last executing test programs:

1m31.068748773s ago: executing program 2 (id=5876):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010001fff0f00"/20, @ANYRES32=0x0, @ANYBLOB="418c040006440000240012800b00010067656e6576650000140002800800010004000000050004000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x80000)

1m30.868503117s ago: executing program 2 (id=5877):
r0 = socket$kcm(0x11, 0x7, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYBLOB="17994ca82fd0b2f5cf8bbf8b13299c577bc572e38cf0706786d9ecc7319927270869044295fbc1dcc099184affc27109710c6ef5e86da1cae05f523ac03fdec05087da3c844fb1c54a5d43f7d782afe5bb00849e491b0b7ecd5dd7705690a394fda2ff73170cec5d", @ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)

1m30.868130424s ago: executing program 2 (id=5878):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xe}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041080)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async, rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[], 0x38}}, 0x2000a080)
r7 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd318001c0600fc010000000000000000040000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe06a874e4000102"], 0x0) (async)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

1m30.725344405s ago: executing program 2 (id=5881):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ff01000000000000000000001801000020696c25ffffff80002020200600f8ff00000000bfa100000000000007010000f837717bd4d2f1a73b000000b70300007f000000850000007b0000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)

1m30.651846683s ago: executing program 2 (id=5883):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010001fff0f00"/20, @ANYRES32=0x0, @ANYBLOB="418c040007440000240012800b00010067656e6576650000140002800800010004000000050004000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x80000)

1m30.487654693s ago: executing program 2 (id=5886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250a000000060002000000000008000300", @ANYBLOB="45d5fa434ee69369ac1af23b89b9c9f158455b64d4010261838a33d05bd2ce75bc3c0517bf9c9c8b66bf08f676ea357523fa8d1763e3bc3fc931a43ca7531d4beaa04fb7d7ebf9e3ae18f5b1a2088044786a213fba142fa86cdced5e942bd7136debcec650830923e1a2a1adbf2751c0bcd889613e4226121ad2ccf83aa1553f727c9a2a99b6a0a7ed02c8414ce5c3739a849ceadb6b292cf68827cf920c6af53c1ad85ae27683e7abff38cfc9a094382e43bf8046e0710691c296d8a36e", @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000c004}, 0x20040044)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0)
listen(0xffffffffffffffff, 0x400004)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0xd}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000002030102000000000000001b000000000008007cfde617fa"], 0x1c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd70000000000001"], 0xd4}}, 0x4080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
shutdown(r10, 0x0)
recvmsg$unix(r11, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {<r12=>0x0}}}], 0x20}, 0x0)
syz_open_procfs$namespace(r12, 0x0)
openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000000c0), 0x12)

1m15.418295865s ago: executing program 32 (id=5886):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'})
sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250a000000060002000000000008000300", @ANYBLOB="45d5fa434ee69369ac1af23b89b9c9f158455b64d4010261838a33d05bd2ce75bc3c0517bf9c9c8b66bf08f676ea357523fa8d1763e3bc3fc931a43ca7531d4beaa04fb7d7ebf9e3ae18f5b1a2088044786a213fba142fa86cdced5e942bd7136debcec650830923e1a2a1adbf2751c0bcd889613e4226121ad2ccf83aa1553f727c9a2a99b6a0a7ed02c8414ce5c3739a849ceadb6b292cf68827cf920c6af53c1ad85ae27683e7abff38cfc9a094382e43bf8046e0710691c296d8a36e", @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000c004}, 0x20040044)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0)
listen(0xffffffffffffffff, 0x400004)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0xd}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000002030102000000000000001b000000000008007cfde617fa"], 0x1c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd70000000000001"], 0xd4}}, 0x4080)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
shutdown(r10, 0x0)
recvmsg$unix(r11, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {<r12=>0x0}}}], 0x20}, 0x0)
syz_open_procfs$namespace(r12, 0x0)
openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000000c0), 0x12)

1.352292266s ago: executing program 0 (id=7122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = gettid()
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0085000000000000140012800900010076657468000000000700028008001300", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r5 = getuid()
r6 = getgid()
r7 = getpid()
r8 = getgid()
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000c40)=<r10=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@private1}, 0x0, @in6=@initdev}}, &(0x7f0000000d80)=0xe8)
r12 = getgid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000dc0)={<r13=>0x0, 0x0, <r14=>0x0}, &(0x7f0000000e00)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000e40)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@local}}, &(0x7f0000000f40)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, <r16=>0x0}, &(0x7f0000000fc0)=0xc)
r17 = gettid()
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001000)=<r18=>0x0)
r19 = getgid()
r20 = socket$netlink(0x10, 0x3, 0x0)
r21 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000040)={0x0, <r22=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r20, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001180)=ANY=[@ANYBLOB="3c0000002e00010000000000ef39a300000000082072a7d3f087b87963dd784be579b12b032eec3b67f94e7f0def92342da8c000ee445b3f60c39c84be000000", @ANYRES32=r22, @ANYBLOB="0b000080976b640868603000150001803fb3ebf5f9cbd1185eeba9c895d0e5001a000000"], 0x3c}], 0x1}, 0x0)
r23 = getgid()
sendmmsg$unix(r1, &(0x7f0000001100)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)="b49b72e3ecd833f14af872130495fe31aea42b7ceea28eddc8afce788016876c4699a1d3a0980867a7d5e740aab087cc30337d9915aba6d4a7", 0x39}, {&(0x7f00000001c0)="5f481fffea6813a82a4d1e50f68f0356ed2faff7bd0f0b257190d5ca4242aaa288c8e38cf1a9d8d757dad8757d6d887694ec3d5f5c73a9a0bef074ef415b2f04d30b830f5d492cac2a7058f975146dd55b24ca4bb81ac8ba4adb2f7f9ac14c4b70", 0x61}, {&(0x7f0000000240)="7676c58c5c4b8178f435937eef28f4d4241bf41c852a2acaf9f98e6c162b4dba4261d6da57eac290f2b1c290e9ff7a556fb8334099590a900b5c452fc8868da1cebd0733e8b0a1f9fda0453e2135114bc8c125e9b1e0c1b092c83761de09d8c3c2b0b185fce3d6b5491c4851b4e2c0ae01f654ea1bdcc85de09e2b89b517a33a37700888c0a599dcd8bc7d86", 0x8c}, {&(0x7f0000000300)="40a5f6a7cccfce0e41c09c106be668441127da98eeeb1c648d29ad05bb41b159d95c8dc4b2c7b122f07a04c8e4002eab58229d92e383359346ca44da9a7ebb3105eb1b2fbd2abd978195535e013409a63ef1503af19cc9849a7cecdeb9fa75777ad9e8f2188d0c77cef250c3affe46ca4584a8cde06dd16df40dceece5c7c4f8c2503b43b6f84587a4e64299e8d159266c853d96", 0x94}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r14, @ANYBLOB="a3664af8a50000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x140, 0x4}}, {{&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000700)="6a923912652110c427d72f708e8a0be858a5e99aa60a56a87c334f82c2ffac487361c9676a1137ff0cb84f2f872672c380871856a93947b1f2c748b430", 0x3d}, {&(0x7f0000000740)="d3a1c18316ab18a582a4cb9dd898880a2139ea67e0bb1ccd1a38c45ec9f625136303597b6df3c3140815be3a407baf23fd2be37412b3481224f9241a3323bcfcbd49a19efbf69e192a1b292ed872fedc3083e1dea4e2ad1a614b1bac68252f0faedaa83b606c895ba8974c291b4c9aae9abab441ffd55482243c", 0x7a}, {&(0x7f00000007c0)="154c81f4219cec6056a6f8fe0a70a98ca5ca8ce079b6cd8f6b1a5bc40353c265386e6c03729d346eb2f02d28e641650015ba9fce0622ee51de2236f722a0f5b5622839ddb232fcaace3e5b952e5822f7a3cbab2469e895fdca1d13a26bb1d4c92fcf59fd58ee9035f67562f7b4d9a0477bc2d8e131263681fc79217cbc9c0e", 0x7f}, {&(0x7f0000000840)="f65f8d55dcb09e712810871a9272c647dc0fb50e2e6dd2158ffb", 0x1a}, {&(0x7f0000000880)="ef203ce071d8a8fc595a0bddf6628e9d23885cf545452dc831ac2f1cd17609ac87c9007e4019dc90e66b1408e8a78d49c570a21c440581dd4ff55feff2bc38797fbec258d244f24910ea9d186325b410b868b3b33b6ea6e1464d1d446176e8162df114ff3653dc5861f0dd49114f0f42e8a71f1ecfdddb2e547cd76acd8e03abd56fb488c838b6b099a60da3870960c150e12f4f875ece92259e761718a4152f6e7e732e91dd4c0c9c6e49a2131c915290435122c3d9f1c1", 0xb8}, {&(0x7f0000000940)="abe597b2486f52a68b3cdeba29a08f771420324019555195f1da7e696eb0bb3c9433a8e8dddd8ce30cf375f42876ab5cbffa9b1d0845d29b036404303a139ca28ef653e2f0c2d904b26f49c774507d973c662bedca43fa0895855b734f06af028810", 0x62}, {&(0x7f00000009c0)="9ccfd1cf570fad98d969ab3cd520a691d2fa8d8105596f85c92e1d07cf315bbd5509ea76bd05899889679be194be5a111107c9e392bcacd3042cb7b85027847e06dd7c17b695ea14d50961255a20b128", 0x50}, {&(0x7f0000000a40)="122b1ac7ef0baa03024335694265a5a3dd68707c", 0x14}, {&(0x7f0000000a80)="950186f7bddb1dd44be40ca9175b9347c16fefa2b6c8e67ff1dd2a309a2fffaefa1faf64ce307b082c0ee9461f4be2f1f06dde817d1168dcc545445fc65218784061b655413eee3ade8705f2ac4a95baea3b1873f4a552c3bd986378b3d821a1e8647b750ee9f2982cb2131563450698e253e19b91d36a6d0c79b69600da0852f838bd4f75d9948e85281b57dec43f6e903aa818ffb7fa125405ed74eba8457c12fa3ceae72dcc5ea7b2017d452e94528a27f9722f50b4edf0ed0e5a3620243b562e8feac3cd849de6fa2ccc34f66b9ef7975ed07749314ee83abc3bb9062d1009ae1bdfc5a70663d2c15ce45d1cc00526339c", 0xf3}], 0x9, &(0x7f0000001040)=[@rights={{0x1c, 0x1, 0x1, [r2, r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r22, r23}}}], 0xb8, 0x24008041}}], 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'geneve0\x00', @random='\x00\x00\x00\x00\x00 '})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x40}}, 0x0)

1.219233082s ago: executing program 0 (id=7125):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0)
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000140)={0x0, 0x15, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048004}, 0x20040010)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x808)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r1, 0x1feff, 0x1}}, 0x20}}, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r7)
sendmsg$NFC_CMD_VENDOR(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x14, r8, 0x4a3, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x1, @empty}}, 0x1e)
recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)

1.072343649s ago: executing program 3 (id=7129):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000680)=ANY=[@ANYRES32=r0], 0x0)
recvmmsg(r1, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES8=r1], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES8=<r4=>r2], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000001c0))
r7 = socket(0x2c, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x40000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4001, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000016c0)=ANY=[@ANYBLOB="180000004300070127bd7000fedbdf25037c00000100c280"], 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRESDEC=0x0, @ANYRESHEX=r13, @ANYBLOB="03e5c6cb08666f3ece1ac320fd33009a6c724830b2390e96bcb1e14834f744470fbf4bd2b173c35a0c65ecdc285d1b35cc39a4471afda3039c465e662c77a13f3097ceee647611830fb454d467216002605a704996a656e02bbb0a7f78e97bfd6cc8a519df36288643403d5332a276144d90ed2e18e198104462cbb23c93780815bffd6949fd57b4787a3ef0f09dd4f538f5a6bdbb6dc512752741cec3876d4819be339f510bbcb4163cceba946c53e69a2941d493f07d7c8940c7e41bf46acfa1dae090974458c9b193ced9e0c52704472cff2b5aa38ca78608035d8b7fdf6497329324"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x200080c0}, 0x40)
close(r11)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES8=r6, @ANYRES32=r5, @ANYRESOCT=r11, @ANYBLOB="08001b"], 0x30}}, 0x340000c1)

772.622131ms ago: executing program 1 (id=7133):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

