async, rerun: 32)
r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) (rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64)
openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) (rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r6 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64)
socket(0x10, 0x80002, 0x0) (rerun: 64)
socket$rds(0x15, 0x5, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002700000000000000070000001c0000fffffffb000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x400)

14.603961749s ago: executing program 1 (id=1582):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
listen(r0, 0x0) (async, rerun: 32)
r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) (rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64)
openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) (rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r6 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64)
socket(0x10, 0x80002, 0x0) (rerun: 64)
socket$rds(0x15, 0x5, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002700000000000000070000001c0000fffffffb000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x400)

8.189606495s ago: executing program 1 (id=1582):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
listen(r0, 0x0) (async, rerun: 32)
r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) (rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64)
openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) (rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r6 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64)
socket(0x10, 0x80002, 0x0) (rerun: 64)
socket$rds(0x15, 0x5, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002700000000000000070000001c0000fffffffb000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x400)

2.065378674s ago: executing program 0 (id=1861):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e23, @remote}, {0x2, 0x4e25, @loopback}, 0x4, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8, 0x1550b5e4, 0xa})
write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x4}, 0x94)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000180)={0x5, 0x2, {0x6, @struct={0x5, 0x8}, <r5=>0x0, 0x9, 0x6, 0x8457, 0x5271, 0x1, 0x8, @struct={0x5, 0x8000}, 0x8000, 0xe, [0x20000, 0x200, 0x3, 0xffffffffffffffff, 0x9, 0x1]}, {0x10000, @struct={0x9, 0x7ff}, 0x0, 0x3ff, 0xa, 0x5, 0x1f86, 0x8, 0x0, @struct={0x5, 0x8}, 0x2, 0x3, [0x3ff, 0x9, 0xfffffffffffffffa, 0x7f, 0x6, 0x8]}, {0x6, @struct={0x4c1, 0x7147}, 0x0, 0x1, 0x3, 0x8afc, 0x79dd, 0x7, 0x49a, @usage=0x10000, 0x4, 0x6, [0x0, 0xb, 0xdf, 0xffff, 0x8, 0x2]}, {0x1, 0x5, 0xfff}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000580)={r5, 0x10000, 0xdd2, 0x1})

1.933936901s ago: executing program 0 (id=1862):
r0 = socket$kcm(0x2, 0x8, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10, 0x0}, 0x8000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=r3, @ANYBLOB="3d2182e9f5d8ab1250d4d90200000000000062c2d98031491a34b9b299ce72ce24b58c4a878d7f4b4516d7dd693e21496601ca4ef612e72ca1b7ae7c26bbae7a1432920247186d5c5730ca000000009ca20000000000000000827c6d7ac63f5eaf0000000000000000b83afef0d86ccfb0071a6fe3cd64750d631a3e1d429ed91502bf13cfdb1af52ed97e1fe3e1f14363b5a7e73c2edf0a5ec48bfd6beba8e32002a1c0039aded8a1f281f05f9c8af08618c3f58d553c67d7a29125d059af677ae90000000000000000470adebe8ccfc9cdccf7df4a67c0644e56a1ee895c5c60dba9d9c1"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x20000000000000d8, &(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=r4], &(0x7f0000000240)='syzkaller\x00', 0x40000003, 0x0, 0x0, 0x1e00, 0x54, '\x00', 0x0, @fallback=0x9a523aa828a497ef, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='fsi_master_rw_result\x00', r5}, 0x18)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'pimreg\x00'})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xcce43, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x4000})
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x7a05, 0x1700)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4b, 0x0, &(0x7f00000006c0)="8393609abe190d5b3fca4116b6dec0cc593cd4871b01101c53347c1723c13e4340c2adb20daab89e8c12c1ede1934fb2340f81e4eafcf7b51c5c6efe2ee0b606e0746d3ac9eb9a3c38fe63", 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="966bcb1dc5b002227c001c2ee0d21f1b04e74225c3fd1938000632aacc9565ecb7f90e4e673d647918817a2431810982432167d7c293157c6c74ff98c848b0b91e75e0afab61b66d891871ae1122", 0x4e}], 0x1}, 0x40880)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@delchain={0x34, 0x65, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff2}, {0x2, 0xffff}, {0x5, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x10}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x34}}, 0xc0d8)
writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b36, &(0x7f0000000180)={'wlan0\x00'})

1.795210991s ago: executing program 0 (id=1863):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0x48, 0x1}, {0x28, 0x4, 0x76, 0xfffff038}, {0x6, 0x25, 0x3, 0x207}]}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r2, 0x0, 0x31, 0x0, &(0x7f0000001840))
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f00000007c0)="876ddb6db62ac61d13e7ee076efd761bd6951119a11234b8362c3708da7b3c90a9b263cb35a76b6ca55bbf21a278075f525863874974ccddd4047d492b16667d388333a10a430aaffe941be24ac6bedea362342546d47547ea8438384b8570b8e4dc53244b35b89cca8f9637dcd277fc46d51620cfefda2739086fcd207125297ba7b7b34a38c0c8002448320bcac022ae067060addb6ac812b3fadbdd98e6c5d9df848d7bf58ff6d6f6d913c7902860c59b2d91674c49eafd6afa", 0xbb}, {&(0x7f0000000240)="c06d8b19fa85da6a329d7c3761d2af592ce81b2dae1d3779758ed3eb990a92d3aba68f5735830653c132ee34208109ac26379fec18c7a14bc49f2085a4aabc501485c28fc61b2a4323b2f5f71c26e6296ecbfd37483c1939229a96d24c2b584a7883a60bc730e09f506f3910f173bb000000000000000000", 0x78}, {&(0x7f0000000080)="e420b01696497352fca8cb26b63c9378e60c92a1faf35c853a8426e270468e7a71480ac04407fcbe892ca4e95f000f1b6af94523", 0x34}, {&(0x7f0000000380)="e855b5e20f7e4e5e043ee477237578bc390f29791a5794a71a2ede2dfdffaaf798c91828769fdb72ce25dbc227d1c7f83a8f8abeff08666c3ace2ee0e584bd2d6ded604634a6cb289507ea16b950f7533435e3e3df586be400242bb85ca1fdc28175ffd6c15ce454598a74688686a99a5f782ecec5c654cfec9b833f0b205f4baf286afaf852e826139a46", 0x8b}, {&(0x7f0000000440)="8fc9fabe790c408ba264441b0524e396d9645608db58786074d68b4ce928f796cefd882a5f32de6dab9f10e3ae19ec009b15b3a5753cd61c013e0d33d74d373b9f12fa7a06975f6ad9672e7896a4e613edd99c", 0x53}, {&(0x7f00000004c0)="5a064b9f44df4db76d79b67bca60a83b50a88d59766878b6083760de92d0a3cdb71dc3cc45c3d665eb7ebc832d615c153467e2d6a7790bc14b28f2c2e84f76a7b29d8b36b25d388e2b921b8c415f87f7cbd9d401b9a29b23acab0a0044bfff43a2dc5b8bb87086caab741af4093f645c8c0abcec1885e2125cc2bfc573a65b0c5e86101e2f", 0x85}, {&(0x7f0000000580)="b880ea30ce4b3521a5c7cc450135f43d7a3a818578f85ef3a7a54be24ae22b7a1501fa72133f50cac0937f798d60e33073224e7669fc7e72aa39d0fc0ae10b2b9ca303647e518db5c2abfdf10dec1e9882237fea2b364897ac53fc7e8ba9ed40ed97a72b6de8297b8f984eef732eb5e1f95e723fff1241a8e22409faecd22353f4fb99b06962b5dfc97eb84097600633e1dc45b3b2139dc1747243232cc293d10080986f75a0e10e528daa4673508b06468bce2bbc3e52d0d03b4b16bac8292158959b44bf901b9c5dee31031cbef0da881fefa0c6c585696712674e7201ad5c67b4a7c9897064e9a2a3eb77f6b1b5a9c70d0003", 0xf4}], 0x7, &(0x7f00000007c0)}}, {{&(0x7f0000000680)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000008c0)="12f46bddb6ebb7b593c792399a2d3e1b07656f303bcc17a02883902e64a6d356dbbeb2103a36be482d799767484a44d213ef2ae187849b92760feeb8e280de40859683f23d0601a3c61942767b1446583a589acaf636436e8519c738a7c5d0138f2e78d49a638ad35f4030e92907593fe4db344c0a062b51e8b7c935d10f9fce16deec018c70bfcfdea1b136d7c24dacb3a8e26ecb4588fefa5bbff696a4a2a4b54df14cc26de9178f83ff91697cebc9bb0482942f211e93abed33de4245fb7dd93c2e6131ac190b21499b050427a9f1cf2c9e9efc", 0xd5}], 0x1}}], 0x2, 0x8004)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="50c144f3469f785f240000001a00010000000000000000000a0000000000000000000000060015000500000005001400130000000c00168008000700060000000500140002000000100016800c000100"], 0x50}, 0x1, 0x0, 0x0, 0x4f7866e933d6793d}, 0x0)

1.725445752s ago: executing program 0 (id=1865):
r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
recvfrom$packet(r0, &(0x7f0000000040)=""/135, 0x87, 0x10120, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = gettid()
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ext4_request_inode\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r3, 0x0, 0x4, &(0x7f0000000180)='\xccq%\x00'}, 0x30)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000200)={0x4, 0x1}, 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000240))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x1ff)
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000300), 0x4)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000380)=0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7e0f180f, 0x3fb2, 0x6, 0x0, r4, 0x9, '\x00', r5, r4, 0x0, 0x0, 0x0, 0x1}, 0x50)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r4)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
setsockopt$inet6_int(r4, 0x29, 0xcb, &(0x7f00000005c0)=0xfffffffa, 0x4)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000600))
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@gettaction={0x20, 0x32, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x1)
r8 = socket$netlink(0x10, 0x3, 0xa)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000800))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r4)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r9, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xa3, 0x6}, {0x5, 0x3}, {0x3e, 0x1}, {0x9, 0x7}, {0xae, 0x7}, {0x3}, {0x8, 0x6}, {0x1}, {0x81, 0x6}, {0x3}, {0xf8, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x5, 0x2}], "cffc5d8dd790d786"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40044)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r8)
sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x58, r10, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x700, 0x41}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x9}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xe2}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x17, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfee}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa}, @ldst={0x3, 0x2, 0x6, 0x8, 0xa, 0xfffffffffffffff4, 0xffffffffffffffff}, @generic={0x3, 0xa, 0x1, 0xb, 0x10001}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8001}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x8, 0x1f, &(0x7f0000000c00)=""/31, 0x41000, 0x6, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000000c40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0x10, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r4, r6, r6, r6, r4, r6], &(0x7f0000000d00)=[{0x1, 0x1, 0xf, 0x2}, {0x1, 0x5, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x4}, {0x0, 0x2, 0x9, 0x2}, {0x4, 0x3, 0x7, 0xb}], 0x10, 0x2}, 0x94)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000e40)={0x2, {{0x2, 0x4e23, @loopback}}}, 0x88)
bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0xe, 0xffffffff, 0x4207a562, 0x2, 0x3c040, r6, 0xb7a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @value=r4, @void, @value=r4}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={r4, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000fc0)=[0x0], &(0x7f0000001000), 0x0, 0x64, &(0x7f0000001040)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0x84, 0x8, 0x8, &(0x7f0000001100)}}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@getneightbl={0x14, 0x42, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x3)
socket$nl_route(0x10, 0x3, 0x0)

1.680916544s ago: executing program 1 (id=1582):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
listen(r0, 0x0) (async, rerun: 32)
r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) (rerun: 32)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 64)
openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) (rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r6 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002f00)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3ff, 0x9, 0x555, 0x1f, 0xb7, 0x9, 0x36b, 0x9, 0xb, 0x7ff, 0x1a, 0x4, 0x7, 0xa, 0xa, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338300e8cb966058f66908611a2da3e15d07ea4bbea3d646bddcbf88d74a8f9b16f89ac1296a3ebe1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe659aabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf93360c81be9c56781a57bf6ac5bd26db48b73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f6635"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64)
socket(0x10, 0x80002, 0x0) (rerun: 64)
socket$rds(0x15, 0x5, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002700000000000000070000001c0000fffffffb000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x400)

845.519024ms ago: executing program 0 (id=1867):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x31) (async, rerun: 32)
r1 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x80ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xd6, &(0x7f0000000340)=""/214, 0x0, 0x8}, 0x94) (async)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f0000000040)=0x80, 0x80000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64)
recvmmsg(r4, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x40010022, 0x0) (async, rerun: 64)
setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) (async)
setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 64)
r5 = socket(0x1, 0x803, 0x0) (async, rerun: 64)
r6 = socket(0x10, 0x3, 0x0) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2020000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9, <r10=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r10, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r6], 0x1c}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r11], 0x44}}, 0x8000) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r3, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20010)

751.155944ms ago: executing program 0 (id=1870):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='+\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4814)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000400)=0x8)
setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x39, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
r7 = socket$kcm(0x2d, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000001c0))
unshare(0x2a020480)
r8 = socket(0xa, 0x3, 0x3a)
connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16, @ANYRESDEC], 0x38}}, 0x0)

355.469365ms ago: executing program 2 (id=1874):
getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r0=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001d0800434000000007540000000c0a01020000000000000000010000020900020073797a320000000028000380240000800400018008000340000000011400078097000100696e6e6572000000040002800900010073797a30"], 0xe0}}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040))
getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001d0800434000000007540000000c0a01020000000000000000010000020900020073797a320000000028000380240000800400018008000340000000011400078097000100696e6e6572000000040002800900010073797a30"], 0xe0}}, 0x0) (async)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) (async)

292.37622ms ago: executing program 2 (id=1875):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}}, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@private2, <r6=>0x0}, &(0x7f0000000180)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'erspan0\x00', <r7=>0x0, 0xc218c51fff62ab56, 0x20, 0x4, 0x101, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x66, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0x0, [{@rand_addr=0x64010101}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x97, [@broadcast]}, @rr={0x7, 0xb, 0x1, [@private=0xa010100, @multicast2]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@local, <r8=>0x0}, &(0x7f00000002c0)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r9, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0x60, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x4000007a, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x5, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xcd}, @map_val={0x18, 0x2, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xb5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x53, &(0x7f0000000480)=""/83, 0x0, 0x15, '\x00', r9, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xf, 0x800, 0x1}, 0x10, r11, r12, 0x0, &(0x7f0000000880)=[0xffffffffffffffff], 0x0, 0x10, 0xfffff001}, 0x94)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x1, 0x4, 0x1, 0x0, r13}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x17, 0x9, 0x3, 0x1, 0x302a0, 0xffffffffffffffff, 0xe00, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r15)
ioctl$sock_bt_hci(r15, 0x400448e6, 0x0)
ioctl$SIOCSIFHWADDR(r15, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @multicast})
r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r16, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r16, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x2b, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0xed53, 0x52, &(0x7f0000000640)=""/82, 0x41000, 0x58, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0xd, 0x727, 0x800}, 0x10, r11, r1, 0x0, &(0x7f0000000880), 0x0, 0x10, 0x10004}, 0x94)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc0}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

223.973375ms ago: executing program 2 (id=1876):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x80000d9}, 0x8) (async)
shutdown(r5, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x3, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0xa3}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xa4fffffc, @rand_addr=' \x01\x00'}}}, 0x108)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r6=>0xffffffffffffffff, 0x6, 0x22, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010400000000000000000000711234000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x50)

168.699317ms ago: executing program 2 (id=1877):
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) (async)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x6, 0x4)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async)
close(0x3) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) (async)
socket$nl_route(0x10, 0x3, 0x0)
bind$can_j1939(r0, &(0x7f00000002c0)={0x1d, r5, 0x3, {0x2, 0xff}}, 0x18) (async)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
ioctl$sock_ifreq(r6, 0x8915, &(0x7f0000000000)={'sit0\x00', @ifru_mtu=0x2176}) (async)
ioctl$sock_netdev_private(r6, 0x89f1, &(0x7f0000000000)) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r7=>0x0}) (async)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7) (async)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, 0x0, &(0x7f0000000140))
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x2, {}, 0xfe}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe0, 0x8}, {0xe, 0xffff}, {0xc, 0xd}}, ["", "", ""]}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x90)

119.476066ms ago: executing program 2 (id=1878):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x7, 0x4, 0x2})
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x408, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffef2000000005002000000000000c001f00706879305635ad23"], 0x28}}, 0x0)

0s ago: executing program 2 (id=1879):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x0, &(0x7f00000000c0)=0x7ff, 0x4)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