612.545773ms ago: executing program 1 (id=7134):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/79, 0x4f}], 0x1}}], 0x1, 0x0, 0x0)
shutdown(r1, 0x2)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8949, &(0x7f0000000040)={'bond0\x00', 0x1000})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYRESOCT=r3], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100000000001000000000005d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x2, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r5, &(0x7f00000003c0)={0x2c, 0x10, r7}, 0x10)
readv(r5, &(0x7f0000002980)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES8=r5, @ANYBLOB="e70f9839d0e07f5c017b878a82be1a5061a38aed00b896c39918c750ef8833bde7e8f5931fc776398867"], 0x44}, 0x1, 0x0, 0x0, 0x4042000}, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

512.63714ms ago: executing program 1 (id=7135):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x0, 0x55, 0x0, 0x0, 0x3, 0x1f}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd5}, 0x44004)
ioctl$sock_ifreq(r1, 0x8971, &(0x7f00000000c0)={'team_slave_0\x00', @ifru_addrs=@ax25={0x3, @null, 0x7}})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0xfffffffffffffd45, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}, @typed={0xc, 0x143, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0xc6, 0x0, 0x0, @fd=r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

452.269338ms ago: executing program 1 (id=7136):
epoll_create(0x7)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000880)="127d", 0x2}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80800)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x59)
bind$packet(r5, &(0x7f00000001c0)={0x11, 0x6, 0x0, 0x1, 0x40, 0x6, @broadcast}, 0x14)
sendmsg$nl_route(r5, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fddbdf250100000008000100fcffffff2c00048005000300050000000500030002000000050003000200000005000300000000000500030080ff07000800020002"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x88, 0x10, 0x401, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x10892}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3c}}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r4}, @IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r5}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_ROLE={0x8}]}}}]}, 0x88}}, 0x0)

402.527162ms ago: executing program 1 (id=7137):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ff01000000000000000000001801000020696c2500000000002020200600f8ff00000000bfa1af000000000007010000f837717bd4d2f1a73b000000b70300007f000000850000007b0000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)

402.114993ms ago: executing program 1 (id=7138):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r0, &(0x7f0000000080)=""/4, 0x4)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0)
socket(0x22, 0x800, 0x6)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xfffb, 0x2}, 0x6)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4)
recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88fb4500002c0000000410119078640108000000142100004e200018907804000000ea450000c500000000000000"], 0x0)
sendmmsg$inet6(r3, &(0x7f0000007240), 0x0, 0x1c000)
pselect6(0x40, &(0x7f0000000a80)={0x2, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x100000000000003, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x4, 0x800, 0x1000000000e, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)
shutdown(r3, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000b8ee00000114000400fe8000000000000000000000000000aa0c00028004000100"], 0x98}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7200000008003900000008000300", @ANYRES32=r8, @ANYBLOB="10005a800c0001800400010004000200"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="d4000021", @ANYRESHEX=r4, @ANYBLOB="010000000000fbdbdf250a000000c00004801300010062726f6164636173742d6c696e6b00002400078016fe0300000000000800030007000000080001000000000008de8e2a1380b8af96000780080002000100000008000400000100000800030004000000080001001500000008000200030000000900010073797a30000000004c000780080003000200000008000200ffffffff080001001c0000000800020008000000080004000100000008000300b500000008000200020000000800020009000000080004007d0060ce000029282215509538f53bf0c31a8fe322282333cf4d662d0951c259722ce6d16017fa3ed863689544f164c1e0061d8e7f42500056443d8884f4659f3cfb7eacf59fbc61d528eeccac6e52fa4d12", @ANYRES8], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x40010)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x6, 0x9, &(0x7f0000001080)={{0x2c, @multicast2, 0x2, 0x0, 'ovf\x00', 0x1d, 0x0, 0x5d}, {@private=0xa010101, 0x2, 0x2000, 0x7ffffff, 0x4, 0x20104}}, 0x44)
getsockopt$inet_tcp_int(r9, 0x6, 0x9, 0x0, &(0x7f0000000040))
r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r10, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000140)='/dev/rfkill\x00', 0x20b840, &(0x7f0000000180)={@_ha_fsid={[0xb594, 0x8bf]}, {0x6, 0x401, 0x2d6, 0x6}}, 0x7fffffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x6})
socket$inet6_icmp(0xa, 0x2, 0x3a)

342.380164ms ago: executing program 0 (id=7139):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001006095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94)

340.482395ms ago: executing program 0 (id=7140):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbfa, {0xa, 0x8, 0x1, 0xff, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000002c0)="4034e976", 0x4)
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f60)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@empty, r2}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000400)="022f39d9547872", 0x7}], 0x1, 0x0, 0x0, 0x4004000}, 0x4000080)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r10], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)

212.595267ms ago: executing program 3 (id=7141):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r1=>0x0}) (async)
r2 = socket(0x2c, 0x6, 0x7)
setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f00000002c0), 0x4) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x10}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}]}]}, 0x58}}, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r5=>r0})
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000040), 0x8)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}}, 0x20008004) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r6=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vxcan1\x00', <r7=>0x0}) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000)
connect$can_bcm(r0, &(0x7f0000000380), 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000040)=@udp6}, 0x20) (async)
sendmsg$can_bcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES32, @ANYRES16=r0, @ANYRES64=0x2710, @ANYBLOB="000000000100000002000040050104"], 0x48}}, 0x20000000) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc02000000003a000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a000a"], 0xbc}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1bc, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390440a97000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e00010077697265677561726400000004000280080029001615070008001b00"], 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0)

211.697458ms ago: executing program 0 (id=7142):
r0 = socket$inet(0x2, 0xa, 0x265)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x20, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}})
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010008800000000002000100000000000000070c0000ffff05000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000200130002"], 0x98}, 0x1, 0x7}, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @remote}, 0x38, {0x2, 0xfffe, @broadcast}, 'syz_tun\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd}]}]}, 0x38}}, 0x0)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x63b, 0x0, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x9, 0x5, 0x0, 0xffffffffffffffff, 0xd}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r6 = socket$kcm(0x21, 0x2, 0x2)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x61df, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x10b8}, 0x106)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40)
socket$inet6(0xa, 0x80000, 0x100)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r10, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1468a7ab", @ANYRES16=r11, @ANYBLOB="000229bd7000ffdbdf250500000006000b002200000014000600ff020000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x808)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007a7696df152e2b5c7492e988297bbc8b78c25f18feb8ef0fae347e1b3897599eb3d42647db19432a8619a9d9c3ad6c7a587ef97cb5b440b0c0099e0d97f46a61f5a5233cbbfff003ac031773dc8b11"], 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00', r12, 0x4000, r9}, 0x18)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x146)

150.870209ms ago: executing program 3 (id=7143):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000180)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', r3, 0x29, 0x6, 0xb8, 0x7, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x0, 0x143}}) (async)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000400000100c280000800050058a3cacc08000500", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

72.294704ms ago: executing program 3 (id=7144):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ff01000000000000000000001801000020696c2500000000002020200600f8ff00000000bfa102010000000007010000f837717bd4d2f1a73b000000b70300007f000000850000007b0000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)

70.971294ms ago: executing program 0 (id=7145):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8010) (async)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0}) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x8, @void}, 0x10) (async)
r9 = socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002200)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x0, &(0x7f00000021c0)='%pS    \x00'}, 0x20)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x5, 0x28, &(0x7f00000005c0)=ANY=[@ANYBLOB="181900000000000000040000ff0f0000101100003b4bb31769b9bd0c0f11e3f508b0659016fa1cdde78c34b004d6d3d66a", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400008efee1d28500000082000000850000009a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186b00000600000000000000000000009500000000000000"], 0x0, 0x0, 0xd2, &(0x7f0000001b40)=""/210, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001c80)={0x5, 0x2, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000001cc0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r10], &(0x7f0000001d00)=[{0x4, 0x3, 0x2, 0x8}, {0x3, 0x5, 0xc, 0x1}, {0x1, 0x4, 0x6, 0xc}, {0x1, 0x5, 0x5, 0x3}, {0x1, 0x5, 0xa, 0xa}, {0x0, 0x3, 0x0, 0x8}, {0x1, 0x3, 0x6, 0x5}, {0x3, 0x2, 0x2, 0x2}, {0x4, 0x5, 0x6, 0xb}, {0x2, 0x3, 0xe}], 0x10, 0x100}, 0x94)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) (async)
ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001fc0)={r11, 0xffffffffffffffff, 0x22, 0x0, @val=@uprobe_multi={&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)=[0x5, 0x3, 0x8], &(0x7f0000001f00)=[0x0, 0x5, 0x2, 0x4, 0x4, 0x0, 0x1, 0x3, 0x0], 0x3be4, 0x3, 0x1}}, 0x40) (async)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffbfff7f}, 0xc) (async)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002140)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002100)={&(0x7f0000002000)={0xcc, 0x0, 0x22, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5c39}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xe}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc080}, 0x480c0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x2e0, 0x35, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@typed={0xc, 0x144, 0x0, 0x0, @u64=0x5}, @typed={0xc, 0x55, 0x0, 0x0, @u64=0x7}, @nested={0xb9, 0xb5, 0x0, 0x1, [@nested={0x8, 0x45, 0x0, 0x1, [@typed={0x4, 0x66}]}, @typed={0x9, 0x2c, 0x0, 0x0, @str='!\'-@\x00'}, @nested={0x8, 0x14b, 0x0, 0x1, [@nested={0x4, 0x83}]}, @typed={0x5, 0x10a, 0x0, 0x0, @str='\x00'}, @generic="689f146fb27016e861c7858c9b72ac299351c588bebe4a3cb2c0fc2c8c68566e34c910aeadc9b6076fe9cf404cf247c2411d741168f1ebc410a5c864d61991ba5cfe49d1f378e494a49160f5da40971200b0441fb2825d53adbeb93a754043f43cf698e2b3338c0f50d84259bc7c77c4351f6f3f7a47f105959c3e5d67da8ea6a5df1869150f7c3c07a7fad6384f9ead21"]}, @generic="0641aaa10754f0e67013eb55878744b905521981f9676f274364c291de09c72bb4821ac57fd57d7e3604e1656ec62b2ce4e3f7d40390e936cd482257956b3fc6e888812a809874ca22899536a964a277370576b16e1af6a6ee2a8140455019a4d83bd7eafc04584317d428397dc86125fac2ca66eb37e09feb57b4d5ba", @generic="f4fe76ee2498083bbbd4608d00455c1900fc143a9b440e0b0900105cdef64548253b70baa2a761f2834c79ef280f4140839781f9bed960da19400bb21131553673b58a2457b563969347700f3af596a15fb4f022b1964c949071313bba6cc4ecf0e4f77744708a5132da546f696340bc4aab9674a3bb45ec0426b67b2770d92944c5cb21b59a065d2ca09705cd", @generic, @generic="6934cfe6cee04404cbffe2936a834b8063bab8556946d879dfc6bf33341d4408e3e757e471d08aff1798a01e47677aef711cbfd738cfc58ac3e894ad328d9ceabe9136cd0142a19ed46a25e56f175da5d33e094bc85df2816e6020907339a877fc42d854128df68e1f438333af12235c77b3b6d91d392bb8d735e3cf00534b43c3afd851d913e56eb34c8274b12b21533414644bac5899418aa2ac64293b6121abf88c796f07bb5d0c2da64d6fe2a57557ca0ed7f142b8547b6481473d973a3a17c0ca618c29e50cf8cdf940d2531fb01daf19ecbbc85982dfe98423cb5cdab438c337b8", @typed={0x8, 0xe7, 0x0, 0x0, @ipv4=@loopback}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x2004c894}, 0xc000) (async)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r12, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c)

70.563095ms ago: executing program 3 (id=7146):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001007095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94)