78'.
[   77.080425][ T6975] syzkaller0: entered promiscuous mode
[   77.083664][ T6975] syzkaller0: entered allmulticast mode
[   77.175119][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'.
[   77.178010][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'.
[   77.219906][ T6982] validate_nla: 1 callbacks suppressed
[   77.219937][ T6982] netlink: 'syz.1.285': attribute type 12 has an invalid length.
[   77.494617][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'.
[   77.497531][ T6994] netlink: 92 bytes leftover after parsing attributes in process `syz.1.289'.
[   77.540413][ T6996] netlink: 2 bytes leftover after parsing attributes in process `syz.1.290'.
[   77.704968][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'.
[   77.711451][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.715798][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.721424][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.726911][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.920249][ T7010] netlink: 256 bytes leftover after parsing attributes in process `syz.2.295'.
[   78.130729][ T7026] netdevsim netdevsim0: Direct firmware load for 2Q failed with error -2
[   78.140030][ T7026] netdevsim netdevsim0: Falling back to sysfs fallback for: 2Q
[   78.201480][ T7028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.299'.
[   78.463352][ T7039] netlink: 'syz.2.302': attribute type 1 has an invalid length.
[   78.465892][ T7039] netlink: 'syz.2.302': attribute type 1 has an invalid length.
[   78.673975][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   78.690066][ T7049] netlink: 'syz.2.305': attribute type 13 has an invalid length.
[   78.694964][ T7049] netlink: 'syz.2.305': attribute type 17 has an invalid length.
[   78.814490][ T7049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.878560][   T47] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 0/3
[   78.886262][   T47] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   79.026480][ T7064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.139029][ T7060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.048531][    C0] vcan0: j1939_tp_rxtimer: 0xffff888021705000: rx timeout, send abort
[   80.053813][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888021705800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session.
[   80.143964][   T47] tipc: Node number set to 1009497439
[   80.320974][ T7096] syzkaller1: entered promiscuous mode
[   80.325342][ T7096] syzkaller1: entered allmulticast mode
[   80.553074][    C0] vcan0: j1939_tp_rxtimer: 0xffff888021705000: abort rx timeout. Force session deactivation
[   80.839106][ T7124] netlink: 'syz.1.330': attribute type 1 has an invalid length.
[   80.842553][ T7125] netlink: 'syz.1.330': attribute type 1 has an invalid length.
[   81.229679][  T793] cfg80211: failed to load regulatory.db
[   81.393774][ T7149] Illegal XDP return value 4294967294 on prog  (id 139) dev N/A, expect packet loss!
[   81.437785][ T7159] netlink: 'syz.2.343': attribute type 8 has an invalid length.
[   81.584144][ T7166] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   81.588008][ T7165] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   81.590765][ T7166] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   81.678394][ T7175] netlink: 'syz.2.348': attribute type 16 has an invalid length.
[   81.681518][ T7175] netlink: 'syz.2.348': attribute type 17 has an invalid length.
[   81.721255][ T7177] __nla_validate_parse: 17 callbacks suppressed
[   81.721270][ T7177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.348'.
[   81.762658][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.765591][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.811160][ T7185] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   81.915641][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.929701][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.035174][ T7175] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.037997][ T7175] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.040700][ T7175] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.044372][ T7175] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.092044][ T7192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.353'.
[   82.149234][ T7198] tipc: Started in network mode
[   82.151137][ T7198] tipc: Node identity ac14142a, cluster identity 4711
[   82.168143][ T7198] tipc: Enabled bearer <udp:syz2>, priority 10
[   82.220839][ T7200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.356'.
[   82.251685][ T7204] xt_TCPMSS: Only works on TCP SYN packets
[   82.278266][ T7208] netlink: 60 bytes leftover after parsing attributes in process `syz.2.359'.
[   82.475351][ T7229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'.
[   82.554548][ T7241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.369'.
[   82.558210][ T7241] netlink: 'syz.2.369': attribute type 7 has an invalid length.
[   82.561534][ T7241] netlink: 'syz.2.369': attribute type 8 has an invalid length.
[   82.566763][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[   83.282993][ T5893] tipc: Node number set to 2886997034
[   83.647062][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.385'.
[   83.713553][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'.
[   83.727694][ T7295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.765151][ T7295] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.912409][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[   84.061145][ T7326] netlink: 'syz.2.395': attribute type 1 has an invalid length.
[   84.195539][ T7335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.198411][ T7335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.201142][ T7335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.205165][ T7335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.207994][ T7335] geneve2: entered promiscuous mode
[   84.414514][ T7344] xt_CT: No such helper "pptp"
[   84.538397][ T7355] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   84.593070][ T7363] delete_channel: no stack
[   85.038974][ T7400] sctp: [Deprecated]: syz.1.417 (pid 7400) Use of int in max_burst socket option.
[   85.038974][ T7400] Use struct sctp_assoc_value instead
[   85.059267][ T7399] delete_channel: no stack
[   85.118802][ T7402] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.178983][ T7402] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.181978][ T7402] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[   85.188901][ T7402] bond1: (slave vti0): Error -95 calling set_mac_address
[   85.207977][ T7407] netlink: 'syz.2.419': attribute type 2 has an invalid length.
[   85.211220][ T7407] netlink: 'syz.2.419': attribute type 1 has an invalid length.
[   85.509483][ T7419] sctp: [Deprecated]: syz.2.423 (pid 7419) Use of int in max_burst socket option.
[   85.509483][ T7419] Use struct sctp_assoc_value instead
[   85.516696][ T7419] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20004
[   85.607868][ T7428] veth0_to_team: entered promiscuous mode
[   85.609763][ T7428] veth0_to_team: entered allmulticast mode
[   86.124776][ T7484] vxcan2: entered promiscuous mode
[   86.342532][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   86.747361][ T7495] ipt_REJECT: TCP_RESET invalid for non-tcp
[   86.832497][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   86.937511][ T7499] xt_l2tp: v2 doesn't support IP mode
[   87.194593][ T7520] __nla_validate_parse: 17 callbacks suppressed
[   87.194604][ T7520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'.
[   87.445343][ T7534] netlink: 72 bytes leftover after parsing attributes in process `syz.0.460'.
[   87.537065][ T7538] syz_tun: entered allmulticast mode
[   87.541205][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.461'.
[   87.549154][ T7537] syz_tun: left allmulticast mode
[   87.589157][ T7541] netlink: 'syz.0.462': attribute type 10 has an invalid length.
[   87.605637][ T7541] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   87.609130][ T7541] Unsupported ieee802154 address type: 0
[   87.831498][ T7554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.466'.
[   87.856281][ T7558] netlink: 'syz.0.467': attribute type 1 has an invalid length.
[   87.859085][ T7558] netlink: 224 bytes leftover after parsing attributes in process `syz.0.467'.
[   87.884016][ T7560] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   87.899052][ T7560] bond2: entered promiscuous mode
[   87.900882][ T7560] bond2: entered allmulticast mode
[   87.903150][ T7560] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.909240][ T7558] syzkaller1: entered promiscuous mode
[   87.910997][ T7558] syzkaller1: entered allmulticast mode
[   88.038456][ T7563] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   88.156493][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'.
[   88.216601][ T7578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.474'.
[   88.361377][ T7593] netlink: 'syz.0.480': attribute type 4 has an invalid length.
[   88.441190][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'.
[   88.561485][ T7615] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   88.573123][ T7618] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   88.618476][ T7623] netlink: 'syz.1.489': attribute type 1 has an invalid length.
[   88.627144][ T7628] netlink: 'syz.1.489': attribute type 1 has an invalid length.
[   88.691251][ T7634] sctp: [Deprecated]: syz.1.493 (pid 7634) Use of int in max_burst socket option.
[   88.691251][ T7634] Use struct sctp_assoc_value instead
[   88.714393][ T7633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.492'.
[   89.406343][ T7767] netlink: 'syz.1.499': attribute type 16 has an invalid length.
[   89.408714][ T7767] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.499'.
[   89.495356][ T7772] dummy0: entered promiscuous mode
[   89.497115][ T7772] macsec2: entered allmulticast mode
[   89.498780][ T7772] dummy0: entered allmulticast mode
[   89.568895][ T7772] dummy0: left allmulticast mode
[   89.574895][ T7772] dummy0: left promiscuous mode
[   89.602994][ T7779] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   89.605612][ T7779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.613453][ T7780] netlink: 'syz.1.503': attribute type 10 has an invalid length.
[   89.617179][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.620638][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.635950][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.638642][ T7780] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.642306][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.644588][ T7780] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.649643][ T7780] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   89.895312][ T7806] syzkaller0: refused to change device tx_queue_len
[   89.903994][ T7806] netlink: 'syz.1.512': attribute type 7 has an invalid length.
[   89.906510][ T7806] netlink: 'syz.1.512': attribute type 8 has an invalid length.
[   90.097502][ T7813] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   90.105484][ T7814] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   90.739690][ T7825] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004
[   91.380100][ T7851] bond0: (slave bond_slave_1): Releasing backup interface
[   91.529109][ T7856] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.993338][ T7886] netlink: 'syz.0.537': attribute type 11 has an invalid length.
[   91.995784][ T7886] netlink: 'syz.0.537': attribute type 11 has an invalid length.
[   92.047253][ T7890] xt_NFQUEUE: number of total queues is 0
[   92.304612][   T33] audit: type=1800 audit(1752684262.506:2): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.535" name="memory.events" dev="tmpfs" ino=961 res=0 errno=0
[   92.319860][ T7910] __nla_validate_parse: 12 callbacks suppressed
[   92.319875][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'.
[   92.335966][ T7910] netlink: 'syz.1.545': attribute type 4 has an invalid length.
[   92.416438][ T7915] tipc: Failed to remove unknown binding: 66,1,1/2886997034:2521576633/2521576635
[   92.420224][ T7915] tipc: Failed to remove unknown binding: 66,1,1/2886997034:2521576633/2521576635
[   92.609727][ T7931] validate_nla: 1 callbacks suppressed
[   92.609737][ T7931] netlink: 'syz.0.552': attribute type 1 has an invalid length.
[   92.616827][ T7931] netlink: 'syz.0.552': attribute type 2 has an invalid length.
[   92.619742][ T7931] netlink: 'syz.0.552': attribute type 2 has an invalid length.
[   92.626247][ T7931] netlink: 'syz.0.552': attribute type 1 has an invalid length.
[   92.678344][ T7945] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[   92.684177][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'.
[   92.699018][ T7946] bridge0: entered promiscuous mode
[   92.708032][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[   92.711411][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'.
[   92.715561][ T7946] netlink: 14 bytes leftover after parsing attributes in process `syz.2.556'.
[   92.874847][ T7958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.560'.
[   92.911359][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'.
[   92.911707][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'.
[   92.921459][ T7958] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   92.925688][ T7958] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   92.929187][ T7958] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   92.934710][ T7958] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   92.940113][ T7960] hsr_slave_0: left promiscuous mode
[   92.943854][ T7960] hsr_slave_1: left promiscuous mode
[   93.027611][ T7968] xt_TPROXY: Can be used only with -p tcp or -p udp
[   93.124311][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.569'.
[   93.154045][ T7977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.569'.
[   93.177684][ T7981] tipc: Started in network mode
[   93.180199][ T7981] tipc: Node identity a6e27d0f537c, cluster identity 4711
[   93.193364][ T7981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.203946][ T7981] syzkaller0: entered promiscuous mode
[   93.205875][ T7981] syzkaller0: entered allmulticast mode
[   93.225193][ T7981] tipc: Resetting bearer <eth:syzkaller0>
[   93.235182][ T7981] Bluetooth: hci1: Opcode 0x080f failed: -4
[   93.239637][ T7980] tipc: Resetting bearer <eth:syzkaller0>
[   93.250611][ T7980] tipc: Disabling bearer <eth:syzkaller0>
[   93.372122][ T7986] vxcan2: entered promiscuous mode
[   93.381355][ T7990] netlink: 'syz.1.574': attribute type 11 has an invalid length.
[   93.458138][ T8000] macsec1: entered promiscuous mode
[   93.459858][ T8000] macsec1: entered allmulticast mode
[   93.474272][ T8000] netlink: 'syz.1.576': attribute type 21 has an invalid length.
[   93.477777][ T8000] netlink: 'syz.1.576': attribute type 22 has an invalid length.
[   93.480766][ T8000] netlink: 'syz.1.576': attribute type 23 has an invalid length.
[   93.483699][ T8000] netlink: 'syz.1.576': attribute type 25 has an invalid length.
[   93.559974][ T8008] syzkaller1: entered promiscuous mode
[   93.561826][ T8008] syzkaller1: entered allmulticast mode
[   93.845976][ T8023] team0 (unregistering): Port device team_slave_0 removed
[   93.854140][ T8023] team0 (unregistering): Port device team_slave_1 removed
[   93.864496][ T8025] netlink: 'syz.1.584': attribute type 10 has an invalid length.
[   93.892892][ T8025] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   94.246092][ T8038] veth0: entered promiscuous mode
[   95.309194][   T54] Bluetooth: hci1: command 0x080f tx timeout
[   95.827497][ T8163] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[   96.214570][ T8186] netem: incorrect ge model size
[   96.216940][ T8186] netem: change failed
[   96.687981][ T8219] bond0: option use_carrier: invalid value (3)
[   96.876825][ T8238] openvswitch: netlink: Message has 4 unknown bytes.
[   96.879375][ T8238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.958857][ T8245] Cannot find add_set index 65534 as target
[   97.145317][ T8264] netlink: 'syz.0.634': attribute type 39 has an invalid length.
[   97.177829][ T8268] syz_tun: entered allmulticast mode
[   97.196301][ T8267] syz_tun: left allmulticast mode
[   97.363656][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.555829][ T8299] __nla_validate_parse: 20 callbacks suppressed
[   97.555847][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.644'.
[   97.671037][ T8302] netlink: 10 bytes leftover after parsing attributes in process `syz.0.645'.
[   98.070447][ T8276] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   98.744784][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'.
[   98.749022][ T8321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.652'.
[   98.987999][ T8328] unknown channel width for channel at 909000KHz?
[   98.995835][ T8328] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   99.001744][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'.
[   99.303850][   T54] Bluetooth: hci1: command 0x080f tx timeout
[   99.404868][ T8346] netlink: 56 bytes leftover after parsing attributes in process `syz.2.662'.
[   99.441395][ T8348] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   99.619234][ T8360] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   99.628866][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'.
[  100.241031][ T8390] syz_tun: entered allmulticast mode
[  100.393368][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'.
[  100.422397][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  100.534400][ T8421] validate_nla: 1 callbacks suppressed
[  100.534410][ T8421] netlink: 'syz.0.683': attribute type 7 has an invalid length.
[  100.538305][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.683'.
[  100.567665][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'.
[  100.598495][ T8428] tipc: Can't bind to reserved service type 1
[  100.807933][ T8463] netlink: 'syz.1.697': attribute type 4 has an invalid length.
[  100.814007][ T8463] wlan1: mtu less than device minimum
[  101.039312][ T8484] sit0: entered promiscuous mode
[  101.040897][ T8484] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[  101.065015][ T8491] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  101.219830][ T8502] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  101.223344][ T8502] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  101.275871][ T8510] netlink: 'syz.0.712': attribute type 1 has an invalid length.
[  101.777751][ T8542] netlink: 'syz.1.720': attribute type 4 has an invalid length.
[  102.008472][ T8551] SET target dimension over the limit!
[  102.060436][ T8553] netlink: 'syz.2.724': attribute type 20 has an invalid length.
[  102.070110][ T8553] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.073326][ T8553] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.076149][ T8553] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.078955][ T8553] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.083716][ T8553] netlink: 'syz.2.724': attribute type 20 has an invalid length.
[  102.127325][ T8555] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  102.619544][ T8576] syzkaller0: entered promiscuous mode
[  102.621243][ T8576] syzkaller0: entered allmulticast mode
[  102.650687][ T8580] __nla_validate_parse: 13 callbacks suppressed
[  102.650699][ T8580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.732'.
[  102.663184][ T8580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.732'.
[  102.685077][ T8580] geneve3: entered allmulticast mode
[  102.704746][ T8584] netlink: 224 bytes leftover after parsing attributes in process `syz.1.733'.
[  103.372815][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'.
[  103.495160][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'.
[  103.550991][ T8630] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  103.608728][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'.
[  103.890935][ T8650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.898455][ T8652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.998636][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.758'.
[  104.017904][ T8663] bond0: entered promiscuous mode
[  104.019502][ T8663] bond_slave_0: entered promiscuous mode
[  104.021472][ T8663] bond_slave_1: entered promiscuous mode
[  104.023563][ T8663] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  104.029708][ T8663] batadv0: entered promiscuous mode
[  104.031808][ T8663] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  104.034471][ T8663] Cannot create hsr debugfs directory
[  104.037164][ T8663] 8021q: adding VLAN 0 to HW filter on device hsr1
[  104.039861][ T8663] bond0: left promiscuous mode
[  104.041303][ T8663] bond_slave_0: left promiscuous mode
[  104.043996][ T8663] bond_slave_1: left promiscuous mode
[  104.046266][ T8663] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  104.049883][ T8663] batadv0: left promiscuous mode
[  104.174428][ T8667] bridge: RTM_NEWNEIGH with invalid state 0x1
[  104.178610][ T8667] netlink: 'syz.0.759': attribute type 2 has an invalid length.
[  104.181743][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'.
[  104.444721][ T8681] netlink: 17 bytes leftover after parsing attributes in process `syz.0.764'.
[  104.505817][ T8684] netlink: 36 bytes leftover after parsing attributes in process `syz.2.765'.
[  104.758036][ T8711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.785072][ T8714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.859067][ T8721] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  104.948199][ T8729] netlink: 'syz.1.776': attribute type 4 has an invalid length.
[  105.181343][ T8762] 8021q: adding VLAN 0 to HW filter on device bond4
[  105.186529][ T8762] bond0: (slave bond4): Enslaving as an active interface with an up link
[  105.495395][ T8799] netlink: 'syz.1.797': attribute type 2 has an invalid length.
[  105.679219][ T8808] bond2: entered promiscuous mode
[  105.681629][ T8808] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.747402][ T8815] netlink: 'syz.0.801': attribute type 20 has an invalid length.
[  105.805382][ T8815] netlink: 'syz.0.801': attribute type 20 has an invalid length.
[  105.831484][ T8823] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  105.831695][ T7777] bond0: (slave bond_slave_0): interface is now down
[  105.839168][ T7777] bond0: (slave bridge0): interface is now down
[  105.841900][ T7777] bond0: (slave wlan1): interface is now down
[  105.864520][ T7777] bond0: (slave bond_slave_0): interface is now down
[  105.871782][ T7777] bond0: (slave bridge0): interface is now down
[  105.881537][ T7777] bond0: (slave wlan1): interface is now down
[  105.903433][ T7777] bond0: (slave bond_slave_0): interface is now down
[  105.905822][ T7777] bond0: (slave bridge0): interface is now down
[  105.908311][ T7777] bond0: (slave wlan1): interface is now down
[  105.917786][ T7777] bond0: now running without any active interface!
[  106.384669][ T8839] netlink: 'syz.2.806': attribute type 13 has an invalid length.
[  106.388113][ T8839] netlink: 'syz.2.806': attribute type 17 has an invalid length.
[  106.411818][ T8839] sit0: left promiscuous mode
[  106.428445][ T8839] bridge0: left promiscuous mode
[  106.433988][ T8839] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.438564][ T8839] 8021q: adding VLAN 0 to HW filter on device team0
[  106.447081][ T8839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.508186][ T8838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.571246][ T8838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.626705][ T8838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.959766][ T8844] netlink: 'syz.1.807': attribute type 1 has an invalid length.
[  106.986017][ T8844] 8021q: adding VLAN 0 to HW filter on device bond3
[  107.003324][ T8844] bond3: (slave gretap1): making interface the new active one
[  107.009569][ T8844] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  107.210548][ T8853] vlan2: entered allmulticast mode
[  107.463457][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  107.545809][ T8883] netlink: 'syz.0.820': attribute type 3 has an invalid length.
[  107.593870][ T8885] netlink: 'syz.0.821': attribute type 4 has an invalid length.
[  107.597082][ T8886] netlink: 'syz.0.821': attribute type 4 has an invalid length.
[  107.700475][ T8844] syz.1.807 (8844) used greatest stack depth: 19216 bytes left
[  107.908639][ T8906] __nla_validate_parse: 51 callbacks suppressed
[  107.908651][ T8906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.829'.
[  107.967359][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'.
[  108.086637][ T5830] Bluetooth: hci2: link tx timeout
[  108.089968][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.109053][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'.
[  108.152025][ T8930] netlink: 'syz.2.834': attribute type 21 has an invalid length.
[  108.155170][ T8930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.834'.
[  108.160393][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'.
[  108.262563][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'.
[  108.288335][ T8942] bond0: (slave wlan1): Releasing backup interface
[  108.306832][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.528053][ T8959] netdevsim netdevsim1: Direct firmware load for 2Q failed with error -2
[  108.530759][ T8959] netdevsim netdevsim1: Falling back to sysfs fallback for: 2Q
[  108.563253][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.844'.
[  108.901403][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'.
[  108.953753][ T8997] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.853'.
[  108.958516][ T8997] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  108.964861][ T8997] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  108.979621][ T8999] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.854'.
[  109.149901][ T9014] syzkaller1: entered promiscuous mode
[  109.151756][ T9014] syzkaller1: entered allmulticast mode
[  109.159554][ T9016] netlink: 'syz.0.859': attribute type 1 has an invalid length.
[  109.360067][ T9031] dvmrp1: entered allmulticast mode
[  109.939275][ T9071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.960335][ T9071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.967092][ T9071] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  109.980695][ T9071] bond0 (unregistering): Released all slaves
[  110.088771][ T9086] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  110.112784][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  110.294556][ T9096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.303787][ T9096] syzkaller0: entered promiscuous mode
[  110.306050][ T9096] syzkaller0: entered allmulticast mode
[  110.330644][ T9096] tipc: Resetting bearer <eth:syzkaller0>
[  110.354392][ T9096] tipc: Resetting bearer <eth:syzkaller0>
[  110.375169][ T9096] tipc: Disabling bearer <eth:syzkaller0>
[  110.408076][ T9100] 8021q: adding VLAN 0 to HW filter on device bond4
[  110.599636][ T9131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.604205][ T9131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.608351][ T9131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  110.668176][ T9131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.671406][ T9131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.674588][ T9131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  110.769477][ T9131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.783616][ T9131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.787640][ T9131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  110.849754][ T9131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.853559][ T9131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.857348][ T9131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  110.944865][ T9131] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.947996][ T9131] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  110.950793][ T9131] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  110.977529][ T9131] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.980481][ T9131] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  110.986473][ T9131] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  110.996099][ T9131] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.998794][ T9131] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  111.001664][ T9131] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  111.011500][ T9131] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.015008][ T9131] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  111.018143][ T9131] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  111.373252][ T9184] xt_hashlimit: size too large, truncated to 1048576
[  111.537753][ T9192] validate_nla: 3 callbacks suppressed
[  111.537767][ T9192] netlink: 'syz.1.909': attribute type 2 has an invalid length.
[  111.546412][ T9191] netlink: 'syz.1.909': attribute type 2 has an invalid length.
[  111.923918][ T9217] netlink: 'syz.0.918': attribute type 4 has an invalid length.
[  112.842462][ T9278] netlink: 'syz.0.936': attribute type 39 has an invalid length.
[  112.950945][ T9284] __nla_validate_parse: 21 callbacks suppressed
[  112.950959][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'.
[  112.956953][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'.
[  112.961995][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'.
[  112.982456][ T9284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'.
[  113.041481][ T9246] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  113.044356][ T9292] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  113.123762][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'.
[  113.199793][ T9302] netlink: 'syz.1.945': attribute type 1 has an invalid length.
[  113.240182][ T9302] veth1: entered promiscuous mode
[  113.245115][ T9302] erspan0: entered allmulticast mode
[  113.310161][ T9313] geneve3: entered promiscuous mode
[  113.412440][ T9325] vlan2: entered promiscuous mode
[  113.414457][ T9325] bridge0: entered promiscuous mode
[  113.416597][ T9325] vlan2: entered allmulticast mode
[  113.418592][ T9325] bridge0: entered allmulticast mode
[  113.428484][ T9325] bridge_slave_0: left promiscuous mode
[  113.430880][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.437313][ T9325] bridge_slave_1: left allmulticast mode
[  113.439492][ T9325] bridge_slave_1: left promiscuous mode
[  113.441853][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.449062][ T9325] bond0: (slave bond_slave_0): Releasing backup interface
[  113.453813][ T9325] bond0: (slave bond_slave_1): Releasing backup interface
[  113.460770][ T9325] team0: Port device team_slave_0 removed
[  113.465943][ T9325] team0: Port device team_slave_1 removed
[  113.468730][ T9325] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.472932][ T9325] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.478313][ T9325] bond1: (slave gretap1): Releasing active interface
[  113.487864][ T9325] bond0: (slave bond4): Releasing backup interface
[  113.619817][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'.
[  113.629465][ T9337] syzkaller1: entered promiscuous mode
[  113.631415][ T9337] syzkaller1: entered allmulticast mode
[  113.634748][ T9337] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  113.644003][ T9337] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.647800][ T9337] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  113.650699][ T9337] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  113.658419][ T9337] tipc: Resetting bearer <eth:syzkaller0>
[  113.706700][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'.
[  114.044651][ T9349] netlink: 104 bytes leftover after parsing attributes in process `syz.0.960'.
[  114.048327][ T9348] netlink: 104 bytes leftover after parsing attributes in process `syz.0.960'.
[  114.112057][ T9355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.278423][ T9359] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  114.349140][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'.
[  114.381334][ T9364] bridge_slave_1: left allmulticast mode
[  114.383196][ T9364] bridge_slave_1: left promiscuous mode
[  114.385097][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.389015][ T9364] bridge_slave_0: left allmulticast mode
[  114.390854][ T9364] bridge_slave_0: left promiscuous mode
[  114.392846][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.406509][ T9364] bond0: (slave bridge0): Releasing backup interface
[  114.648642][ T9372] sch_tbf: peakrate 2428272870181457473 is lower than or equals to rate 7348649396723214150 !
[  114.706972][ T9377] netlink: 'syz.2.971': attribute type 10 has an invalid length.
[  114.835609][ T9380] pim6reg: entered allmulticast mode
[  114.838515][ T9380] pim6reg: left allmulticast mode
[  115.155245][ T9403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.375075][ T7777] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.380969][ T7777] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.413239][ T5297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.576652][ T9429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.581258][ T9428] x_tables: duplicate underflow at hook 4
[  115.830762][ T9437] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  115.836494][ T9437] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  115.932840][ T5297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.946929][ T9446] netlink: 'syz.0.993': attribute type 8 has an invalid length.
[  116.109203][ T9461] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  116.367507][ T9478] bridge_slave_0: left allmulticast mode
[  116.369899][ T9478] bridge_slave_0: left promiscuous mode
[  116.373520][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.380470][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.400762][ T9478] team0: Port device team_slave_0 removed
[  116.408965][ T9478] team0: Port device team_slave_1 removed
[  116.411818][ T9478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.415365][ T9478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.422892][ T5297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  116.455701][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  116.562612][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.300150][ T9518] netlink: 'syz.2.1012': attribute type 10 has an invalid length.
[  117.316119][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.322472][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.327035][ T9518] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  117.335546][ T9523] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  117.616768][ T9539] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  117.850083][ T9576] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  117.860609][ T9575] pim6reg: entered allmulticast mode
[  117.932492][ T5880] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.938412][ T9575] pim6reg: left allmulticast mode
[  117.954158][ T9578] @: renamed from bond_slave_0
[  117.997840][ T9581] __nla_validate_parse: 21 callbacks suppressed
[  117.997852][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1035'.
[  118.201094][ T9598] gtp0: entered promiscuous mode
[  118.241454][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1042'.
[  118.248515][ T9602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1042'.
[  118.419698][ T9610] netlink: 'syz.2.1045': attribute type 39 has an invalid length.
[  118.471879][ T9611] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1045'.
[  118.742417][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  118.887135][ T9613] xt_ecn: cannot match TCP bits for non-tcp packets
[  118.925348][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'.
[  118.934383][ T9616] veth1: entered promiscuous mode
[  118.942146][ T9616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1047'.
[  119.185825][ T9629] netlink: 'syz.1.1052': attribute type 1 has an invalid length.
[  119.228837][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'.
[  119.245101][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'.
[  119.254424][ T9629] 8021q: adding VLAN 0 to HW filter on device bond5
[  119.294444][ T9633] veth3: entered promiscuous mode
[  119.302486][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.307986][ T9633] bond5: (slave veth3): Enslaving as an active interface with a down link
[  119.327383][ T9629] bond5: (slave erspan0): making interface the new active one
[  119.333116][ T9629] erspan0: entered promiscuous mode
[  119.334973][ T9629] bond5: (slave erspan0): Enslaving as an active interface with an up link
[  119.466700][ T9651] netlink: 'syz.0.1058': attribute type 10 has an invalid length.
[  119.469778][ T9651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1058'.
[  119.473579][ T9651] dummy0: entered promiscuous mode
[  119.477027][ T9651] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  119.578561][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'.
[  119.677714][ T9672] netlink: 'syz.2.1064': attribute type 3 has an invalid length.
[  120.436144][ T9739] pim6reg: entered allmulticast mode
[  120.445241][ T9738] pim6reg: left allmulticast mode
[  120.713659][ T9753] netlink: 'syz.2.1090': attribute type 4 has an invalid length.
[  120.733438][ T9778] netlink: 'syz.0.1097': attribute type 7 has an invalid length.
[  120.973340][ T9791] IPv6: NLM_F_REPLACE set, but no existing node found!
[  121.221716][ T9811] syzkaller1: entered allmulticast mode
[  121.270546][ T9814] netlink: 'syz.1.1109': attribute type 7 has an invalid length.
[  121.277809][ T9814] netlink: 'syz.1.1109': attribute type 4 has an invalid length.
[  121.348178][ T9818] netlink: 'syz.1.1111': attribute type 3 has an invalid length.
[  121.614213][ T9849] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  121.617157][ T9849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.738431][ T9867] NCSI netlink: No device for ifindex 0
[  121.748968][ T9865] dummy0: left promiscuous mode
[  121.751812][ T9865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.848492][ T9874] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.877249][ T9874] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.883517][ T9874] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  121.888983][ T9874] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  121.942851][ T9880] veth5: entered promiscuous mode
[  121.954124][ T9880] bond6: (slave veth5): Enslaving as an active interface with a down link
[  122.160492][ T9895] IPv6: NLM_F_CREATE should be specified when creating new route
[  122.164945][ T9895] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  122.167675][ T9895] IPv6: NLM_F_CREATE should be set when creating new route
[  122.535017][ T9935] validate_nla: 5 callbacks suppressed
[  122.535032][ T9935] netlink: 'syz.0.1142': attribute type 3 has an invalid length.
[  122.705285][ T9951] xt_CT: You must specify a L4 protocol and not use inversions on it
[  122.916064][ T9966] bond7: entered promiscuous mode
[  122.918395][ T9966] 8021q: adding VLAN 0 to HW filter on device bond7
[  123.155816][ T9989] Bluetooth: MGMT ver 1.23
[  123.277383][T10000] __nla_validate_parse: 35 callbacks suppressed
[  123.277402][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'.
[  123.365497][T10004] IPVS: length: 148 != 24
[  123.437734][T10008] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0
[  124.490147][T10046] unknown channel width for channel at 909000KHz?
[  124.492623][T10046] unknown channel width for channel at 909000KHz?