0s ago: executing program 3 (id=7147):
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
socket$pppoe(0x18, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0)
pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x1000000, 0x0, 0x80000000}, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth0_macvtap\x00'})
sendto(r0, 0x0, 0x0, 0x80, &(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x1049100}, 0x80)
unshare(0x8000400)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0xb83, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r8=>0x0]}, &(0x7f0000000080)=0x8)
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f00000003c0))
ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000400)={r8, 0xc}, &(0x7f0000000440)=0x8)
r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001d40)={0x0, r5}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d00)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x7, [@typedef={0x3}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x8, 0x8e3}, {0xe, 0x9}, {0x5, 0x2}]}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x1}, @volatile={0x9}, @enum={0xd, 0x8, 0x0, 0x6, 0x4, [{0xd, 0x2}, {0xb}, {0x7, 0xf}, {0xe, 0x9}, {0x1, 0x40080}, {0x3, 0x81}, {0xc, 0x7}, {0x80002, 0x1}]}]}, {0x0, [0x30, 0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000d00)=""/4096, 0xb7, 0x1000, 0x1, 0x1, 0x10000, @value=r9}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x27, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}})

kernel console output (not intermixed with test programs):

regulatory: Falling back to sysfs fallback for: regulatory.db
[  571.161736][T28707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6051'.
[  571.363752][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6053'.
[  571.499155][T28719] 8021q: adding VLAN 0 to HW filter on device bond192
[  571.525142][T28719] bond192: (slave veth93): Enslaving as an active interface with an up link
[  571.588034][T28719] 8021q: adding VLAN 0 to HW filter on device batadv9
[  571.592836][T28719] bond192: (slave batadv9): Enslaving as an active interface with an up link
[  571.688745][T28728] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  571.730670][T28728] bond193: (slave vxcan17): The slave device specified does not support setting the MAC address
[  571.736228][T28728] bond193: (slave vxcan17): Error -95 calling set_mac_address
[  571.771909][T28730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6056'.
[  571.797128][T28730] bond193: (slave bridge108): Enslaving as an active interface with a down link
[  571.808008][T28728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6056'.
[  571.812589][T28728] 8021q: adding VLAN 0 to HW filter on device bond193
[  571.830390][T28728] macvlan14: entered promiscuous mode
[  571.832811][T28728] macvlan14: entered allmulticast mode
[  571.836216][T28728] bond193: entered promiscuous mode
[  571.840605][T28728] 8021q: adding VLAN 0 to HW filter on device macvlan14
[  571.846452][T28728] bond193: left promiscuous mode
[  572.071568][T28738] 8021q: adding VLAN 0 to HW filter on device bond194
[  572.084206][T28738] macvlan14: entered promiscuous mode
[  572.087391][T28738] macvlan14: entered allmulticast mode
[  572.123406][T28741] vlan41: entered promiscuous mode
[  572.125693][T28741] dummy0: entered promiscuous mode
[  572.127501][T28741] vlan41: entered allmulticast mode
[  572.129119][T28741] dummy0: entered allmulticast mode
[  572.143280][T28738] sctp: [Deprecated]: syz.0.6060 (pid 28738) Use of int in maxseg socket option.
[  572.143280][T28738] Use struct sctp_assoc_value instead
[  572.324103][T28754] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  572.460386][T28767] xt_CT: You must specify a L4 protocol and not use inversions on it
[  572.542622][T28778] bond195: invalid ARP target 0.0.0.0 specified for addition
[  572.545423][T28778] bond195: option arp_ip_target: invalid value (0)
[  572.548936][T28778] bond195 (unregistering): Released all slaves
[  572.621026][T28783] nbd: couldn't find a device at index 1
[  572.628440][T28783] nbd: couldn't find a device at index 1
[  572.639143][T28783] nbd: couldn't find a device at index 1
[  572.646110][T28783] nbd: couldn't find a device at index 1
[  572.655842][T28783] nbd: couldn't find a device at index 1
[  572.659433][T28783] nbd: couldn't find a device at index 1
[  572.661891][T28783] nbd: couldn't find a device at index 1
[  572.664275][T28783] nbd: couldn't find a device at index 1
[  572.667100][T28783] nbd: couldn't find a device at index 1
[  572.670385][T28783] nbd: couldn't find a device at index 1
[  572.959215][ T5482] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  572.964138][ T5482] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  572.967725][ T5482] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  572.971032][ T5482] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  573.049562][T28821] dvmrp6: entered allmulticast mode
[  573.082168][T28821] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  573.097638][T28826] team0: entered promiscuous mode
[  573.108718][T28826] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  573.263828][T28840] validate_nla: 7 callbacks suppressed
[  573.263843][T28840] netlink: 'syz.0.6088': attribute type 13 has an invalid length.
[  573.369559][T28847] bond228: entered allmulticast mode
[  573.596676][T28857] bridge0: port 1(vlan50) entered disabled state
[  574.013125][T23004] syz1: Port: 1 Link DOWN
[  574.658301][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  574.672607][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  574.677943][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  574.681754][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  574.685997][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  574.889308][T28882] syzkaller0 speed is unknown, defaulting to 1000
[  575.060027][T28882] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.062479][T28882] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.065511][T28882] bridge_slave_0: entered allmulticast mode
[  575.068600][T28882] bridge_slave_0: entered promiscuous mode
[  575.072172][T28882] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.075053][T28882] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.078372][T28882] bridge_slave_1: entered allmulticast mode
[  575.082500][T28882] bridge_slave_1: entered promiscuous mode
[  575.105273][T28882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  575.111743][T28882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  575.130953][T28882] team0: Port device team_slave_0 added
[  575.135279][T28882] team0: Port device team_slave_1 added
[  575.151781][T28882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  575.154050][T28882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  575.162911][T28882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  575.168228][T28882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  575.170497][T28882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  575.179441][T28882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  575.207566][T28882] hsr_slave_0: entered promiscuous mode
[  575.210265][T28882] hsr_slave_1: entered promiscuous mode
[  576.754823][   T53] Bluetooth: hci3: command tx timeout
[  577.366367][T28872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  577.398278][T28882] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  577.457518][T28904] __nla_validate_parse: 14 callbacks suppressed
[  577.457534][T28904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6102'.
[  577.459224][T28905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6103'.
[  577.467854][T28905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6103'.
[  577.478904][T28882] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  577.484313][T28904] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  577.498950][T28905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6103'.
[  577.499000][T28882] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  577.502420][T28905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6103'.
[  577.510969][T28882] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  577.513918][T28882] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  577.519495][T28882] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  577.522996][T28882] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  577.532929][T28882] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  577.669627][T28882] 8021q: adding VLAN 0 to HW filter on device bond0
[  577.709360][T28882] 8021q: adding VLAN 0 to HW filter on device team0
[  577.721131][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.723543][ T8971] bridge0: port 1(bridge_slave_0) entered forwarding state
[  577.729055][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.731572][ T8971] bridge0: port 2(bridge_slave_1) entered forwarding state
[  577.798529][T28923] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  577.861113][T28928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6107'.
[  577.960284][T28938] netlink: 'syz.0.6109': attribute type 1 has an invalid length.
[  577.974071][T28938] 8021q: adding VLAN 0 to HW filter on device bond195
[  577.976928][T28938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6109'.
[  577.996790][T28882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  578.041327][T28945] xt_CT: You must specify a L4 protocol and not use inversions on it
[  578.043457][T28882] veth0_vlan: entered promiscuous mode
[  578.051847][T28945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6110'.
[  578.062590][T28882] veth1_vlan: entered promiscuous mode
[  578.093002][T28882] veth0_macvtap: entered promiscuous mode
[  578.100358][T28882] veth1_macvtap: entered promiscuous mode
[  578.121855][T28882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  578.135002][T28882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  578.147472][T28950] x_tables: duplicate underflow at hook 2
[  578.152015][ T8767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.157784][ T8767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.162580][ T8767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.171678][ T8767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.378240][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.383547][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.430742][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.438068][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.656777][T28973] netlink: 'syz.3.6101': attribute type 1 has an invalid length.
[  578.681350][T28973] bond1: entered promiscuous mode
[  578.683182][T28973] 8021q: adding VLAN 0 to HW filter on device bond1
[  578.728567][T28991] netlink: 'syz.1.6116': attribute type 1 has an invalid length.
[  578.840340][   T53] Bluetooth: hci3: command tx timeout
[  578.851500][T28991] 8021q: adding VLAN 0 to HW filter on device bond229
[  578.909581][T28996] netlink: 'syz.3.6117': attribute type 11 has an invalid length.
[  578.917254][T28990] bond229: (slave veth153): Enslaving as an active interface with a down link
[  578.941361][T29001] syzkaller1: entered promiscuous mode
[  578.943118][T29001] syzkaller1: entered allmulticast mode
[  578.947665][T29002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6118'.
[  578.950826][T29001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6118'.
[  578.970872][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  578.974416][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  578.996100][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  579.003201][T29004] vlan41: entered promiscuous mode
[  579.012113][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  579.056926][T29006] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  579.060120][T29006] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  579.110062][T29008] netlink: 'syz.1.6121': attribute type 2 has an invalid length.
[  579.227354][T29012] netlink: 'syz.1.6122': attribute type 12 has an invalid length.
[  579.942856][T29017] netlink: 'syz.0.6123': attribute type 4 has an invalid length.
[  579.948054][T29017] netlink: 'syz.0.6123': attribute type 4 has an invalid length.
[  579.997278][T29017] netlink: 'syz.0.6123': attribute type 4 has an invalid length.
[  580.077240][T29026] xt_CT: No such helper "netbios-ns"
[  580.143626][T29035] Unsupported ieee802154 address type: 0
[  580.143653][T29036] 8021q: VLANs not supported on lo
[  580.157535][T29035] netlink: 'syz.0.6127': attribute type 49 has an invalid length.
[  580.242785][T29045] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  580.248197][T29045] Cannot find add_set index 0 as target
[  580.252829][T29045] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  580.379060][T29070] netlink: 'syz.0.6134': attribute type 12 has an invalid length.
[  580.592189][T29091] batadv8: entered promiscuous mode
[  580.599029][T29091] 8021q: adding VLAN 0 to HW filter on device batadv8
[  580.914926][   T53] Bluetooth: hci3: command tx timeout
[  581.781648][T29135] gtp8: entered promiscuous mode
[  581.787066][T29135] gtp8: entered allmulticast mode
[  582.445352][T29152] bond2: invalid ARP target 0.0.0.0 specified for addition
[  582.447834][T29152] bond2: option arp_ip_target: invalid value (0)
[  582.452591][T29152] bond2 (unregistering): Released all slaves
[  582.467633][T29151] team_slave_1: mtu greater than device maximum
[  582.469860][T29151] team0: Device team_slave_1 failed to change mtu
[  582.628578][T29165] bond2: option miimon: invalid value (18446744073709551607)
[  582.645559][T29165] bond2: option miimon: allowed values 0 - 2147483647
[  582.660324][T29165] bond2 (unregistering): Released all slaves
[  582.823485][T29181] syzkaller1: tun_chr_ioctl cmd 35111
[  582.827227][T29185] __nla_validate_parse: 20 callbacks suppressed
[  582.827237][T29185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6164'.
[  582.834077][T29184] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  582.913991][T29195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6167'.
[  582.951840][T29195] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  582.958721][T29195] bond2 (unregistering): Released all slaves
[  582.979541][T29196] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.6166'.
[  582.984648][T29196] pim6reg1: entered promiscuous mode
[  582.992780][T29196] pim6reg1: entered allmulticast mode
[  583.001504][   T53] Bluetooth: hci3: command tx timeout
[  583.093353][T29212] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  583.192751][T29216] 8021q: adding VLAN 0 to HW filter on device bond196
[  583.218335][T29214] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  583.224845][T29214] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  583.301882][T29219] bond197: (slave vxcan17): The slave device specified does not support setting the MAC address
[  583.309308][T29219] bond197: (slave vxcan17): Error -95 calling set_mac_address
[  583.357855][T29223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6174'.
[  583.378774][T29223] bond197: (slave bridge109): Enslaving as an active interface with a down link