[  124.630410][T10054] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  124.694399][T10051] netlink: 'syz.1.1173': attribute type 4 has an invalid length.
[  124.809043][T10069] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1179'.
[  124.811984][T10071] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  124.826854][T10071] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  124.990011][T10077] netlink: 'syz.2.1181': attribute type 83 has an invalid length.
[  125.037495][T10083] netlink: 'syz.1.1183': attribute type 1 has an invalid length.
[  125.056000][T10083] bond8: entered promiscuous mode
[  125.063310][T10083] 8021q: adding VLAN 0 to HW filter on device bond8
[  125.075324][T10083] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1183'.
[  125.078051][T10087] 8021q: VLANs not supported on gre0
[  125.087942][T10083] batadv0: entered promiscuous mode
[  125.089983][T10083] batadv0: entered allmulticast mode
[  125.124365][T10091] netlink: 'syz.0.1186': attribute type 1 has an invalid length.
[  125.127433][T10091] netlink: 'syz.0.1186': attribute type 2 has an invalid length.
[  125.130358][T10091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1186'.
[  125.141127][T10083] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1183'.
[  125.229928][T10101] netlink: 'syz.0.1187': attribute type 15 has an invalid length.
[  125.508150][T10122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.516378][T10122] tipc: Resetting bearer <eth:syzkaller0>
[  125.519979][T10121] tipc: Disabling bearer <eth:syzkaller0>
[  126.095900][T10158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1206'.
[  126.098947][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'.
[  126.174795][T10173] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1210'.
[  126.178073][T10173] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  126.187896][T10174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1210'.
[  126.323574][T10184] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1213'.
[  126.361882][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.364132][T10186] IPv6: NLM_F_CREATE should be set when creating new route
[  126.366409][T10186] IPv6: NLM_F_CREATE should be set when creating new route
[  126.368613][T10186] IPv6: NLM_F_CREATE should be set when creating new route
[  126.371299][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.374706][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.377400][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.379588][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.382361][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.385435][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.387715][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.390491][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.393566][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.395868][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.398668][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.400825][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.404048][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.406968][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.410224][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.415387][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.418421][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.422728][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.425093][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.427309][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.430149][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.433314][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.435477][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.438287][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.440451][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.443395][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.445575][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.448946][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.451911][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.455626][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.458144][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.460678][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.463468][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.466039][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.468467][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.470785][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.473688][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.476060][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.478592][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.480831][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.483110][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.485851][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.488054][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.490280][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.492553][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.494748][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.496928][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.499215][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.501413][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.503731][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.505958][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.508370][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.510780][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.513356][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.515957][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.518478][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.520902][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.523643][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.526214][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.528970][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.531714][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.534648][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.537288][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.540027][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.543037][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.545359][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.547564][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.549694][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.551868][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.554115][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.556331][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.558524][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.561012][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.563263][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.566986][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.569327][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.571703][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.574175][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.576708][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.579103][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.581471][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.585272][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.587617][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.590609][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.592888][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.595679][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.599929][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.602728][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.604950][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.607732][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.610005][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.612892][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.615434][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.617691][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.620108][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.622315][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.625247][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.627675][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.630089][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.632519][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.635450][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.638354][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.641018][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.650912][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.653947][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.656239][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.658588][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.660902][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.663607][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.665973][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.668342][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.670716][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.675307][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.677724][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.680055][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.683861][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.686236][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.689585][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.691948][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.694542][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.696918][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.699285][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.701625][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.705259][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.707602][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.709915][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.712503][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.714851][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.717200][T10186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.882902][T10219] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  126.987356][T10224] pim6reg1: entered promiscuous mode
[  126.989001][T10224] pim6reg1: entered allmulticast mode
[  127.255158][T10246] netlink: 'syz.2.1233': attribute type 7 has an invalid length.
[  127.258012][T10246] netlink: 'syz.2.1233': attribute type 8 has an invalid length.
[  127.303132][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  127.389770][T10268] sctp: [Deprecated]: syz.0.1240 (pid 10268) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.389770][T10268] Use struct sctp_sack_info instead
[  127.396090][T10269] sctp: [Deprecated]: syz.0.1240 (pid 10269) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.396090][T10269] Use struct sctp_sack_info instead
[  127.825622][T10298] netlink: 'syz.0.1249': attribute type 10 has an invalid length.
[  128.062815][T10314] dvmrp1: left allmulticast mode
[  128.226978][T10326] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  128.231534][T10326] gretap1: entered promiscuous mode
[  128.233827][T10326] gretap1: entered allmulticast mode
[  128.582510][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  128.611299][T10366] netlink: 'syz.0.1264': attribute type 11 has an invalid length.
[  128.656050][T10368] __nla_validate_parse: 11 callbacks suppressed
[  128.656066][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1268'.
[  128.807000][T10387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1273'.
[  128.843177][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'.
[  128.861481][T10389] pimreg3: entered allmulticast mode
[  128.868576][T10391] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1275'.
[  128.871362][T10391] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  128.877396][T10389] pimreg3: left allmulticast mode
[  128.910886][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'.
[  128.966895][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'.
[  128.970196][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'.
[  128.975352][T10397] netlink: 'syz.1.1278': attribute type 14 has an invalid length.
[  129.024096][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'.
[  129.028363][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'.
[  129.031705][T10397] netlink: 'syz.1.1278': attribute type 14 has an invalid length.
[  129.132137][T10407] xt_time: unknown flags 0x4
[  129.252051][T10418] netlink: 'syz.1.1285': attribute type 1 has an invalid length.
[  129.319852][ T5880] IPVS: starting estimator thread 0...
[  129.323052][T10426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1287'.
[  129.376281][T10431] sctp: [Deprecated]: syz.2.1289 (pid 10431) Use of int in max_burst socket option.
[  129.376281][T10431] Use struct sctp_assoc_value instead
[  129.414901][T10429] IPVS: using max 41 ests per chain, 98400 per kthread
[  129.472599][T10438] netlink: 'syz.2.1292': attribute type 4 has an invalid length.
[  129.485394][T10438] netlink: 'syz.2.1292': attribute type 4 has an invalid length.
[  129.851195][T10465] netlink: 'syz.0.1299': attribute type 18 has an invalid length.
[  129.988814][T10474] netlink: 'syz.0.1302': attribute type 7 has an invalid length.
[  130.294845][T10492] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  130.492479][ T5679] erspan0: left promiscuous mode
[  131.028253][T10519] erspan0: entered promiscuous mode
[  131.179499][T10535] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  131.362974][T10556] xt_CT: You must specify a L4 protocol and not use inversions on it
[  132.087581][T10586] netlink: 'syz.1.1333': attribute type 1 has an invalid length.
[  132.090152][T10585] netlink: 'syz.1.1333': attribute type 1 has an invalid length.
[  133.492980][T10624] netlink: 'syz.2.1344': attribute type 10 has an invalid length.
[  133.500817][T10624] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.505112][T10624] team0: Port device bond0 added
[  133.746329][T10645] netlink: 'syz.1.1352': attribute type 15 has an invalid length.
[  133.750039][T10645] netlink: 'syz.1.1352': attribute type 7 has an invalid length.
[  133.757024][T10645] __nla_validate_parse: 20 callbacks suppressed
[  133.757041][T10645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1352'.
[  133.830822][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1354'.
[  133.853340][T10650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1354'.
[  133.890789][T10650] bond10: entered promiscuous mode
[  133.894885][T10650] 8021q: adding VLAN 0 to HW filter on device bond10
[  133.917392][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'.
[  133.930958][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'.
[  134.027612][T10658] nbd: must specify a device to reconfigure
[  134.067751][T10650] bond10 (unregistering): Released all slaves
[  134.361057][T10685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1364'.
[  134.373662][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'.
[  134.458858][T10692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1366'.
[  134.807632][T10725] netlink: 'syz.2.1372': attribute type 12 has an invalid length.
[  134.816470][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1373'.
[  135.260895][T10761] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  135.301607][T10761] smc: adding net device bond0 with user defined pnetid SYZ2
[  135.476482][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1384'.
[  135.638977][T10774] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  135.790706][T10787] netlink: 'syz.2.1388': attribute type 1 has an invalid length.
[  135.793259][T10787] netlink: 'syz.2.1388': attribute type 1 has an invalid length.
[  135.921515][T10795] netlink: 'syz.1.1390': attribute type 1 has an invalid length.
[  135.938309][T10795] veth6: entered allmulticast mode
[  135.953060][T10795] veth7: entered promiscuous mode
[  135.978307][T10799] xt_hashlimit: size too large, truncated to 1048576
[  136.248563][T10823] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  136.252028][T10823] openvswitch: netlink: Duplicate key (type 0).
[  136.261793][T10823] netlink: 'syz.2.1400': attribute type 10 has an invalid length.
[  136.265236][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  136.316926][T10827] netlink: 'syz.1.1401': attribute type 1 has an invalid length.
[  136.508501][T10845] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  136.629643][T10857] veth0_to_team: left promiscuous mode
[  136.636855][T10857] veth0_to_team: left allmulticast mode
[  138.087125][T10952] IPVS: length: 24 != 201326808
[  138.529927][T10980] netlink: 'syz.2.1441': attribute type 10 has an invalid length.
[  138.534262][T10980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.536686][T10980] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  138.846560][T11022] __nla_validate_parse: 18 callbacks suppressed
[  138.846579][T11022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1446'.
[  138.999582][T11030] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  139.059607][T11034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1449'.
[  139.119722][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'.
[  139.461434][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'.
[  139.531016][T11055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'.
[  139.691016][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'.
[  139.787437][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'.
[  139.876977][T11084] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1465'.
[  139.928917][T11088] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1466'.
[  140.036340][T11090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1467'.
[  140.149126][T11106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.188247][T11113] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.191439][T11113] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  140.200054][T11113] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  140.306692][T11120] GUP no longer grows the stack in syz.0.1476 (11120): 200000006000-20000000a000 (200000005000)
[  140.311521][T11120] CPU: 0 UID: 0 PID: 11120 Comm: syz.0.1476 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  140.311545][T11120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.311555][T11120] Call Trace:
[  140.311565][T11120]  <TASK>
[  140.311574][T11120]  dump_stack_lvl+0x189/0x250
[  140.311604][T11120]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.311620][T11120]  ? __pfx__printk+0x10/0x10
[  140.311637][T11120]  ? find_vma+0xe7/0x160
[  140.311667][T11120]  __get_user_pages+0x2a60/0x30b0
[  140.311716][T11120]  ? __pfx___get_user_pages+0x10/0x10
[  140.311732][T11120]  ? __gup_longterm_locked+0xbf7/0x15b0
[  140.311748][T11120]  ? down_read_killable+0x1d1/0x350
[  140.311766][T11120]  ? try_get_folio+0x633/0x660
[  140.311788][T11120]  __gup_longterm_locked+0xd66/0x15b0
[  140.311808][T11120]  ? try_grab_folio_fast+0x1be/0x4f0
[  140.311832][T11120]  ? gup_fast_fallback+0x1afc/0x2260
[  140.311851][T11120]  gup_fast_fallback+0x1cd4/0x2260
[  140.311896][T11120]  ? __pfx_gup_fast_fallback+0x10/0x10
[  140.311910][T11120]  ? trace_contention_end+0x39/0x120
[  140.311932][T11120]  ? __mutex_lock+0x330/0xe80
[  140.311949][T11120]  ? is_valid_gup_args+0x11f/0x200
[  140.311965][T11120]  ? get_user_pages_fast+0x4d/0xb0
[  140.311982][T11120]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  140.312006][T11120]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  140.312028][T11120]  ? wait_for_space+0x24d/0x2d0
[  140.312051][T11120]  iov_iter_get_pages2+0x5e/0xa0
[  140.312071][T11120]  __se_sys_vmsplice+0x548/0x10d0
[  140.312106][T11120]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  140.312124][T11120]  ? __pfx_futex_wait+0x10/0x10
[  140.312149][T11120]  ? __lock_acquire+0xab9/0xd20
[  140.312202][T11120]  ? do_pipe2+0xf7/0x170
[  140.312251][T11120]  ? rcu_is_watching+0x15/0xb0
[  140.312274][T11120]  ? do_syscall_64+0xbe/0x3b0
[  140.312324][T11120]  do_syscall_64+0xfa/0x3b0
[  140.312339][T11120]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.312364][T11120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.312380][T11120]  ? exc_page_fault+0x9f/0xf0
[  140.312423][T11120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.312439][T11120] RIP: 0033:0x7f511278e929
[  140.312455][T11120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.312469][T11120] RSP: 002b:00007f51136ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  140.312487][T11120] RAX: ffffffffffffffda RBX: 00007f51129b5fa0 RCX: 00007f511278e929
[  140.312500][T11120] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  140.312510][T11120] RBP: 00007f5112810b39 R08: 0000000000000000 R09: 0000000000000000
[  140.312519][T11120] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  140.312528][T11120] R13: 0000000000000000 R14: 00007f51129b5fa0 R15: 00007fff98734ab8
[  140.312550][T11120]  </TASK>
[  140.485562][T11121] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  140.721925][T11123] vxcan4: entered promiscuous mode
[  141.063398][T11137] netlink: 'syz.2.1483': attribute type 5 has an invalid length.
[  141.071410][T11137] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  141.074196][T11137] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  141.076849][T11137] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  141.079439][T11137] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  141.083009][T11137] geneve3: entered promiscuous mode
[  141.084974][T11137] geneve3: entered allmulticast mode
[  142.442700][T11147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.513575][T11152] pim6reg1: entered promiscuous mode
[  142.519449][T11152] pim6reg1: entered allmulticast mode
[  142.703617][T11166] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  142.869906][T11189] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001
[  143.062590][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  143.302413][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  143.839491][T11208] ip6tnl3: entered promiscuous mode
[  143.841137][T11208] ip6tnl3: entered allmulticast mode
[  143.859353][T11208] __nla_validate_parse: 11 callbacks suppressed
[  143.859376][T11208] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1501'.
[  143.904047][T11218] netlink: 'syz.0.1504': attribute type 12 has an invalid length.
[  143.907689][T11218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1504'.
[  143.945948][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1505'.
[  143.951225][T11219] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  144.021330][T11225] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1503'.
[  144.026686][T11225] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  144.074306][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'.
[  144.257779][T11241] netlink: 'syz.0.1510': attribute type 10 has an invalid length.
[  144.261254][T11241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1510'.
[  144.279022][T11241] team0: Port device geneve0 added
[  144.288372][T11241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1510'.
[  144.291843][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'.
[  144.304357][T11241] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  144.494576][T11254] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1515'.
[  144.498155][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'.
[  144.644101][T11260] netlink: 'syz.0.1518': attribute type 2 has an invalid length.
[  144.895790][T11275] netlink: 'syz.2.1524': attribute type 7 has an invalid length.
[  145.016148][T11279] bond0: option min_links: invalid value (18446744073709551604)
[  145.018932][T11279] bond0: option min_links: allowed values 0 - 2147483647
[  145.105306][T11297] netlink: zone id is out of range
[  145.107378][T11297] netlink: zone id is out of range
[  145.110749][T11297] netlink: zone id is out of range
[  145.114272][T11297] netlink: zone id is out of range
[  145.116252][T11297] netlink: zone id is out of range
[  145.118078][T11297] netlink: zone id is out of range
[  145.120241][T11297] netlink: zone id is out of range
[  145.125274][T11297] netlink: zone id is out of range
[  145.196003][T11300] netlink: 'syz.2.1532': attribute type 1 has an invalid length.
[  145.249521][T11302] bond5: (slave erspan0): Releasing active interface
[  145.265798][T11302] bond0: (slave bond_slave_0): Releasing backup interface
[  145.279538][T11302] bond3: (slave gretap1): Releasing active interface
[  145.294477][T11302] bond5: (slave veth3): Releasing active interface
[  145.301322][T11302] bond6: (slave veth5): Releasing active interface
[  145.371061][T11300] 8021q: adding VLAN 0 to HW filter on device bond7
[  145.376603][T11300] bond6: (slave bond7): making interface the new active one
[  145.383200][T11300] bond6: (slave bond7): Enslaving as an active interface with an up link
[  145.408340][T11307] bond6: (slave gretap2): Enslaving as a backup interface with an up link
[  146.113026][T11376] netlink: 'syz.0.1549': attribute type 11 has an invalid length.
[  146.129614][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.189042][ T9040] nci: nci_rx_work: unknown MT 0x1
[  147.272752][T11445] netlink: 'syz.1.1567': attribute type 7 has an invalid length.
[  148.195789][T11479] xt_hashlimit: size too large, truncated to 1048576
[  148.252154][ T5825] syz_tun (unregistering): left allmulticast mode
[  148.338432][T11488] netlink: 'syz.2.1581': attribute type 11 has an invalid length.
[  148.354813][ T7777] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.360355][ T7777] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  148.364317][ T7777] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  148.431180][ T7777] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.437558][ T7777] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  148.441460][ T7777] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  148.517383][ T7777] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.521189][ T7777] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  148.532154][ T7777] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  148.548839][T11495] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  148.551590][T11495] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  148.589328][T11495] team0: Port device geneve0 removed
[  148.607472][ T7777] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.621967][ T7777] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  148.627633][ T5297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.631049][T11495] netlink: 'syz.0.1583': attribute type 10 has an invalid length.
[  148.636972][ T7777] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  148.646769][T11495] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  148.649649][T11495] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  148.680594][T11499] net_ratelimit: 6 callbacks suppressed
[  148.680610][T11499] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  148.761672][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  148.771257][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  148.775210][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  148.779131][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  148.782879][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  149.423176][ T7777] bond0 (unregistering): Released all slaves
[  149.463196][ T5297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  149.543101][ T7777] bond1 (unregistering): Released all slaves
[  149.665220][ T7777] bond2 (unregistering): Released all slaves
[  149.758658][ T7777] bond3 (unregistering): Released all slaves
[  149.847306][ T7777] bond4 (unregistering): Released all slaves
[  149.934072][ T7777] bond5 (unregistering): Released all slaves
[  150.023850][ T7777] bond6 (unregistering): Released all slaves
[  150.115578][ T7777] bond7 (unregistering): Released all slaves
[  150.201384][ T7777] bond8 (unregistering): Released all slaves
[  150.209371][ T7777] bond9 (unregistering): Released all slaves
[  150.333226][ T7777] tipc: Disabling bearer <udp:syz2>
[  150.349293][ T7777] tipc: Left network mode
[  150.416620][T11529] 8021q: adding VLAN 0 to HW filter on device bond2
[  150.523778][T11532] __nla_validate_parse: 17 callbacks suppressed
[  150.523794][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'.
[  150.764436][T11542] netlink: zone id is out of range
[  150.766105][T11542] netlink: zone id is out of range
[  150.767826][T11542] netlink: zone id is out of range
[  150.769425][T11542] netlink: zone id is out of range
[  150.771452][T11542] netlink: zone id is out of range
[  150.774909][T11542] netlink: zone id is out of range
[  150.782448][T11542] netlink: zone id is out of range
[  150.786318][T11542] netlink: zone id is out of range
[  150.788029][T11542] netlink: zone id is out of range
[  150.789955][T11502] chnl_net:caif_netlink_parms(): no params data found
[  150.816739][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'.
[  150.820891][T11542] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1597'.
[  150.822603][   T54] Bluetooth: hci0: command tx timeout
[  150.948051][ T7777] hsr_slave_0: left promiscuous mode
[  150.951760][ T7777] hsr_slave_1: left promiscuous mode
[  150.985482][ T7777] veth1_macvtap: left promiscuous mode
[  150.987961][ T7777] veth0_macvtap: left promiscuous mode
[  150.990213][ T7777] veth1_vlan: left promiscuous mode
[  151.013723][ T7777] veth0_vlan: left promiscuous mode
[  151.687254][T11502] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.690087][T11502] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.696541][T11502] bridge_slave_0: entered allmulticast mode
[  151.699428][T11502] bridge_slave_0: entered promiscuous mode
[  151.703790][T11502] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.706192][T11502] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.708749][T11502] bridge_slave_1: entered allmulticast mode
[  151.711780][T11502] bridge_slave_1: entered promiscuous mode
[  151.721351][T11568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.726067][T11570] syzkaller0: entered promiscuous mode
[  151.728175][T11570] syzkaller0: entered allmulticast mode
[  151.748331][T11563] tipc: Resetting bearer <eth:syzkaller0>
[  151.763364][T11563] tipc: Disabling bearer <eth:syzkaller0>
[  151.789521][T11502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.795728][T11502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.835398][T11502] team0: Port device team_slave_0 added
[  151.841674][T11502] team0: Port device team_slave_1 added
[  151.880004][T11502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.882523][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.891288][T11502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.917156][T11576] netlink: 'syz.2.1604': attribute type 10 has an invalid length.
[  151.930483][T11502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.936110][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.951038][T11502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.076869][T11502] hsr_slave_0: entered promiscuous mode
[  152.079863][T11581] netlink: 'syz.2.1606': attribute type 11 has an invalid length.
[  152.080845][T11502] hsr_slave_1: entered promiscuous mode
[  152.245226][ T7777] IPVS: stop unused estimator thread 0...
[  152.307044][T11592] 8021q: adding VLAN 0 to HW filter on device bond3
[  152.329962][T11595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1612'.
[  152.336620][T11595] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1612'.
[  152.464997][T11605] netlink: 'syz.2.1615': attribute type 12 has an invalid length.
[  152.585891][T11614] bond0: entered promiscuous mode
[  152.588019][T11614] bond0: entered allmulticast mode
[  152.590549][T11614] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.700308][T11502] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  152.706675][T11502] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  152.716631][T11502] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  152.724437][T11502] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  152.882143][T11502] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.905583][   T54] Bluetooth: hci0: command tx timeout
[  152.911136][T11502] 8021q: adding VLAN 0 to HW filter on device team0
[  152.920999][T10984] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.923936][T10984] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.935268][T11634] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1622'.
[  152.951153][T10984] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.954055][T10984] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.037792][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'.
[  153.164035][T11502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.235949][T11502] veth0_vlan: entered promiscuous mode
[  153.249937][T11502] veth1_vlan: entered promiscuous mode
[  153.277377][T11502] veth0_macvtap: entered promiscuous mode
[  153.285300][T11502] veth1_macvtap: entered promiscuous mode
[  153.313678][T11502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.321956][T11502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.328716][T11502] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.331563][T11502] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.336038][T11502] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.339430][T11502] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.469029][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.471413][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.473445][T11653] xt_TCPMSS: Only works on TCP SYN packets
[  153.496985][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.500676][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.672834][T11671] team0: Port device veth7 added
[  154.746726][T11681] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1637'.
[  154.834671][T11691] netlink: 'syz.2.1640': attribute type 1 has an invalid length.
[  154.862885][T11691] 8021q: adding VLAN 0 to HW filter on device bond8
[  154.955919][T11695] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1641'.
[  155.000046][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.177181][T11700] netlink: 'syz.2.1642': attribute type 6 has an invalid length.
[  155.305591][T11704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1643'.
[  155.433906][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  155.437503][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  155.440780][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  155.445264][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  155.448378][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  155.642916][T11715] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1644'.
[  155.649311][T11715] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1644'.
[  155.675424][T11708] chnl_net:caif_netlink_parms(): no params data found
[  155.748563][T11718] pimreg: entered allmulticast mode
[  155.781326][T11718] pimreg: left allmulticast mode
[  155.809757][T11708] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.815386][T11708] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.818433][T11708] bridge_slave_0: entered allmulticast mode
[  155.822003][T11708] bridge_slave_0: entered promiscuous mode
[  155.827201][T11708] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.830300][T11708] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.834715][T11708] bridge_slave_1: entered allmulticast mode
[  155.840167][T11708] bridge_slave_1: entered promiscuous mode
[  155.884170][T11708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.894078][T11708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.928639][T11708] team0: Port device team_slave_0 added
[  155.933293][T11708] team0: Port device team_slave_1 added
[  155.957046][T11708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.959308][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.968156][T11708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.974640][T11708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.976776][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.977618][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'.
[  155.985856][T11708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.021765][T11708] hsr_slave_0: entered promiscuous mode
[  156.025006][T11708] hsr_slave_1: entered promiscuous mode
[  156.027241][T11708] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.029553][T11708] Cannot create hsr debugfs directory
[  156.080087][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.702034][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.821857][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.937884][   T12] bridge_slave_1: left allmulticast mode
[  156.939961][   T12] bridge_slave_1: left promiscuous mode
[  156.942729][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.956031][   T12] bridge_slave_0: left allmulticast mode
[  156.958306][   T12] bridge_slave_0: left promiscuous mode
[  156.960671][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.498575][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.523252][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.538029][   T12] bond0 (unregistering): Released all slaves
[  157.556175][ T5830] Bluetooth: hci0: command tx timeout
[  157.855104][   T12] hsr_slave_0: left promiscuous mode
[  157.859080][   T12] hsr_slave_1: left promiscuous mode
[  157.862068][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.865651][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.869556][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.874603][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.896351][   T12] veth1_macvtap: left promiscuous mode
[  157.898682][   T12] veth0_macvtap: left promiscuous mode
[  157.901141][   T12] veth1_vlan: left promiscuous mode
[  157.903701][   T12] veth0_vlan: left promiscuous mode
[  158.080288][T11731] net_ratelimit: 12 callbacks suppressed
[  158.080309][T11731] Set syz1 is full, maxelem 65536 reached
[  158.140686][T11736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1651'.
[  158.200272][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'.
[  158.360942][   T12] team0 (unregistering): Port device team_slave_1 removed
[  158.434906][   T12] team0 (unregistering): Port device team_slave_0 removed
[  158.835909][T11739] IPVS: Error joining to the multicast group
[  158.873729][T11708] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  158.915886][T11708] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  158.924404][T11708] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  158.951588][T11708] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  159.008771][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'.
[  159.127959][T11708] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.151570][T11708] 8021q: adding VLAN 0 to HW filter on device team0
[  159.161699][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.164660][ T7756] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.195901][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.198813][ T7756] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.249721][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'.