[  583.388723][T29219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6174'.
[  583.413024][T29219] 8021q: adding VLAN 0 to HW filter on device bond197
[  583.437038][T29219] macvlan14: entered promiscuous mode
[  583.441903][T29219] macvlan14: entered allmulticast mode
[  583.471037][T29225] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  583.664727][T29230] veth0_macvtap: left promiscuous mode
[  583.668276][T29230] veth0_macvtap: entered promiscuous mode
[  583.674331][T29230] bridge0: port 1(vlan50) entered blocking state
[  583.676626][T29230] bridge0: port 1(vlan50) entered listening state
[  583.686359][T29230] A link change request failed with some changes committed already. Interface d may have been left with an inconsistent configuration, please check.
[  583.722309][T12071] syz1: Port: 1 Link ACTIVE
[  583.828527][T29243] validate_nla: 6 callbacks suppressed
[  583.828544][T29243] netlink: 'syz.0.6180': attribute type 1 has an invalid length.
[  583.838975][T29243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6180'.
[  583.847594][T29243] netlink: 'syz.0.6180': attribute type 1 has an invalid length.
[  584.001815][T29251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6182'.
[  584.027150][T29251] bridge110: entered promiscuous mode
[  584.028979][T29251] bridge110: entered allmulticast mode
[  584.033117][T29251] team0: Port device bridge110 added
[  584.050577][T29251] bridge0: port 2(team0) entered blocking state
[  584.057888][T29251] bridge0: port 2(team0) entered disabled state
[  584.062399][T29253] netlink: 'syz.1.6183': attribute type 4 has an invalid length.
[  584.063945][T29251] team0: entered allmulticast mode
[  584.081990][T29251] team0: left allmulticast mode
[  584.178623][T29261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6185'.
[  584.236664][T29263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6186'.
[  584.289921][T29272] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  584.312643][T29274] bond52: (slave 26): Releasing backup interface
[  584.316772][T29274] bond52: (slave 26): last VLAN challenged slave left bond - VLAN blocking is removed
[  584.333370][T29274] bond153: (slave bridge96): Releasing active interface
[  584.336824][T29274] vlan50: left allmulticast mode
[  584.338451][T29274] geneve0: left allmulticast mode
[  584.340384][T29274] vlan50: left promiscuous mode
[  584.341973][T29274] geneve0: left promiscuous mode
[  584.343806][T29274] bridge0: port 1(vlan50) entered disabled state
[  584.349830][T29274] bond158: (slave erspan2): Releasing active interface
[  584.358049][T29274] bond160: (slave batadv6): Releasing backup interface
[  584.362759][T29274] bond161: (slave bridge98): Releasing backup interface
[  584.368479][T29274] bond165: (slave bridge99): Releasing active interface
[  584.375946][T29274] bond169: (slave bridge100): Releasing backup interface
[  584.378308][T29274] bridge100: left promiscuous mode
[  584.382941][T29274] bond178: (slave veth89): Releasing backup interface
[  584.386704][T29274] veth89: left promiscuous mode
[  584.391632][T29274] bond180: (slave bond181): Releasing backup interface
[  584.399032][T29274] bond185: (slave gretap7): Releasing active interface
[  584.404394][T29274] bond190: (slave veth91): Releasing active interface
[  584.411314][T29274] team0: Port device bridge106 removed
[  584.415932][T29274] team0: Port device bridge107 removed
[  584.420139][T29274] bond192: (slave veth93): Releasing backup interface
[  584.423678][T29274] bond192: (slave veth93): the permanent HWaddr of slave - ae:f4:43:62:df:51 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  584.433852][T29274] bond192: (slave batadv9): Releasing backup interface
[  584.440873][T29274] bond193: (slave bridge108): Releasing active interface
[  584.447030][T29274] bond197: (slave bridge109): Releasing active interface
[  584.460850][T29274] team0: Port device bridge110 removed
[  584.527622][T29287] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  584.568990][T29291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6195'.
[  584.607090][T29295] netlink: 'syz.0.6194': attribute type 13 has an invalid length.
[  585.105302][T29301] : renamed from bond0 (while UP)
[  585.112023][ T5692] syz1: Port: 1 Link DOWN
[  585.183739][T29308] netlink: 'syz.3.6199': attribute type 4 has an invalid length.
[  585.189158][T29308] netlink: 'syz.3.6199': attribute type 1 has an invalid length.
[  585.253486][T29312] tap0: tun_chr_ioctl cmd 1074025677
[  585.256806][T29312] tap0: linktype set to 778
[  585.406681][T29317] macsec1: entered promiscuous mode
[  585.778435][   T54] block nbd0: Receive control failed (result -32)
[  585.830745][T29342] netlink: 'syz.0.6209': attribute type 1 has an invalid length.
[  585.860644][T29342] bond198: entered promiscuous mode
[  585.864947][T29342] 8021q: adding VLAN 0 to HW filter on device bond198
[  585.881464][T29342] bond198: (slave bridge111): making interface the new active one
[  585.883939][T29342] bridge111: entered promiscuous mode
[  585.888097][T29342] bridge111: left promiscuous mode
[  585.931194][T29346] tipc: Invalid UDP bearer configuration
[  585.931220][T29346] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  586.040528][T29353] bond199: entered promiscuous mode
[  586.043009][T29353] 8021q: adding VLAN 0 to HW filter on device bond199
[  586.091507][T29355] netlink: Unknown conntrack attr (0)
[  586.098722][T29355] Bluetooth: MGMT ver 1.23
[  586.328416][T29373] syzkaller0 speed is unknown, defaulting to 1000
[  586.350218][T29377] netlink: 'syz.3.6219': attribute type 2 has an invalid length.
[  586.356934][T29377] netlink: 'syz.3.6219': attribute type 2 has an invalid length.
[  586.411561][T29383] bond200: option packets_per_slave: invalid value (1764717422)
[  586.414910][T29383] bond200: option packets_per_slave: allowed values 0 - 65535
[  586.421094][T29383] bond200 (unregistering): Released all slaves
[  586.811603][T29401] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  586.862176][T29403] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  586.866788][T29403] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  586.913729][T29409] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  586.931597][T29409] batman_adv: batadv0: Removing interface: batadv_slave_0
[  587.846612][T29436] __nla_validate_parse: 13 callbacks suppressed
[  587.846625][T29436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6233'.
[  587.881014][T29437] 8021q: adding VLAN 0 to HW filter on device bond1
[  587.883744][T29437] 8021q: adding VLAN 0 to HW filter on device bond2
[  587.886860][T29437] hsr1: Slave B (30{X) is not up; please bring it up to get a fully working HSR network
[  587.892528][T29437] 8021q: adding VLAN 0 to HW filter on device bond3
[  587.899587][T29437] 8021q: adding VLAN 0 to HW filter on device bond4
[  587.902566][T29437] 8021q: adding VLAN 0 to HW filter on device bond5
[  587.907546][T29437] 8021q: adding VLAN 0 to HW filter on device bond6
[  587.911405][T29437] 8021q: adding VLAN 0 to HW filter on device bond7
[  587.914066][T29437] 8021q: adding VLAN 0 to HW filter on device bond8
[  587.920579][T29437] 8021q: adding VLAN 0 to HW filter on device bond9
[  587.930585][T29437] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check.
[  587.940514][T22122] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.943432][T22122] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  587.947226][T22122] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.950673][T22122] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  587.961347][T22122] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.967697][T22122] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  587.974333][T22122] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.980819][T22122] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  588.052561][T29450] netlink: 'syz.3.6237': attribute type 1 has an invalid length.
[  588.087321][T29450] bond0: entered promiscuous mode
[  588.091699][T29450] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.216664][T29461] 8021q: adding VLAN 0 to HW filter on device bond201
[  588.224188][T29461] openvswitch: netlink: Tunnel attr 3 has unexpected len 4 expected 1
[  588.227103][T29462] tap0: tun_chr_ioctl cmd 1074025681
[  588.232893][T29461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6241'.
[  588.243286][T29461] bond201 (unregistering): Released all slaves
[  588.265214][T29470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6243'.
[  588.302386][T29474] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  588.369697][T29481] xt_hashlimit: invalid rate
[  588.391875][T29479] 8021q: adding VLAN 0 to HW filter on device bond232
[  588.419881][T29479] sctp: [Deprecated]: syz.1.6245 (pid 29479) Use of int in maxseg socket option.
[  588.419881][T29479] Use struct sctp_assoc_value instead
[  588.505603][T29494] netlink: 'syz.0.6250': attribute type 11 has an invalid length.
[  588.510173][T29494] netlink: 164392 bytes leftover after parsing attributes in process `syz.0.6250'.
[  588.575318][T29505] dvmrp0: entered allmulticast mode
[  588.607143][T29507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6255'.
[  588.631322][T29507] bond201: (slave vxcan17): The slave device specified does not support setting the MAC address
[  588.635809][T29507] bond201: (slave vxcan17): Error -95 calling set_mac_address
[  588.661332][T29507] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  588.680954][T29511] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  588.686705][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6256'.
[  588.836288][T29516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6258'.
[  588.906782][T29523] syzkaller0 speed is unknown, defaulting to 1000
[  589.123269][T29529] IPv6: sit1: Disabled Multicast RS
[  589.134201][T29529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6261'.
[  589.176415][T29529] bond2: option fail_over_mac: invalid value (127)
[  589.179792][T29529] bond2 (unregistering): Released all slaves
[  590.129012][T29549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6266'.
[  590.211258][T29554] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6268'.
[  590.293978][T29554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  590.388820][T29567] validate_nla: 3 callbacks suppressed
[  590.388831][T29567] netlink: 'syz.1.6271': attribute type 1 has an invalid length.
[  590.543895][T29572] 8021q: adding VLAN 0 to HW filter on device bond233
[  590.562689][T29572] 8021q: adding VLAN 0 to HW filter on device bond234
[  590.566527][T29572] bond233: (slave bond234): Enslaving as an active interface with an up link
[  590.577695][T29572] bond233 (unregistering): (slave bond234): Releasing backup interface
[  590.582555][T29572] bond233 (unregistering): Released all slaves
[  591.085645][ T5482] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  591.089092][ T5482] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.095015][ T5482] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  591.099236][ T5482] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  591.103793][ T5482] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.107048][ T5482] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  591.131627][ T5482] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  591.136438][ T5482] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.139740][ T5482] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  591.142930][ T5482] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  591.148203][ T5482] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.151462][ T5482] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  591.160598][T29599] syzkaller1: entered promiscuous mode
[  591.162529][T29599] syzkaller1: entered allmulticast mode
[  591.173431][T29599] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  591.177667][T29599] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  591.245626][T29599] vlan36: left allmulticast mode
[  591.247774][T29599] bond217: left allmulticast mode
[  591.250549][T29599] sit9: left promiscuous mode
[  591.252797][T29599] vlan38: left promiscuous mode
[  591.257219][T29599] bond222: left promiscuous mode
[  591.261017][T29599] bridge60: left promiscuous mode
[  591.263361][T29599] vlan38: left allmulticast mode
[  591.266333][T29599] bond222: left allmulticast mode
[  591.268417][T29599] bridge60: left allmulticast mode
[  591.270765][T29599] vlan39: left allmulticast mode
[  591.272798][T29599] bond223: left allmulticast mode
[  591.276065][T29599] vlan40: left promiscuous mode
[  591.278211][T29599] bond225: left promiscuous mode
[  591.280480][T29599] vlan40: left allmulticast mode
[  591.282645][T29599] bond225: left allmulticast mode
[  591.288817][T29599] bond228: left allmulticast mode
[  591.291781][T29599] gtp8: left promiscuous mode
[  591.293811][T29599] gtp8: left allmulticast mode
[  591.298161][T29599] syzkaller1: left promiscuous mode
[  591.300400][T29599] syzkaller1: left allmulticast mode
[  591.305309][T29604] sch_tbf: burst 0 is lower than device ip6gre0 mtu (32769) !
[  591.334110][T29607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  591.516563][T29612] netlink: 'syz.3.6284': attribute type 1 has an invalid length.
[  591.524179][T29614] netlink: 'syz.0.6285': attribute type 1 has an invalid length.
[  591.552423][T29614] 8021q: adding VLAN 0 to HW filter on device bond202
[  591.559834][T29612] bond4 (unregistering): Released all slaves
[  591.845209][T29627] netlink: 'syz.3.6288': attribute type 1 has an invalid length.
[  591.858268][T29627] 8021q: adding VLAN 0 to HW filter on device bond4
[  591.929617][T29629] veth5: entered allmulticast mode
[  591.938662][T29629] bond4: (slave veth5): Enslaving as an active interface with a down link
[  592.521673][T29640] netlink: 'syz.1.6292': attribute type 1 has an invalid length.
[  592.542115][T29640] 8021q: adding VLAN 0 to HW filter on device bond233
[  592.568289][T29640] bond233: (slave veth155): Enslaving as an active interface with a down link
[  592.647379][T29642] team0: left promiscuous mode
[  592.737743][T29642] veth0_macvtap: left promiscuous mode
[  592.774371][T29642] veth0_macvtap: entered promiscuous mode
[  592.824067][T29642] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  592.949914][ T5673] IPVS: starting estimator thread 0...
[  592.983678][T29651] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  592.992120][T23004] syz1: Port: 1 Link ACTIVE
[  593.015434][   T33] audit: type=1804 audit(1778600810.835:30): pid=29655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6296" name="/newroot/2069/memory.events" dev="tmpfs" ino=10580 res=1 errno=0
[  593.022651][   T33] audit: type=1800 audit(1778600810.835:31): pid=29655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6296" name="memory.events" dev="tmpfs" ino=10580 res=0 errno=0
[  593.055214][T29659] IPVS: using max 81 ests per chain, 194400 per kthread
[  593.153207][T29664] __nla_validate_parse: 15 callbacks suppressed
[  593.153223][T29664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6299'.