[  159.383167][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.440398][T11708] veth0_vlan: entered promiscuous mode
[  159.449086][T11708] veth1_vlan: entered promiscuous mode
[  159.488312][T11708] veth0_macvtap: entered promiscuous mode
[  159.497850][T11708] veth1_macvtap: entered promiscuous mode
[  159.521622][T11708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.542131][T11708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.553914][T11708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.557303][T11708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.560659][T11708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.568615][T11708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.625233][ T5830] Bluetooth: hci0: command tx timeout
[  159.661827][ T7756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.668657][ T7756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.708658][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.712522][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.833860][T11788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1663'.
[  159.844246][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'.
[  160.140479][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'.
[  160.144315][T11815] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  160.147269][T11815] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.467714][T11826] bridge_slave_0: default FDB implementation only supports local addresses
[  161.005512][T11844] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  161.009869][T11844] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  161.226993][ T9040] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.537043][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  161.541231][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  161.545333][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  161.549058][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  161.553859][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  161.747081][T11849] chnl_net:caif_netlink_parms(): no params data found
[  161.875991][T11849] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.878925][T11849] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.881927][T11849] bridge_slave_0: entered allmulticast mode
[  161.886927][T11849] bridge_slave_0: entered promiscuous mode
[  161.890770][T11858] vxcan1: entered allmulticast mode
[  161.893311][T11849] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.896126][T11849] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.899002][T11849] bridge_slave_1: entered allmulticast mode
[  161.903702][T11849] bridge_slave_1: entered promiscuous mode
[  161.908301][T11858] vxcan1: left allmulticast mode
[  161.939728][T11849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.946748][T11849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.979690][T11858] raw_sendmsg: syz.0.1680 forgot to set AF_INET. Fix it!
[  161.981698][T11849] team0: Port device team_slave_0 added
[  161.988471][T11849] team0: Port device team_slave_1 added
[  162.024000][T11849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.026800][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.037360][T11849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.042833][T11849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.045290][T11849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.054963][T11849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.112584][T11849] hsr_slave_0: entered promiscuous mode
[  162.116008][T11849] hsr_slave_1: entered promiscuous mode
[  162.178083][T11866] netlink: 'syz.0.1682': attribute type 5 has an invalid length.
[  162.180803][T11866] netlink: 'syz.0.1682': attribute type 5 has an invalid length.
[  162.317776][T11873] __nla_validate_parse: 1 callbacks suppressed
[  162.317789][T11873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1683'.
[  162.323447][T11870] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  162.594705][ T9040] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.787991][ T9040] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.850799][ T9040] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.967960][ T9040] bridge_slave_1: left allmulticast mode
[  162.976044][ T9040] bridge_slave_1: left promiscuous mode
[  162.980475][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.985560][ T9040] bridge_slave_0: left allmulticast mode
[  162.987820][ T9040] bridge_slave_0: left promiscuous mode
[  162.990244][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.170481][T11900] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1692'.
[  163.176807][T11899] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1692'.
[  163.242001][T11900] netlink: 'syz.0.1692': attribute type 1 has an invalid length.
[  163.378149][ T9040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.384319][ T9040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.388123][ T9040] bond0 (unregistering): Released all slaves
[  163.411488][T11900] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  163.577578][T11905] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  163.597544][T11905] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  163.632585][   T54] Bluetooth: hci0: command tx timeout
[  163.895011][T11849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  163.899939][T11849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  163.905549][T11849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  163.926173][T11849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  163.940071][ T9040] hsr_slave_0: left promiscuous mode
[  163.956695][ T9040] hsr_slave_1: left promiscuous mode
[  163.962531][ T9040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.965185][ T9040] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.975752][ T9040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.978698][ T9040] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.005101][ T9040] veth1_macvtap: left promiscuous mode
[  164.006959][ T9040] veth0_macvtap: left promiscuous mode
[  164.008756][ T9040] veth1_vlan: left promiscuous mode
[  164.010508][ T9040] veth0_vlan: left promiscuous mode
[  164.501458][ T9040] team0 (unregistering): Port device team_slave_1 removed
[  164.533961][ T9040] team0 (unregistering): Port device team_slave_0 removed
[  164.750604][T11925] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  165.067392][T11849] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.079742][T11933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1699'.
[  165.110033][T11849] 8021q: adding VLAN 0 to HW filter on device team0
[  165.119387][ T7758] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.121635][ T7758] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.134358][ T7758] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.136698][ T7758] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.329006][T11849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.360837][T11849] veth0_vlan: entered promiscuous mode
[  165.368296][T11849] veth1_vlan: entered promiscuous mode
[  165.392798][T11849] veth0_macvtap: entered promiscuous mode
[  165.407065][T11849] veth1_macvtap: entered promiscuous mode
[  165.420030][T11849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.430456][T11849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.439054][T11849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.443366][T11849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.446890][T11849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.450146][T11849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.556019][T11947] infiniband syz!: set down
[  165.558324][T11947] infiniband syz!: added team_slave_0
[  165.560178][ T7758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.563834][ T7758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.594466][ T7756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.597138][ T7756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.601843][T11947] RDS/IB: syz!: added
[  165.605093][T11947] smc: adding ib device syz! with port count 1
[  165.607360][T11947] smc:    ib device syz! port 1 has pnetid 
[  165.702552][   T54] Bluetooth: hci0: command tx timeout
[  165.831826][T11955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1705'.
[  165.889490][T11955] C: renamed from team_slave_0
[  165.894189][T11955] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1705'.
[  166.106099][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'.
[  166.109041][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'.
[  166.218256][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'.
[  166.229074][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'.
[  166.259224][T11970] team0: Device gtp1 is of different type
[  166.860706][T12011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.866812][T12011] syzkaller0: entered promiscuous mode
[  166.868615][T12011] syzkaller0: entered allmulticast mode
[  166.875889][T12011] tipc: Resetting bearer <eth:syzkaller0>
[  166.899103][T12013] gretap0: entered promiscuous mode
[  166.907314][T12010] tipc: Resetting bearer <eth:syzkaller0>
[  166.922601][T12010] tipc: Disabling bearer <eth:syzkaller0>
[  167.286536][T12044] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  167.396661][T12046] bond9 (unregistering): Released all slaves
[  167.677040][ T5859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.190447][T12057] __nla_validate_parse: 14 callbacks suppressed
[  168.190466][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'.
[  168.198280][T12058] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  168.204640][T12057] xt_limit: Overflow, try lower: 262144/524288
[  168.382020][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.388143][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.391659][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.399153][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.402963][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  168.460686][T12066] xt_ecn: cannot match TCP bits for non-tcp packets
[  168.466769][T12066] netlink: 'syz.2.1743': attribute type 10 has an invalid length.
[  168.762717][T12069] chnl_net:caif_netlink_parms(): no params data found
[  168.839738][T12069] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.843145][T12069] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.846609][T12069] bridge_slave_0: entered allmulticast mode
[  168.850631][T12069] bridge_slave_0: entered promiscuous mode
[  168.855367][T12069] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.858199][T12069] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.861132][T12069] bridge_slave_1: entered allmulticast mode
[  168.865828][T12069] bridge_slave_1: entered promiscuous mode
[  168.887577][T12069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.894592][T12069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.902612][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  168.929530][T12069] team0: Port device team_slave_0 added
[  168.934375][T12069] team0: Port device team_slave_1 added
[  168.955178][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.957490][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.965612][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.970028][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.972127][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.980406][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.016548][T12069] hsr_slave_0: entered promiscuous mode
[  169.018801][T12069] hsr_slave_1: entered promiscuous mode
[  169.020878][T12069] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.023398][T12069] Cannot create hsr debugfs directory
[  169.179794][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'.
[  169.189392][T12095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1748'.
[  169.426255][ T5859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.468081][T12103] netlink: 'syz.0.1751': attribute type 8 has an invalid length.
[  169.510181][ T5859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.572167][ T5859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.701720][ T5859] bridge_slave_1: left allmulticast mode
[  169.709289][ T5859] bridge_slave_1: left promiscuous mode
[  169.711810][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.717849][ T5859] bridge_slave_0: left allmulticast mode
[  169.732516][ T5859] bridge_slave_0: left promiscuous mode
[  169.735036][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.207203][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.213501][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.218806][ T5859] bond0 (unregistering): Released all slaves
[  170.432529][ T5830] Bluetooth: hci0: command tx timeout
[  170.675590][ T5859] hsr_slave_0: left promiscuous mode
[  170.679858][ T5859] hsr_slave_1: left promiscuous mode
[  170.700873][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.703358][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.706989][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.709488][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.729734][ T5859] veth1_macvtap: left promiscuous mode
[  170.732060][ T5859] veth0_macvtap: left promiscuous mode
[  170.734676][ T5859] veth1_vlan: left promiscuous mode
[  170.736943][ T5859] veth0_vlan: left promiscuous mode
[  171.160205][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  171.194615][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  171.635727][T12145] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  171.664959][T12069] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  171.681728][T12069] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  171.696229][T12069] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  171.707376][T12069] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  171.763314][T12157] sit0: entered promiscuous mode
[  171.774589][T12157] netlink: 'syz.0.1766': attribute type 1 has an invalid length.
[  171.777216][T12157] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1766'.
[  171.895293][T12069] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.914263][T12069] 8021q: adding VLAN 0 to HW filter on device team0
[  171.921136][T11005] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.923574][T11005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.943271][T11005] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.945536][T11005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.968599][T12069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  171.974710][T12069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.188834][T12069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.236183][T12194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.244454][T12194] syzkaller0: entered promiscuous mode
[  172.246201][T12194] syzkaller0: entered allmulticast mode
[  172.267219][T12194] tipc: Resetting bearer <eth:syzkaller0>
[  172.274811][T12069] veth0_vlan: entered promiscuous mode
[  172.281861][T12069] veth1_vlan: entered promiscuous mode
[  172.285258][T12194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1777'.
[  172.318300][T12192] tipc: Resetting bearer <eth:syzkaller0>
[  172.344420][T12192] tipc: Disabling bearer <eth:syzkaller0>
[  172.365733][T12069] veth0_macvtap: entered promiscuous mode
[  172.374986][T12069] veth1_macvtap: entered promiscuous mode
[  172.404703][T12069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.420094][T12069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.421738][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1779'.
[  172.440996][T12069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.454245][T12069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.457607][T12069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.460893][T12069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.514968][ T5830] Bluetooth: hci0: command tx timeout
[  172.561593][T10984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.569482][T10984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.586541][T11005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.589109][T11005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.834877][T12235] netlink: 'syz.2.1791': attribute type 1 has an invalid length.
[  172.873346][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'.
[  172.877012][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'.
[  172.886125][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'.
[  172.977344][T12248] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.980817][T12248] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.985123][T12248] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.989846][T12248] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.006656][T12248] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.010641][T12248] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.014763][T12248] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.018354][T12248] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.031600][T12248] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  173.035780][T12248] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  173.039274][T12248] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  173.043845][T12248] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  173.182613][T12255] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1797'.
[  173.265901][T12256] can: request_module (can-proto-0) failed.
[  173.675849][T12259] __nla_validate_parse: 1 callbacks suppressed
[  173.675861][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1798'.
[  174.075733][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.724425][T12280] sctp: [Deprecated]: syz.2.1806 (pid 12280) Use of int in maxseg socket option.
[  174.724425][T12280] Use struct sctp_assoc_value instead
[  174.883186][T12293] netlink: 'syz.0.1807': attribute type 1 has an invalid length.
[  174.892694][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'.
[  174.982488][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1810'.
[  174.989655][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1810'.
[  174.995958][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  174.999345][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.004478][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.007970][T12304] netlink: 'syz.2.1812': attribute type 1 has an invalid length.
[  175.010594][T12304] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1812'.
[  175.014658][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.017104][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.048648][T12304] syzkaller0: entered promiscuous mode
[  175.050390][T12304] syzkaller0: entered allmulticast mode
[  175.067959][   T33] audit: type=1800 audit(1752684345.256:3): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1810" name="memory.events" dev="tmpfs" ino=3589 res=0 errno=0
[  175.377029][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.498359][T12299] chnl_net:caif_netlink_parms(): no params data found
[  175.656610][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.733102][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.781089][T12299] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.786613][T12299] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.789267][T12299] bridge_slave_0: entered allmulticast mode
[  175.792488][T12299] bridge_slave_0: entered promiscuous mode
[  175.806180][T12299] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.808545][T12299] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.810999][T12299] bridge_slave_1: entered allmulticast mode
[  175.814211][T12299] bridge_slave_1: entered promiscuous mode
[  175.878678][T12299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  175.885996][T12299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  175.951680][T12299] team0: Port device team_slave_0 added