[  593.158334][T29674] netlink: 'syz.0.6302': attribute type 10 has an invalid length.
[  593.159713][T29664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6299'.
[  593.167277][T29674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6302'.
[  593.168285][T29673] TC_ACT_REPEAT abuse ?
[  593.202761][T29674] team0: Port device geneve1 added
[  593.261567][T29676] netlink: 'syz.1.6303': attribute type 1 has an invalid length.
[  593.337123][T29676] workqueue: Failed to create a rescuer kthread for wq "bond235": -EINTR
[  593.388774][T29686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6306'.
[  593.427887][T29685] sctp: [Deprecated]: syz.1.6305 (pid 29685) Use of int in max_burst socket option deprecated.
[  593.427887][T29685] Use struct sctp_assoc_value instead
[  593.566980][T29703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6311'.
[  593.609374][T29711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6314'.
[  593.718922][T29715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  593.722459][T29715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.818045][T29721] netlink: 'syz.0.6318': attribute type 4 has an invalid length.
[  593.820737][T29721] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6318'.
[  593.890353][T29715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  593.895739][T29715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  593.911581][T29737] team0: entered promiscuous mode
[  593.913304][T29737] team_slave_1: entered promiscuous mode
[  593.915899][T29737] geneve1: entered promiscuous mode
[  593.917664][T29737] macvlan7: entered promiscuous mode
[  593.919452][T29737] bridge40: entered promiscuous mode
[  593.921228][T29737] bridge44: entered promiscuous mode
[  593.923245][T29737] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  593.983975][T29715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  593.988103][T29715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.098303][T29715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  594.101954][T29715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.206977][ T8767] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  594.210395][ T8767] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  594.243824][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  594.248814][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  594.271133][   T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  594.274063][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  594.300651][   T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  594.303982][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  594.330868][T29756] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6326'.
[  594.333646][T29756] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6326'.
[  594.377812][T29758] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  594.695948][T29775] xt_CT: You must specify a L4 protocol and not use inversions on it
[  594.748784][T29775] syzkaller0: entered promiscuous mode
[  594.751177][T29775] syzkaller0: entered allmulticast mode
[  597.031347][T29803] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  597.033944][T29803] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  597.196112][T29817] bond235 (unregistering): Released all slaves
[  597.305369][T29829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6345'.
[  597.337107][T29829] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  597.414434][T29838] netlink: 'syz.1.6347': attribute type 4 has an invalid length.
[  597.421072][T29838] netlink: 'syz.1.6347': attribute type 4 has an invalid length.
[  597.674444][T29852] bond235: entered allmulticast mode
[  597.690352][T29852] macvlan10: entered promiscuous mode
[  597.692490][T29852] macvlan10: entered allmulticast mode
[  597.698334][T29852] bond235: entered promiscuous mode
[  597.700918][T29852] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  597.707095][T29852] bond235: left promiscuous mode
[  597.720761][T29855] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  597.759796][T29857] netlink: 'syz.0.6354': attribute type 1 has an invalid length.
[  597.780665][T29857] bond203: entered promiscuous mode
[  597.784886][T29857] 8021q: adding VLAN 0 to HW filter on device bond203
[  597.811931][T29860] netlink: 'syz.1.6355': attribute type 1 has an invalid length.
[  597.845153][T29860] 8021q: adding VLAN 0 to HW filter on device bond236
[  597.993401][T29872] netlink: 'syz.1.6359': attribute type 1 has an invalid length.
[  598.085823][T29872] 8021q: adding VLAN 0 to HW filter on device bond237
[  598.142168][T29875] vlan41: entered allmulticast mode
[  598.144329][T29875] bond237: entered allmulticast mode
[  598.182879][T29874] syzkaller0 speed is unknown, defaulting to 1000
[  598.232854][T29880] __nla_validate_parse: 3 callbacks suppressed
[  598.232871][T29880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6361'.
[  598.392109][T29895] netlink: 'syz.3.6365': attribute type 29 has an invalid length.
[  598.545883][T29903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6366'.
[  598.618927][T29900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6363'.
[  598.662358][T29912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6367'.
[  598.670296][T29912] ip6gre1: entered promiscuous mode
[  598.672322][T29912] ip6gre1: entered allmulticast mode
[  601.259682][T29884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  601.379354][T29924] netlink: 'syz.0.6371': attribute type 1 has an invalid length.
[  601.402056][T29924] bond204: entered promiscuous mode
[  601.403865][T29924] 8021q: adding VLAN 0 to HW filter on device bond204
[  601.433596][T29924] vlan59: entered allmulticast mode
[  601.436058][T29924] bond204: entered allmulticast mode
[  601.448687][T29924] bond204: (slave bridge111): making interface the new active one
[  601.451307][T29924] bridge111: entered promiscuous mode
[  601.453212][T29924] bridge111: entered allmulticast mode
[  601.456565][T29924] bond204: (slave bridge111): Enslaving as an active interface with an up link
[  601.473450][T29929] syzkaller0 speed is unknown, defaulting to 1000
[  601.499072][T29930] batman_adv: batadv0: Adding interface: ipvlan5
[  601.501068][T29930] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  601.511682][T29930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1
[  601.516624][T29930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.520747][T29930] batman_adv: batadv0: Not using interface ipvlan5 (retrying later): interface not active
[  601.628566][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6379'.
[  601.679203][T29946] syzkaller0: entered promiscuous mode
[  601.684080][T29946] syzkaller0: entered allmulticast mode
[  601.696482][T29946] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  601.715515][T29964] netlink: 'syz.0.6381': attribute type 11 has an invalid length.
[  601.786032][T29968] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  601.789482][T29968] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  601.792347][T29968] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  601.797636][T29968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6383'.
[  601.903920][T29974] syzkaller0: mtu less than device minimum
[  601.961542][T29977] erspan0: entered promiscuous mode
[  601.995215][T29984] netlink: 'syz.0.6387': attribute type 1 has an invalid length.
[  602.003715][T29984] workqueue: Failed to create a rescuer kthread for wq "bond205": -EINTR
[  602.082774][T29995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6389'.
[  602.286262][T30012] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6392'.
[  602.297697][T30009] bond239: down delay (1023) is not a multiple of miimon (100), value rounded to 1000 ms
[  602.300967][T30009] bond239: entered allmulticast mode
[  602.306130][T30012] netlink: 'syz.0.6392': attribute type 1 has an invalid length.
[  602.323784][T30014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6393'.
[  602.332597][T30014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6393'.
[  602.364442][T30014] tipc: Started in network mode
[  602.376857][T30014] tipc: Node identity a653cdcd8c0e, cluster identity 4711
[  602.385079][T30014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  602.443293][T30024] xt_TCPMSS: Only works on TCP SYN packets
[  602.455312][T30014] syzkaller0: entered promiscuous mode
[  602.457270][T30014] syzkaller0: entered allmulticast mode
[  602.548030][T30014] bridge_slave_1: left allmulticast mode
[  602.550406][T30014] bridge_slave_1: left promiscuous mode
[  602.552920][T30014] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.573541][T30014] bridge_slave_0: left allmulticast mode
[  602.580292][T30014] bridge_slave_0: left promiscuous mode
[  602.582984][T30014] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.678364][T30013] tipc: Resetting bearer <eth:syzkaller0>
[  602.711398][T30013] tipc: Disabling bearer <eth:syzkaller0>
[  602.719764][T30034] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  602.723568][T30034] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  602.820631][T30038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5
[  602.831391][T30038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.838679][T30038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1
[  602.843725][T30038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.860103][T30038] tipc: Resetting bearer <eth:syzkaller0>
[  602.943667][T30038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan5
[  602.946856][T30038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.967348][T30038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1
[  602.970445][T30038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.985970][T30041] bond205 (unregistering): Released all slaves
[  602.988561][T23004] syzkaller0 speed is unknown, defaulting to 1000
[  603.199661][T30052] netlink: 'syz.0.6403': attribute type 1 has an invalid length.
[  603.220616][T30052] 8021q: adding VLAN 0 to HW filter on device bond205
[  603.237599][T30052] macvlan15: entered promiscuous mode
[  603.239908][T30052] macvlan15: entered allmulticast mode
[  603.242920][T30052] bond205: entered allmulticast mode
[  603.245471][T30052] bond205: entered promiscuous mode
[  603.248065][T30052] 8021q: adding VLAN 0 to HW filter on device macvlan15
[  603.255617][T30052] team0: Port device macvlan15 added
[  603.263966][T30052] sctp: [Deprecated]: syz.0.6403 (pid 30052) Use of int in maxseg socket option.
[  603.263966][T30052] Use struct sctp_assoc_value instead
[  603.372519][T30061] __nla_validate_parse: 6 callbacks suppressed
[  603.372537][T30061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6406'.
[  603.385582][T30061] netlink: 'syz.0.6406': attribute type 26 has an invalid length.
[  603.388310][T30061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6406'.
[  603.392363][T30061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6406'.
[  603.398988][T30061] netlink: 'syz.0.6406': attribute type 26 has an invalid length.
[  603.402206][T30061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6406'.
[  603.645055][T30070] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6408'.
[  603.706061][T30077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6410'.
[  603.744034][T30081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6412'.
[  603.761342][T30084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6413'.
[  603.765770][T30085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6413'.
[  603.779141][T30084] syzkaller1: entered allmulticast mode
[  603.819900][T30087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6414'.
[  603.857099][T30090] netlink: 'syz.0.6415': attribute type 1 has an invalid length.
[  603.890326][T30090] bond207 (unregistering): Released all slaves
[  603.969404][T30097] xt_hashlimit: size too large, truncated to 1048576
[  604.126145][T30113] netlink: 'syz.1.6422': attribute type 1 has an invalid length.
[  604.197370][T30123] netlink: 'syz.3.6424': attribute type 1 has an invalid length.
[  604.225853][T30123] 8021q: adding VLAN 0 to HW filter on device bond5
[  604.233254][T30123] bond5 (unregistering): Released all slaves
[  604.459399][T30144] netlink: 'syz.1.6429': attribute type 1 has an invalid length.
[  604.493971][T30144] bond240: entered promiscuous mode
[  604.496969][T30144] 8021q: adding VLAN 0 to HW filter on device bond240
[  604.536801][T30144] 8021q: adding VLAN 0 to HW filter on device bond240
[  604.539293][T30144] bond240: (slave wireguard7): The slave device specified does not support setting the MAC address
[  604.542647][T30144] bond240: (slave wireguard7): Setting fail_over_mac to active for active-backup mode
[  604.551294][T30144] bond240: (slave wireguard7): making interface the new active one
[  604.553831][T30144] wireguard7: entered promiscuous mode
[  604.557186][T30144] bond240: (slave wireguard7): Enslaving as an active interface with an up link
[  604.598124][T30149] bond5: (slave bond_slave_1): Device is not our slave
[  604.600370][T30149] bond5: option active_slave: invalid value (bond_slave_1)
[  604.605850][T30149] bond5 (unregistering): Released all slaves
[  604.632817][T30150] bond5: (slave bond_slave_1): Device is not our slave
[  604.635460][T30150] bond5: option active_slave: invalid value (bond_slave_1)
[  604.639190][T30150] bond5 (unregistering): Released all slaves
[  604.691264][T30154] bond207: entered promiscuous mode
[  604.693255][T30154] 8021q: adding VLAN 0 to HW filter on device bond207
[  604.701454][T30157] team0: left promiscuous mode
[  604.703366][T30157] team_slave_1: left promiscuous mode
[  604.706520][T30157] geneve1: left promiscuous mode
[  604.708280][T30157] macvlan7: left promiscuous mode
[  604.709988][T30157] bridge40: left promiscuous mode
[  604.711713][T30157] bridge44: left promiscuous mode
[  604.716817][T30157] bond240: left promiscuous mode
[  604.718475][T30157] wireguard7: left promiscuous mode
[  604.850330][T30171] netlink: 'syz.1.6436': attribute type 1 has an invalid length.
[  604.953383][T30182] netlink: 'syz.3.6439': attribute type 4 has an invalid length.
[  604.966631][T30182] netlink: 'syz.3.6439': attribute type 4 has an invalid length.
[  605.019247][T30188] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  605.102798][T30198] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  605.437336][T30217] bond0: entered promiscuous mode
[  605.447078][T30217] bond0: left promiscuous mode
[  605.612226][T30227] v: renamed from 31{X (while UP)
[  605.867871][T30243] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  605.914176][T30245] hma(kX: entered promiscuous mode
[  605.962828][T30249] xt_hashlimit: size too large, truncated to 1048576
[  606.312046][T30262] bond241: entered allmulticast mode
[  606.328151][T30262] macvlan10: entered promiscuous mode
[  606.330351][T30262] macvlan10: entered allmulticast mode
[  606.333377][T30262] bond241: entered promiscuous mode
[  606.337346][T30262] 8021q: adding VLAN 0 to HW filter on device macvlan10
[  606.345672][T30262] bond241: left promiscuous mode
[  606.561905][T30274] ipvlan2: entered allmulticast mode
[  606.566453][T30274] gretap0: entered allmulticast mode
[  607.317601][T30292] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  607.321400][T30292] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  607.376940][T30296] bond5: (slave bridge0): Enslaving as an active interface with a down link
[  607.438814][T30296] ip6gretap1: entered promiscuous mode
[  607.440755][T30296] ip6gretap1: entered allmulticast mode
[  607.445720][T30296] bond5: (slave ip6gretap1): making interface the new active one
[  607.449386][T30296] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  607.589982][T30319] bond242: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  607.599527][T30319] bond242 (unregistering): Released all slaves
[  607.701915][T30325] bond6: entered promiscuous mode
[  607.703770][T30325] 8021q: adding VLAN 0 to HW filter on device bond6
[  607.728134][T30325] 8021q: adding VLAN 0 to HW filter on device bond6
[  607.730582][T30325] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  607.733906][T30325] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  607.743456][T30325] bond6: (slave wireguard0): making interface the new active one
[  607.746378][T30325] wireguard0: entered promiscuous mode
[  607.749154][T30325] bond6: (slave wireguard0): Enslaving as an active interface with an up link
[  607.769057][T30328] bond0: entered promiscuous mode
[  607.774677][T30328] bond30: entered promiscuous mode
[  607.777244][T30328] bond0: left promiscuous mode
[  607.778903][T30328] bond30: left promiscuous mode
[  607.949258][T30344] 8021q: adding VLAN 0 to HW filter on device bond242
[  607.976706][T30344] 8021q: adding VLAN 0 to HW filter on device bond243
[  607.981759][T30344] bond242: (slave bond243): Enslaving as an active interface with an up link
[  607.994991][T30344] bond242 (unregistering): (slave bond243): Releasing backup interface
[  608.001076][T30344] bond242 (unregistering): Released all slaves
[  608.469568][T30381] __nla_validate_parse: 35 callbacks suppressed
[  608.469580][T30381] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6494'.
[  608.529025][T13378] geneve1: entered promiscuous mode
[  608.586946][T30392] validate_nla: 13 callbacks suppressed
[  608.586964][T30392] netlink: 'syz.0.6497': attribute type 1 has an invalid length.
[  608.601120][T30392] workqueue: Failed to create a rescuer kthread for wq "bond208": -EINTR
[  608.693831][T30401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6500'.
[  608.791102][T30419] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6503'.
[  608.825907][T30422] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6504'.
[  608.829587][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6504'.
[  608.833153][T30422] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6504'.
[  608.837194][T30422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6504'.
[  608.840805][T30422] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6504'.
[  608.926869][T30426] IPVS: Unknown mcast interface: dvmrp1
[  609.014141][T30433] netlink: 'syz.3.6507': attribute type 1 has an invalid length.
[  609.038777][T30433] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  609.042623][T30433] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  609.052666][T30433] bond7: (slave vxcan3): making interface the new active one
[  609.056311][T30433] bond7: (slave vxcan3): Enslaving as an active interface with an up link
[  609.059963][T30438] gre0: entered promiscuous mode
[  609.063287][T30438] gre0: entered allmulticast mode
[  609.067477][T30433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6507'.
[  609.070490][T30433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6507'.
[  609.078806][T30433] bond7 (unregistering): (slave vxcan3): Releasing backup interface
[  609.083275][T30433] bond7 (unregistering): Released all slaves
[  609.156932][T30440] bridge67: entered promiscuous mode
[  609.313004][T30455] netlink: 'syz.1.6516': attribute type 1 has an invalid length.
[  609.342163][T30455] 8021q: adding VLAN 0 to HW filter on device bond242
[  609.439039][T30461] veth159: entered allmulticast mode
[  609.444037][T30461] bond244: (slave veth159): Enslaving as an active interface with an up link
[  609.453311][T30461] bond244 (unregistering): (slave veth159): Releasing backup interface
[  609.458511][T30461] bond244 (unregistering): Released all slaves
[  609.671951][T30466] netlink: 'syz.1.6520': attribute type 4 has an invalid length.
[  609.677492][T30466] netlink: 'syz.1.6520': attribute type 4 has an invalid length.
[  609.686765][T30466] netlink: 'syz.1.6520': attribute type 4 has an invalid length.
[  609.889276][T30485] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  609.953753][T30491] netlink: 'syz.0.6527': attribute type 1 has an invalid length.
[  609.990167][T30491] bond208 (unregistering): Released all slaves
[  610.039232][T30495] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  610.198255][T30510] netlink: 'syz.3.6531': attribute type 1 has an invalid length.
[  610.219568][T30510] bond7: entered promiscuous mode
[  610.221920][T30510] 8021q: adding VLAN 0 to HW filter on device bond7
[  610.228797][T30510] netlink: 'syz.3.6531': attribute type 1 has an invalid length.
[  610.231467][T30510] netlink: 'syz.3.6531': attribute type 1 has an invalid length.
[  610.254145][T30516] ipvlan1: entered promiscuous mode
[  610.257017][T30516] bridge0: port 1(ipvlan1) entered blocking state
[  610.259592][T30516] bridge0: port 1(ipvlan1) entered disabled state
[  610.261882][T30516] ipvlan1: entered allmulticast mode
[  610.263930][T30516] bridge0: entered allmulticast mode
[  610.268907][T30516] ipvlan1: left allmulticast mode
[  610.270680][T30516] bridge0: left allmulticast mode
[  610.286977][T30510] ipvlan2: entered allmulticast mode
[  610.289182][T30510] bond7: entered allmulticast mode
[  610.301006][T30510] ipvlan3: entered allmulticast mode
[  610.333368][T30510] bond7: (slave bridge4): making interface the new active one
[  610.336567][T30510] bridge4: entered promiscuous mode
[  610.338833][T30510] bridge4: entered allmulticast mode
[  610.342405][T30510] bond7: (slave bridge4): Enslaving as an active interface with an up link
[  610.672210][T30550] bond244: entered promiscuous mode
[  610.674224][T30550] 8021q: adding VLAN 0 to HW filter on device bond244
[  610.691598][T30550] bond244: entered allmulticast mode
[  610.712098][T30550] bond244: (slave bridge68): making interface the new active one
[  610.716850][T30550] bridge68: entered promiscuous mode
[  610.719159][T30550] bridge68: entered allmulticast mode
[  610.722743][T30550] bond244: (slave bridge68): Enslaving as an active interface with an up link
[  610.731649][T30554] geneve2: entered promiscuous mode
[  610.733431][T30554] geneve2: entered allmulticast mode
[  611.067002][T30578] 8021q: adding VLAN 0 to HW filter on device bond8
[  611.495588][T30583] 8021q: adding VLAN 0 to HW filter on device bond208
[  611.516362][T30583] veth97: entered allmulticast mode
[  611.522978][T30583] bond208: (slave veth97): Enslaving as an active interface with a down link
[  611.537403][T30583] bond208 (unregistering): (slave veth97): Releasing active interface
[  611.543429][T30583] bond208 (unregistering): Released all slaves
[  611.648839][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.651896][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.654618][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.657111][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.660280][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.663055][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.666963][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.669714][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.672406][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.675502][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.677739][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.679964][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.682176][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.684813][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.688785][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.691380][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.693617][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.696572][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.699868][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.702767][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.705899][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.708334][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.710557][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.712923][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.716548][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.719462][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.722279][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.725052][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.728142][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.730871][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.733629][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.736947][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.739797][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.742638][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.746017][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.748896][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.751758][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.754993][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.758196][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.761120][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.763792][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.766566][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.769637][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.772269][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.774392][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.777399][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.780182][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.782971][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.785873][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.788991][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.791762][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.797676][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.800506][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.803292][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.805698][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.808661][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.810888][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.813029][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.815759][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.818220][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.820418][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.822594][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.825065][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.827669][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  611.830260][T30586] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003
[  612.060825][T30609] 8021q: adding VLAN 0 to HW filter on device bond9
[  612.098803][T30612] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  612.117604][T30612] mac80211_hwsim hwsim177 syzkaller0: entered promiscuous mode
[  612.120837][T30612] mac80211_hwsim hwsim177 syzkaller0: entered allmulticast mode
[  612.193507][T30614] xt_CT: You must specify a L4 protocol and not use inversions on it
[  612.243101][T30618] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  612.625504][T30645] sctp: [Deprecated]: syz.3.6571 (pid 30645) Use of int in max_burst socket option.
[  612.625504][T30645] Use struct sctp_assoc_value instead
[  612.762978][T30658] 8021q: adding VLAN 0 to HW filter on device bond245
[  612.792358][T30658] bond245: (slave veth161): Enslaving as an active interface with an up link
[  612.860941][T30666] 8021q: adding VLAN 0 to HW filter on device batadv8
[  612.865611][T30666] bond245: (slave batadv8): Enslaving as an active interface with an up link
[  612.927299][T30672] pim6reg: entered allmulticast mode
[  612.932828][T30673] pim6reg: left allmulticast mode
[  612.986002][T30683] 8021q: adding VLAN 0 to HW filter on device bond208
[  612.994900][T30683] vlan0: entered allmulticast mode
[  612.996572][T30683] bond208: entered allmulticast mode
[  613.105832][T30692] geneve10: entered promiscuous mode
[  613.109662][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.113539][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.124968][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.128297][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.272825][T30702] bond246: Unable to set peer notification delay as MII monitoring is disabled
[  613.282550][T30702] bond246 (unregistering): Released all slaves
[  613.363759][T30702] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  613.409941][T30709] 8021q: adding VLAN 0 to HW filter on device bond209
[  613.423119][T30709] vlan60: entered allmulticast mode
[  613.425353][T30709] bond209: entered allmulticast mode
[  613.619067][T30720] __nla_validate_parse: 34 callbacks suppressed
[  613.619082][T30720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6592'.
[  613.852672][T30732] validate_nla: 42 callbacks suppressed
[  613.852684][T30732] netlink: 'syz.3.6595': attribute type 1 has an invalid length.
[  613.863528][T30732] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  613.947763][T30748] erspan1: entered promiscuous mode
[  613.952589][T30748] erspan1: entered allmulticast mode
[  614.245597][T30756] netlink: 'syz.1.6601': attribute type 13 has an invalid length.
[  614.350968][T30768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6603'.
[  614.451749][T30769] : (slave bond_slave_0): Releasing backup interface
[  614.458632][T30769] : (slave bond_slave_1): Releasing backup interface
[  614.469151][T30769] team0: Port device team_slave_0 removed
[  614.477563][T30769] team0: Port device team_slave_1 removed
[  614.480486][T30769] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  614.482903][T30769] batman_adv: batadv0: Removing interface: batadv_slave_1
[  614.487512][T30769] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  614.526475][T22122] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.535480][T22122] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.540296][T22122] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.543200][T22122] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  614.547865][T30771] netem: incorrect ge model size
[  614.551351][T30771] netem: change failed
[  614.640710][T30778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6606'.
[  614.664088][T30786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6608'.
[  614.674028][T30784] macvtap2: entered promiscuous mode