[  175.965904][T12299] team0: Port device team_slave_1 added
[  175.981624][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'.
[  175.994691][T12327] netlink: 'syz.0.1816': attribute type 11 has an invalid length.
[  176.000879][T12299] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.004888][T12299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.013667][T12299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.017439][   T13] bridge_slave_1: left allmulticast mode
[  176.019127][   T13] bridge_slave_1: left promiscuous mode
[  176.021259][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.034343][   T13] bridge_slave_0: left allmulticast mode
[  176.036094][   T13] bridge_slave_0: left promiscuous mode
[  176.037860][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.363506][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.368143][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.371882][   T13] bond0 (unregistering): Released all slaves
[  176.379603][T12299] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.382654][T12299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.392984][T12299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.523448][T12299] hsr_slave_0: entered promiscuous mode
[  176.526071][T12299] hsr_slave_1: entered promiscuous mode
[  176.642209][T12355] macvlan0: entered promiscuous mode
[  176.644390][T12355] netlink: 'syz.0.1823': attribute type 1 has an invalid length.
[  176.646892][T12355] netlink: 'syz.0.1823': attribute type 2 has an invalid length.
[  176.749898][T12358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1824'.
[  176.849119][   T13] hsr_slave_0: left promiscuous mode
[  176.851266][   T13] hsr_slave_1: left promiscuous mode
[  176.870425][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.874423][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.877978][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.880228][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.889039][T12360] netlink: 'syz.0.1825': attribute type 1 has an invalid length.
[  176.891624][T12360] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1825'.
[  176.901913][   T13] veth1_macvtap: left promiscuous mode
[  176.904849][   T13] veth0_macvtap: left promiscuous mode
[  176.906624][   T13] veth1_vlan: left promiscuous mode
[  176.908295][   T13] veth0_vlan: left promiscuous mode
[  177.062482][ T5830] Bluetooth: hci0: command tx timeout
[  177.348086][   T13] team0 (unregistering): Port device team_slave_1 removed
[  177.418317][   T13] team0 (unregistering): Port device team_slave_0 removed
[  177.470271][T12365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1826'.
[  177.990467][T12379] batman_adv: batadv0: Adding interface: ipvlan3
[  177.993078][T12379] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.000718][T12379] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  178.106257][T12299] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  178.134332][T12299] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  178.150711][T12299] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  178.161272][T12299] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  178.319431][T12404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1836'.
[  178.326858][T12406] netlink: 'syz.0.1837': attribute type 1 has an invalid length.
[  178.411110][T12299] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.470630][T12299] 8021q: adding VLAN 0 to HW filter on device team0
[  178.520851][T11005] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.523687][T11005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.570208][T11005] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.573137][T11005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.796695][T12299] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.849642][T12299] veth0_vlan: entered promiscuous mode
[  178.918486][T12299] veth1_vlan: entered promiscuous mode
[  178.968553][T12299] veth0_macvtap: entered promiscuous mode
[  178.974437][T12299] veth1_macvtap: entered promiscuous mode
[  178.990570][T12299] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.998748][T12299] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.005963][T12299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.008585][T12299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.011709][T12299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.015533][T12299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.075664][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.078502][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.102719][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.105066][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.130498][T12430] __nla_validate_parse: 1 callbacks suppressed
[  179.130516][T12430] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1844'.
[  179.143481][   T54] Bluetooth: hci0: command tx timeout
[  179.324921][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1846'.
[  179.474712][T12445] veth1_to_team: entered allmulticast mode
[  179.476679][T12445] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  179.486004][T12444] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  179.644789][T12452] netlink: 'syz.0.1852': attribute type 47 has an invalid length.
[  179.861095][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'.
[  179.866667][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1857'.
[  179.891474][T12466] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1857'.
[  179.921547][T12468] netlink: 'syz.0.1858': attribute type 9 has an invalid length.
[  179.928615][T12468] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.1858'.
[  180.102962][T12481] syzkaller1: entered promiscuous mode
[  180.106825][T12481] syzkaller1: entered allmulticast mode
[  180.425336][T12493] 8021q: VLANs not supported on gre0
[  180.557374][ T5859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.582646][   T54] Bluetooth: hci1: command 0x080f tx timeout
[  180.675280][T12491] netlink: 'syz.2.1864': attribute type 1 has an invalid length.
[  180.678497][T12491] nbd: error processing sock list
[  180.681680][T12491] block nbd0: shutting down sockets
[  181.338386][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'.
[  181.447555][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.451267][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.454547][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.457927][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.460534][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.479791][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1870'.
[  181.731906][T12516] chnl_net:caif_netlink_parms(): no params data found
[  181.735894][T12527] netlink: zone id is out of range
[  181.737547][T12527] netlink: zone id is out of range
[  181.739499][T12527] netlink: zone id is out of range
[  181.741196][T12527] netlink: zone id is out of range
[  181.750545][T12527] netlink: zone id is out of range
[  181.753932][T12527] netlink: zone id is out of range
[  181.755965][T12527] netlink: zone id is out of range
[  181.757840][T12527] netlink: zone id is out of range
[  181.759801][T12527] netlink: zone id is out of range
[  181.815205][ T5859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.852816][T12516] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.855409][T12516] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.858098][T12516] bridge_slave_0: entered allmulticast mode
[  181.861380][T12516] bridge_slave_0: entered promiscuous mode
[  181.866464][T12516] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.868943][T12516] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.871530][T12516] bridge_slave_1: entered allmulticast mode
[  181.875294][T12516] bridge_slave_1: entered promiscuous mode
[  181.906405][T12516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.911402][T12516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.944407][T12516] team0: Port device team_slave_0 added
[  181.948297][T12516] team0: Port device team_slave_1 added
[  181.984577][T12516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.992646][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.010003][T12516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.034334][ T5859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.044452][T12516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.047028][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.057286][T12516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.117407][ T5859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.147381][T12516] hsr_slave_0: entered promiscuous mode
[  182.151187][T12516] hsr_slave_1: entered promiscuous mode
[  182.155670][T12516] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  182.159933][T12516] Cannot create hsr debugfs directory
[  182.207815][T12552] 
[  182.209020][T12552] ======================================================
[  182.211888][T12552] WARNING: possible circular locking dependency detected
[  182.214577][T12552] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  182.218267][T12552] ------------------------------------------------------
[  182.221324][T12552] syz.2.1879/12552 is trying to acquire lock:
[  182.223777][T12552] ffffffff8f6763f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  182.227413][T12552] 
[  182.227413][T12552] but task is already holding lock:
[  182.230215][T12552] ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  182.233942][T12552] 
[  182.233942][T12552] which lock already depends on the new lock.
[  182.233942][T12552] 
[  182.237899][T12552] 
[  182.237899][T12552] the existing dependency chain (in reverse order) is:
[  182.241416][T12552] 
[  182.241416][T12552] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  182.244537][T12552]        lock_acquire+0x120/0x360
[  182.246616][T12552]        _raw_spin_lock_bh+0x36/0x50
[  182.248802][T12552]        nr_rt_ioctl+0x390/0xd50
[  182.250714][T12552]        sock_do_ioctl+0xdc/0x300
[  182.252644][T12552]        sock_ioctl+0x576/0x790
[  182.254511][T12552]        __se_sys_ioctl+0xfc/0x170
[  182.256443][T12552]        do_syscall_64+0xfa/0x3b0
[  182.258338][T12552]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.260746][T12552] 
[  182.260746][T12552] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  182.263759][T12552]        lock_acquire+0x120/0x360
[  182.265687][T12552]        _raw_spin_lock_bh+0x36/0x50
[  182.267907][T12552]        nr_rt_ioctl+0x193/0xd50
[  182.269998][T12552]        sock_do_ioctl+0xdc/0x300
[  182.271976][T12552]        sock_ioctl+0x576/0x790
[  182.273945][T12552]        __se_sys_ioctl+0xfc/0x170
[  182.275958][T12552]        do_syscall_64+0xfa/0x3b0
[  182.277920][T12552]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.280502][T12552] 
[  182.280502][T12552] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  182.283508][T12552]        validate_chain+0xb9b/0x2140
[  182.285629][T12552]        __lock_acquire+0xab9/0xd20
[  182.287642][T12552]        lock_acquire+0x120/0x360
[  182.289620][T12552]        _raw_spin_lock_bh+0x36/0x50
[  182.291668][T12552]        nr_rt_device_down+0xa9/0x720
[  182.293726][T12552]        nr_device_event+0x137/0x150
[  182.295758][T12552]        notifier_call_chain+0x1b6/0x3e0
[  182.297895][T12552]        __dev_notify_flags+0x18d/0x2e0
[  182.300025][T12552]        netif_change_flags+0xe8/0x1a0
[  182.302168][T12552]        dev_change_flags+0x130/0x260
[  182.304218][T12552]        dev_ioctl+0x7b4/0x1150
[  182.306160][T12552]        sock_do_ioctl+0x22c/0x300
[  182.308161][T12552]        sock_ioctl+0x576/0x790
[  182.310053][T12552]        __se_sys_ioctl+0xfc/0x170
[  182.312044][T12552]        do_syscall_64+0xfa/0x3b0
[  182.314021][T12552]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.316506][T12552] 
[  182.316506][T12552] other info that might help us debug this:
[  182.316506][T12552] 
[  182.320363][T12552] Chain exists of:
[  182.320363][T12552]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  182.320363][T12552] 
[  182.325622][T12552]  Possible unsafe locking scenario:
[  182.325622][T12552] 
[  182.328508][T12552]        CPU0                    CPU1
[  182.330660][T12552]        ----                    ----
[  182.332744][T12552]   lock(nr_neigh_list_lock);
[  182.334616][T12552]                                lock(&nr_node->node_lock);
[  182.337380][T12552]                                lock(nr_neigh_list_lock);
[  182.340131][T12552]   lock(nr_node_list_lock);
[  182.341950][T12552] 
[  182.341950][T12552]  *** DEADLOCK ***
[  182.341950][T12552] 
[  182.345094][T12552] 2 locks held by syz.2.1879/12552:
[  182.347139][T12552]  #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  182.350642][T12552]  #1: ffffffff8f676398 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  182.354555][T12552] 
[  182.354555][T12552] stack backtrace:
[  182.356867][T12552] CPU: 1 UID: 0 PID: 12552 Comm: syz.2.1879 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  182.356889][T12552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.356900][T12552] Call Trace:
[  182.356909][T12552]  <TASK>
[  182.356917][T12552]  dump_stack_lvl+0x189/0x250
[  182.356941][T12552]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.356955][T12552]  ? __pfx__printk+0x10/0x10
[  182.356972][T12552]  ? print_lock_name+0xde/0x100
[  182.356989][T12552]  print_circular_bug+0x2ee/0x310
[  182.357009][T12552]  check_noncircular+0x134/0x160
[  182.357029][T12552]  validate_chain+0xb9b/0x2140
[  182.357048][T12552]  ? rt6_disable_ip+0x6b3/0x720
[  182.357071][T12552]  ? __lock_acquire+0xab9/0xd20
[  182.357094][T12552]  __lock_acquire+0xab9/0xd20
[  182.357112][T12552]  ? nr_rt_device_down+0xa9/0x720
[  182.357125][T12552]  lock_acquire+0x120/0x360
[  182.357139][T12552]  ? nr_rt_device_down+0xa9/0x720
[  182.357156][T12552]  ? nr_rt_device_down+0xa9/0x720
[  182.357169][T12552]  _raw_spin_lock_bh+0x36/0x50
[  182.357188][T12552]  ? nr_rt_device_down+0xa9/0x720
[  182.357200][T12552]  nr_rt_device_down+0xa9/0x720
[  182.357215][T12552]  ? do_raw_spin_unlock+0x4d/0x240
[  182.357237][T12552]  nr_device_event+0x137/0x150
[  182.357258][T12552]  notifier_call_chain+0x1b6/0x3e0
[  182.357278][T12552]  __dev_notify_flags+0x18d/0x2e0
[  182.357297][T12552]  ? __pfx___dev_notify_flags+0x10/0x10
[  182.357313][T12552]  ? __dev_change_flags+0x4cc/0x6d0
[  182.357330][T12552]  ? __pfx___dev_change_flags+0x10/0x10
[  182.357345][T12552]  ? dev_ioctl+0x7a4/0x1150
[  182.357359][T12552]  ? full_name_hash+0x92/0xe0
[  182.357382][T12552]  netif_change_flags+0xe8/0x1a0
[  182.357401][T12552]  dev_change_flags+0x130/0x260
[  182.357419][T12552]  dev_ioctl+0x7b4/0x1150
[  182.357434][T12552]  sock_do_ioctl+0x22c/0x300
[  182.357456][T12552]  ? __pfx_sock_do_ioctl+0x10/0x10
[  182.357475][T12552]  ? __lock_acquire+0xab9/0xd20
[  182.357495][T12552]  sock_ioctl+0x576/0x790
[  182.357515][T12552]  ? __pfx_sock_ioctl+0x10/0x10
[  182.357535][T12552]  ? __fget_files+0x2a/0x420
[  182.357553][T12552]  ? __fget_files+0x3a0/0x420
[  182.357602][T12552]  ? __fget_files+0x2a/0x420
[  182.357624][T12552]  ? bpf_lsm_file_ioctl+0x9/0x20
[  182.357640][T12552]  ? __pfx_sock_ioctl+0x10/0x10
[  182.357659][T12552]  __se_sys_ioctl+0xfc/0x170
[  182.357675][T12552]  do_syscall_64+0xfa/0x3b0
[  182.357689][T12552]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.357710][T12552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.357725][T12552]  ? exc_page_fault+0x9f/0xf0
[  182.357746][T12552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.357761][T12552] RIP: 0033:0x7f466358e929
[  182.357775][T12552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.357789][T12552] RSP: 002b:00007f466437f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.357805][T12552] RAX: ffffffffffffffda RBX: 00007f46637b5fa0 RCX: 00007f466358e929
[  182.357817][T12552] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004
[  182.357827][T12552] RBP: 00007f4663610b39 R08: 0000000000000000 R09: 0000000000000000
[  182.357836][T12552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.357844][T12552] R13: 0000000000000000 R14: 00007f46637b5fa0 R15: 00007ffdfd4d27f8
[  182.357860][T12552]  </TASK>
[  182.583170][ T5859] bridge_slave_1: left allmulticast mode
[  182.585159][ T5859] bridge_slave_1: left promiscuous mode
[  182.586964][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.602938][ T5859] bridge_slave_0: left allmulticast mode
[  182.604710][ T5859] bridge_slave_0: left promiscuous mode
[  182.612935][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  182.847717][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.852076][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.855285][ T5859] bond0 (unregistering): Released all slaves
[  183.145870][ T5859] hsr_slave_0: left promiscuous mode
[  183.148126][ T5859] hsr_slave_1: left promiscuous mode
[  183.150232][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.152636][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.155102][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.157889][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.162910][ T5859] veth1_macvtap: left promiscuous mode
[  183.164590][ T5859] veth0_macvtap: left promiscuous mode
[  183.166322][ T5859] veth1_vlan: left promiscuous mode
[  183.168099][ T5859] veth0_vlan: left promiscuous mode
[  183.277107][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  183.291655][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  183.674806][ T5859] bridge_slave_1: left allmulticast mode
[  183.677049][ T5859] bridge_slave_1: left promiscuous mode
[  183.679333][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.683049][ T5859] bridge_slave_0: left allmulticast mode
[  183.685011][ T5859] bridge_slave_0: left promiscuous mode
[  183.687195][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.760587][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.765318][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.769518][ T5859] bond0 (unregistering): Released all slaves
[  183.912025][ T5859] hsr_slave_0: left promiscuous mode
[  183.914664][ T5859] hsr_slave_1: left promiscuous mode
[  183.916582][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.919094][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.995726][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  184.012786][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  188.742618][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!

VM DIAGNOSIS:
16:45:52  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1b77d8e RBX=ffffffff8dbbec70 RCX=c277dd7304fead00 RDX=0000000040000000
RSI=ffffffff8be29da0 RDI=ffffffff8be29d60 RBP=ffffffff8de07b50 RSP=ffffffff8de07af8
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=ffff8880b861b000 R13=dffffc0000000000 R14=ffff88811416b980 R15=ffff88804b039f90
RIP=ffffffff8191f93f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d1263 CR3=00000001106fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000010955 00000000000009bf XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=8553b5e743000002 b700000000000091
XMM06=bf00000000080000 9500000000000109 XMM07=5500000000000009 bf00000083000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f5112811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002ac5 RDI=0000000000002ac6 RBP=00000000000003f8 RSP=ffffc90008e77030
R8 =ffff888108a28237 R9 =1ffff11021145046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af9886 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f466437f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000080 CR3=00000001257e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f5112811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