[  614.676551][T30784] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  614.678897][T30784] macvtap2: entered allmulticast mode
[  614.680688][T30784] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  614.690427][T30787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6608'.
[  614.695230][T30786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6608'.
[  614.780806][T30796] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6610'.
[  614.851851][T30789] team0: Device macvlan15 failed to change mtu
[  615.007380][T30823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6617'.
[  615.012807][T30823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6617'.
[  615.068815][T30830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6619'.
[  615.131204][T30838] vlan0: entered promiscuous mode
[  615.133476][T30838] vlan0: entered allmulticast mode
[  615.136067][T30838] veth0_vlan: entered allmulticast mode
[  615.246868][T30850] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  615.249909][T30850] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  615.252235][T30850] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  615.284373][T30850] syzkaller0: mtu less than device minimum
[  615.291194][T30853] netlink: 'syz.0.6625': attribute type 1 has an invalid length.
[  615.312740][T30859] netlink: 'syz.1.6627': attribute type 1 has an invalid length.
[  615.326064][T30853] 8021q: adding VLAN 0 to HW filter on device bond211
[  615.370536][T30859] bond246: entered promiscuous mode
[  615.372510][T30859] 8021q: adding VLAN 0 to HW filter on device bond246
[  615.487949][T30877] netlink: 'syz.3.6632': attribute type 1 has an invalid length.
[  615.531919][T30877] 8021q: adding VLAN 0 to HW filter on device bond11
[  615.558286][T30885] bond11: (slave gretap1): making interface the new active one
[  615.563176][T30885] bond11: (slave gretap1): Enslaving as an active interface with an up link
[  615.590478][T30877] bond11 (unregistering): (slave gretap1): Releasing active interface
[  615.595246][T30877] bond11 (unregistering): Released all slaves
[  615.628350][T30881] netlink: 'syz.1.6633': attribute type 10 has an invalid length.
[  615.765118][T30895] netlink: 'syz.3.6637': attribute type 1 has an invalid length.
[  616.169390][T30915] netlink: 'syz.1.6641': attribute type 1 has an invalid length.
[  616.197791][T30902] geneve1: left promiscuous mode
[  616.646031][T30902] bond205: left allmulticast mode
[  616.649771][T30902] bond205: left promiscuous mode
[  616.689189][T30895] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  616.735525][T30915] 8021q: adding VLAN 0 to HW filter on device bond247
[  616.772124][T30916] bond247: (slave veth163): Enslaving as an active interface with a down link
[  616.775093][ T5692] syz1: Port: 1 Link DOWN
[  616.792977][T30917] bond247: (slave veth165): Enslaving as an active interface with a down link
[  616.813265][T30918] bond247: (slave bridge69): Enslaving as an active interface with a down link
[  616.823686][T30925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  616.833198][T30925] mac80211_hwsim hwsim176 wlan0: entered promiscuous mode
[  616.860655][T30929] netlink: 'syz.1.6644': attribute type 4 has an invalid length.
[  616.864116][T30929] netlink: 'syz.1.6644': attribute type 4 has an invalid length.
[  616.916564][T30932] 8021q: adding VLAN 0 to HW filter on device bond212
[  616.925788][T30925] tipc: Resetting bearer <eth:syzkaller0>
[  616.943402][T30932] vlan61: entered allmulticast mode
[  616.947491][T30932] bond212: entered allmulticast mode
[  617.033726][   T33] audit: type=1804 audit(1778600834.845:32): pid=30937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6647" name="/newroot/166/memory.events" dev="tmpfs" ino=862 res=1 errno=0
[  617.042396][   T33] audit: type=1800 audit(1778600834.845:33): pid=30937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6647" name="memory.events" dev="tmpfs" ino=862 res=0 errno=0
[  617.105338][T30945] Cannot find add_set index 0 as target
[  617.149098][T30947] 8021q: adding VLAN 0 to HW filter on device bond248
[  617.226821][T30957] 8021q: adding VLAN 0 to HW filter on device bond249
[  617.239559][T30957] vlan42: entered allmulticast mode
[  617.241562][T30957] bond249: entered allmulticast mode
[  617.483232][T30977] block nbd3: not configured, cannot reconfigure
[  617.500205][T30992] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  617.503258][T30992] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  617.616722][T30999] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  617.633260][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.637315][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.640169][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.646118][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.934752][T12071] tipc: Node number set to 710790605
[  621.508461][T31014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  621.610935][T31041] validate_nla: 7 callbacks suppressed
[  621.610947][T31041] netlink: 'syz.0.6674': attribute type 1 has an invalid length.
[  621.658511][T31042] __nla_validate_parse: 20 callbacks suppressed
[  621.658523][T31042] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6675'.
[  621.664938][T31042] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6675'.
[  621.697680][T31048] dvmrp0: entered allmulticast mode
[  621.706817][T31042] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6675'.
[  621.771482][T31054] bond213: entered allmulticast mode
[  621.778229][T31054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6679'.
[  621.817475][T31060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6681'.
[  621.895503][T31064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6682'.
[  622.113780][T31070] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  622.121403][T31069] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  622.156468][T31074] netlink: 'syz.0.6684': attribute type 1 has an invalid length.
[  622.192664][T31074] 8021q: adding VLAN 0 to HW filter on device bond214
[  622.361874][T31085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6687'.
[  622.444732][T31085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  622.520604][T31093] sit2: entered promiscuous mode
[  622.554266][T31095] syzkaller1: tun_chr_ioctl cmd 1074025677
[  622.560919][T31095] syzkaller1: linktype set to 780
[  622.585530][T31097] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  622.620526][T31099] netlink: 'syz.3.6691': attribute type 1 has an invalid length.
[  622.648035][T31099] 8021q: adding VLAN 0 to HW filter on device bond11
[  622.667160][T31099] vlan2: entered allmulticast mode
[  622.669426][T31099] bond11: entered allmulticast mode
[  622.793541][T31110] netlink: 300 bytes leftover after parsing attributes in process `syz.1.6694'.
[  622.797753][T31110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6694'.
[  622.800642][T31110] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6694'.
[  622.895633][T31116] vlan0: left promiscuous mode
[  622.901363][T31116] mac80211_hwsim hwsim176 wlan0: left promiscuous mode
[  622.904445][T31116] bond1: left promiscuous mode
[  622.909224][T31116] bond0: left promiscuous mode
[  622.913733][T31116] ip6gre1: left promiscuous mode
[  622.919685][T31116] mac80211_hwsim hwsim177 syzkaller0: left promiscuous mode
[  622.922358][T31116] ip6gretap1: left promiscuous mode
[  622.925367][T31116] bond6: left promiscuous mode
[  622.927434][T31116] wireguard0: left promiscuous mode
[  622.931993][T31116] bond7: left promiscuous mode
[  622.934145][T31116] bridge4: left promiscuous mode
[  622.939179][T31116] geneve2: left promiscuous mode
[  622.943716][T31116] erspan1: left promiscuous mode
[  622.947435][T31116] sit2: left promiscuous mode
[  623.093216][T31126] netlink: 'syz.3.6700': attribute type 1 has an invalid length.
[  623.129237][T31126] 8021q: adding VLAN 0 to HW filter on device bond12
[  623.217572][T31139] netlink: 'syz.1.6703': attribute type 46 has an invalid length.
[  623.228515][T31139] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  623.231868][T31139] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  623.277060][T31143] netlink: 'syz.1.6705': attribute type 4 has an invalid length.
[  623.283079][T31143] netlink: 'syz.1.6705': attribute type 4 has an invalid length.
[  623.503408][T31159] netlink: 'syz.3.6709': attribute type 1 has an invalid length.
[  623.518256][T31159] 8021q: adding VLAN 0 to HW filter on device bond13
[  623.532642][T31159] vlan3: entered allmulticast mode
[  623.535462][T31159] bond13: entered allmulticast mode
[  623.623513][T31164] netlink: 'syz.3.6711': attribute type 1 has an invalid length.
[  623.639306][T31164] 8021q: adding VLAN 0 to HW filter on device bond14
[  623.778919][T31179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  623.782090][T31179] mac80211_hwsim hwsim177 syzkaller0: entered promiscuous mode
[  623.921543][T31183] netlink: 'syz.3.6716': attribute type 1 has an invalid length.
[  623.934285][T31183] 8021q: adding VLAN 0 to HW filter on device bond15
[  623.950611][T31183] vlan4: entered allmulticast mode
[  623.952787][T31183] bond15: entered allmulticast mode
[  624.022266][T31186] bond16: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  624.027240][T31186] bond16 (unregistering): Released all slaves
[  624.115294][ T5610] Bluetooth: hci1: command 0x0406 tx timeout
[  624.350762][T31208] ipip0: entered promiscuous mode
[  624.419655][T31223] dvmrp8: entered allmulticast mode
[  624.668832][T31246] veth1_to_team: entered promiscuous mode
[  624.672258][T31246] gretap0: entered promiscuous mode
[  624.676587][T31246] veth1_to_team: left promiscuous mode
[  624.679586][T31246] gretap0: left promiscuous mode
[  625.017659][T31261] bond16: option arp_interval: invalid value (18446744073709551615)
[  625.020773][T31261] bond16: option arp_interval: allowed values 0 - 2147483647
[  625.025426][T31261] bond16 (unregistering): Released all slaves
[  625.393983][T31292] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  625.594125][T31303] bond215: (slave vxcan19): The slave device specified does not support setting the MAC address
[  625.600417][T31303] bond215: (slave vxcan19): Error -95 calling set_mac_address
[  625.626124][T31304] bond215: (slave vxcan19): The slave device specified does not support setting the MAC address
[  625.630069][T31304] bond215: (slave vxcan19): Error -95 calling set_mac_address
[  625.847779][T31323] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  625.900088][T31327] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  626.043654][T31345] syzkaller0 speed is unknown, defaulting to 1000
[  626.195725][   T53] Bluetooth: hci1: command 0x0406 tx timeout
[  626.357684][T31378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  626.439685][T31374] veth0_macvtap: left promiscuous mode
[  626.448731][T31374] veth0_macvtap: entered promiscuous mode
[  626.463106][T31374] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  626.492474][ T5692] syz1: Port: 1 Link ACTIVE
[  626.668297][T31405] __nla_validate_parse: 18 callbacks suppressed
[  626.668309][T31405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6765'.
[  626.672992][T31405] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6765'.
[  626.774435][T31413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6767'.
[  626.790420][T31413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6767'.
[  626.939029][T31424] syzkaller1: tun_chr_ioctl cmd 2147767506
[  626.942656][T31426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6770'.
[  626.950019][T31426] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6770'.
[  626.991545][T31428] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  626.994272][T31428] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  627.052033][T31429] veth9: entered promiscuous mode
[  627.054306][T31429] veth9: entered allmulticast mode
[  627.061108][T31429] mac80211_hwsim hwsim176 wlan0: entered promiscuous mode
[  627.064016][T31429] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  627.151144][T31437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6773'.
[  627.158289][T31437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6773'.
[  627.162650][T31438] validate_nla: 7 callbacks suppressed
[  627.162663][T31438] netlink: 'syz.0.6773': attribute type 13 has an invalid length.
[  627.176722][T31437] netlink: 'syz.0.6773': attribute type 13 has an invalid length.
[  627.200968][T31440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6774'.
[  627.414007][T31458] syzkaller0 speed is unknown, defaulting to 1000
[  627.428772][T31461] netlink: zone id is out of range
[  627.430921][T31461] netlink: get zone limit has 4 unknown bytes
[  627.553499][T31463] x_tables: duplicate entry at hook 2
[  627.610630][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6781'.
[  627.626868][T31466] xt_TCPMSS: Only works on TCP SYN packets
[  627.799664][ T5610] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  627.805524][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  627.844070][T31474] netlink: 'syz.3.6783': attribute type 58 has an invalid length.
[  627.894141][T31476] bond250 (unregistering): Released all slaves
[  628.095217][T31489] gre0: left promiscuous mode
[  628.097203][T31489] gre0: left allmulticast mode
[  628.115849][T31489] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  628.142198][T31491] bond52: (slave 26): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  628.164343][T31491] bond52: (slave 26): Enslaving as an active interface with an up link
[  628.171749][T31491] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  628.200435][T31494] bond250: Removing last arp target with arp_interval on
[  628.447415][T31499] ipvlan6: entered promiscuous mode
[  628.500382][T31504] netlink: 'syz.1.6792': attribute type 1 has an invalid length.
[  628.523550][T31507] 8021q: adding VLAN 0 to HW filter on device bond16
[  628.547261][T31504] bond251: (slave vxcan1): The slave device specified does not support setting the MAC address
[  628.551808][T31504] bond251: (slave vxcan1): Error -95 calling set_mac_address
[  628.568754][T31513] ip6erspan0: entered promiscuous mode
[  628.571290][T31513] ip6erspan0: entered allmulticast mode
[  628.607611][T31514] macvlan11: entered promiscuous mode
[  628.609760][T31514] macvlan11: entered allmulticast mode
[  628.612556][T31514] syzkaller1: tun_chr_ioctl cmd 1074025677
[  628.617816][T31514] syzkaller1: linktype set to 1
[  628.703609][T31519] netlink: 'syz.1.6796': attribute type 1 has an invalid length.
[  628.723832][T31519] 8021q: adding VLAN 0 to HW filter on device bond252
[  628.734438][T31522] vlan5: entered promiscuous mode
[  628.740361][T31522] bridge0: entered promiscuous mode
[  628.750324][T31519] 8021q: adding VLAN 0 to HW filter on device bond252
[  628.753091][T31519] bond252: (slave vcan1): The slave device specified does not support setting the MAC address
[  628.757389][T31519] bond252: (slave vcan1): Error -95 calling set_mac_address
[  628.933532][T31535] netlink: 'syz.0.6801': attribute type 1 has an invalid length.
[  628.965446][T31535] 8021q: adding VLAN 0 to HW filter on device bond216
[  629.037659][T31542] veth107: entered allmulticast mode
[  629.049795][T31542] bond216: (slave veth107): Enslaving as an active interface with a down link
[  629.063334][T31542] bond216 (unregistering): (slave veth107): Releasing active interface
[  629.071278][T31542] bond216 (unregistering): Released all slaves
[  629.111142][T31546] syzkaller0 speed is unknown, defaulting to 1000
[  629.194041][T31551] ip6gretap2: entered promiscuous mode
[  629.354081][T31554] Cannot find del_set index 0 as target
[  629.581933][T31569] netlink: 'syz.3.6809': attribute type 1 has an invalid length.
[  629.584431][T31569] netlink: 'syz.3.6809': attribute type 11 has an invalid length.
[  629.746187][T31578] bond17: option packets_per_slave: invalid value (1048582)
[  629.749516][T31578] bond17: option packets_per_slave: allowed values 0 - 65535
[  629.756139][T31578] bond17 (unregistering): Released all slaves
[  629.850837][T31581] bond17: option packets_per_slave: invalid value (1048582)
[  629.853994][T31581] bond17: option packets_per_slave: allowed values 0 - 65535
[  629.860517][T31581] bond17 (unregistering): Released all slaves
[  630.008734][T31592] veth0: entered promiscuous mode
[  630.015460][T31596] netlink: 'syz.0.6816': attribute type 1 has an invalid length.
[  630.019483][T31591] veth0: left promiscuous mode
[  630.051298][T31596] bond216: entered promiscuous mode
[  630.056351][T31596] 8021q: adding VLAN 0 to HW filter on device bond216
[  630.082335][T31605] netlink: 'syz.3.6819': attribute type 1 has an invalid length.
[  630.115255][T31605] 8021q: adding VLAN 0 to HW filter on device bond17
[  630.197094][T31615] bond253: (slave bridge71): Enslaving as an active interface with an up link
[  630.224133][T31605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  630.226536][T31605] IPv6: NLM_F_CREATE should be set when creating new route
[  630.239261][T31605] vlan6: entered allmulticast mode
[  630.240881][T31605] bond17: entered allmulticast mode
[  630.747359][T31639] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  630.750550][T31639] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  630.762298][T31649] erspan0: left promiscuous mode
[  630.790717][T31649] 8021q: adding VLAN 0 to HW filter on device 
[  630.795804][T31649] 8021q: adding VLAN 0 to HW filter on device team0
[  630.802524][T31649] 8021q: adding VLAN 0 to HW filter on device batadv0
[  630.828785][T31649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  630.832509][T31649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  630.838027][T31649] veth1_vlan: left promiscuous mode
[  630.841096][T31649] veth0_vlan: left promiscuous mode
[  630.843656][T31649] veth0_vlan: entered promiscuous mode
[  630.847717][T31649] vlan0: left allmulticast mode
[  630.849734][T31649] veth0_vlan: left allmulticast mode
[  630.853333][T31649] veth1_vlan: entered promiscuous mode
[  630.866264][T31649] mac80211_hwsim hwsim176 wlan0: left promiscuous mode
[  630.869148][T31649] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  630.917405][ T8767] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  630.921653][ T8767] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  630.930850][ T8767] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  630.935263][ T8767] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  631.487034][   T33] audit: type=1107 audit(1778600849.295:34): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  631.491433][T31680] bridge72: entered promiscuous mode
[  631.494179][T31680] bridge72: entered allmulticast mode
[  631.500577][T31680] team0: Port device bridge72 added
[  631.511157][T31680] bridge0: port 1(team0) entered blocking state
[  631.515537][T31680] bridge0: port 1(team0) entered disabled state
[  631.518707][T31680] team0: entered allmulticast mode
[  631.520894][T31680] team_slave_1: entered allmulticast mode
[  631.523224][T31680] geneve1: entered allmulticast mode
[  631.525787][T31680] macvlan7: entered allmulticast mode
[  631.528141][T31680] bridge40: entered allmulticast mode
[  631.530297][T31680] bridge44: entered allmulticast mode
[  631.534312][T31680] team0: left allmulticast mode
[  631.537995][T31680] team_slave_1: left allmulticast mode
[  631.541599][T31680] geneve1: left allmulticast mode
[  631.544033][T31680] macvlan7: left allmulticast mode
[  631.545995][T31680] bridge40: left allmulticast mode
[  631.547792][T31680] bridge44: left allmulticast mode
[  631.696574][T31695] 8021q: adding VLAN 0 to HW filter on device bond217
[  631.705939][T31695] vlan63: entered allmulticast mode
[  631.707817][T31695] bond217: entered allmulticast mode
[  631.813983][T31698] __nla_validate_parse: 56 callbacks suppressed
[  631.814001][T31698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6848'.
[  631.894418][T31702] bond218: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  631.906499][T31702] bond218 (unregistering): Released all slaves
[  631.912798][T31711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6851'.
[  632.012985][T31716] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  632.017614][T31716] bond18: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  632.025049][T31716] bond18: (slave vxcan1): making interface the new active one
[  632.030297][T31716] bond18: (slave vxcan1): Enslaving as an active interface with an up link
[  632.047166][T31716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6852'.
[  632.056202][T31716] bond18 (unregistering): (slave vxcan1): Releasing backup interface
[  632.061474][T31716] bond18 (unregistering): Released all slaves
[  632.286662][T31727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6855'.
[  632.349537][T31729] validate_nla: 5 callbacks suppressed
[  632.349548][T31729] netlink: 'syz.3.6856': attribute type 2 has an invalid length.
[  632.356778][T31729] netlink: 'syz.3.6856': attribute type 1 has an invalid length.
[  632.359958][T31729] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6856'.
[  632.398314][T31731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6857'.
[  632.407959][T31731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6857'.
[  632.412398][T31731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6857'.
[  632.420500][T31731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6857'.
[  632.423847][T31731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6857'.
[  632.800301][T31736] bond52: (slave 26): Releasing backup interface
[  632.806750][T31736] bond52: (slave 26): last VLAN challenged slave left bond - VLAN blocking is removed
[  632.811503][T31736] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  632.818074][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.821219][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.825311][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.832068][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  632.853806][T31741] pim6reg1: entered promiscuous mode
[  632.863727][T31741] pim6reg1: entered allmulticast mode
[  632.919198][T31750] sctp: [Deprecated]: syz.1.6862 (pid 31750) Use of int in maxseg socket option.
[  632.919198][T31750] Use struct sctp_assoc_value instead
[  632.935591][T31750] 8021q: adding VLAN 0 to HW filter on device bond254
[  632.939510][T31750] sctp: [Deprecated]: syz.1.6862 (pid 31750) Use of int in maxseg socket option.
[  632.939510][T31750] Use struct sctp_assoc_value instead
[  633.271824][ T8498] syz1: Port: 1 Link DOWN
[  633.410911][T31779] team0 (unregistering): Port device team_slave_1 removed
[  633.419638][T31779] team0 (unregistering): Port device geneve1 removed
[  633.427946][T31779] team0 (unregistering): Port device macvlan7 removed
[  633.433858][T31779] team0 (unregistering): Port device bridge40 removed
[  633.439949][T31779] team0 (unregistering): Port device bridge44 removed
[  633.448605][T31779] team0 (unregistering): Port device bridge72 removed
[  633.903613][T31805] veth0_macvtap: entered allmulticast mode
[  633.906787][T31805] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  633.951225][T31807] netlink: 'syz.1.6874': attribute type 1 has an invalid length.
[  634.251035][T31816] bond218: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  634.257193][T31816] bond218 (unregistering): Released all slaves
[  634.494852][T31823] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode
[  634.592722][T31832] netlink: 'syz.0.6883': attribute type 1 has an invalid length.
[  634.635475][T31834] netlink: 'syz.0.6884': attribute type 5 has an invalid length.
[  635.229485][T31871] bond256: entered promiscuous mode
[  635.384237][T31879] team0: entered promiscuous mode
[  635.386796][T31879] team0: entered allmulticast mode
[  635.389281][T31879] 8021q: adding VLAN 0 to HW filter on device team0
[  635.406152][T31879] team6: entered promiscuous mode
[  635.407892][T31879] team6: entered allmulticast mode
[  635.410035][T31879] 8021q: adding VLAN 0 to HW filter on device team6
[  635.819603][T31893] bond218: entered promiscuous mode
[  635.821914][T31893] 8021q: adding VLAN 0 to HW filter on device bond218
[  635.860356][T31896] netlink: 'syz.0.6898': attribute type 1 has an invalid length.
[  635.885564][T31896] 8021q: adding VLAN 0 to HW filter on device bond219
[  635.913663][T31896] veth109: entered allmulticast mode
[  635.918773][T31896] bond219: (slave veth109): Enslaving as an active interface with an up link
[  635.939202][T31896] bond219 (unregistering): (slave veth109): Releasing backup interface
[  635.952113][T31896] bond219 (unregistering): Released all slaves
[  636.197131][T31911] netlink: 'syz.0.6902': attribute type 1 has an invalid length.
[  636.234231][T31914] bond257 (unregistering): Released all slaves
[  636.250730][T31911] syzkaller0 speed is unknown, defaulting to 1000
[  636.418425][T31929] netlink: 'syz.0.6907': attribute type 1 has an invalid length.
[  636.440115][T31929] 8021q: adding VLAN 0 to HW filter on device bond219
[  636.651600][T31947] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (32769) !
[  636.683614][T31949] netlink: 'syz.3.6913': attribute type 1 has an invalid length.
[  636.687162][T31949] nbd: error processing sock list
[  636.812504][   T33] audit: type=1804 audit(1778600854.625:35): pid=31955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6914" name="/newroot/252/cgroup.controllers" dev="tmpfs" ino=1298 res=1 errno=0
[  636.823712][   T33] audit: type=1800 audit(1778600854.635:36): pid=31955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6914" name="cgroup.controllers" dev="tmpfs" ino=1298 res=0 errno=0
[  636.909990][T31957] bond18: entered promiscuous mode
[  636.911988][T31957] bond18: entered allmulticast mode
[  636.914213][T31957] 8021q: adding VLAN 0 to HW filter on device bond18
[  636.951826][T31960] netlink: 'syz.3.6916': attribute type 1 has an invalid length.
[  636.978118][T31960] 8021q: adding VLAN 0 to HW filter on device bond19
[  636.989428][T31960] vlan7: entered allmulticast mode
[  636.991582][T31960] bond19: entered allmulticast mode
[  637.043110][T31964] __nla_validate_parse: 113 callbacks suppressed
[  637.043122][T31964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6917'.
[  637.049123][T31964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6917'.
[  637.052298][T31964] netlink: 58 bytes leftover after parsing attributes in process `syz.3.6917'.
[  637.159688][T31974] IPVS: set_ctl: invalid protocol: 29 172.20.20.24:20002
[  637.229200][T31982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6923'.
[  637.232824][T31979] bond20: entered allmulticast mode
[  637.245721][T31979] macvlan3: entered promiscuous mode
[  637.250828][T31979] macvlan3: entered allmulticast mode
[  637.260151][T31979] bond20: entered promiscuous mode
[  637.263395][T31979] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  637.269851][T31979] bond20: left promiscuous mode
[  637.413594][T32000] bond221: option miimon: invalid value (18446744073709551607)
[  637.416195][T32000] bond221: option miimon: allowed values 0 - 2147483647
[  637.420955][T32000] bond221 (unregistering): Released all slaves
[  637.434204][T32003] validate_nla: 2 callbacks suppressed
[  637.434214][T32003] netlink: 'syz.3.6930': attribute type 13 has an invalid length.
[  637.438738][T32003] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6930'.
[  637.443644][T32003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6930'.
[  637.452106][T32005] netlink: 'syz.1.6931': attribute type 1 has an invalid length.
[  637.492586][T32005] 8021q: adding VLAN 0 to HW filter on device bond257
[  637.517183][T32005] bond257: (slave veth169): Enslaving as an active interface with a down link
[  637.525288][T32005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6931'.
[  637.540038][T32005] bond257: (slave bridge73): Enslaving as an active interface with a down link
[  637.594278][T32012] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  637.600898][T32016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6935'.
[  637.605351][T32012] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  637.620081][T32018] xfrm0: entered allmulticast mode
[  637.620088][T32016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6935'.
[  637.626036][T32018] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  637.632222][T22122] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  637.640029][T22122] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  637.650983][T22122] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  637.653868][T22122] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  637.660390][T32012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6933'.
[  637.690781][T32024] netlink: 'syz.1.6938': attribute type 1 has an invalid length.
[  637.725132][T32030] Cannot find add_set index 2 as target
[  637.794122][T32025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  638.064419][T32059] netlink: 'syz.1.6947': attribute type 1 has an invalid length.
[  638.096142][T32059] 8021q: adding VLAN 0 to HW filter on device bond258
[  638.113139][T32059] vlan44: entered allmulticast mode
[  638.117674][T32059] bond258: entered allmulticast mode
[  638.170674][T32067] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  638.178486][T32067] : renamed from bond0
[  638.276430][T32087] netlink: 'syz.1.6956': attribute type 1 has an invalid length.
[  638.290108][T32087] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.300464][T32087] vlan45: entered allmulticast mode
[  638.302457][T32087] bond0: entered allmulticast mode
[  638.382238][T32097] netlink: 'syz.0.6957': attribute type 30 has an invalid length.
[  638.433811][T32099] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  638.436873][T32099] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  638.472615][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  638.476428][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  638.479812][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  638.483156][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  638.487288][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  638.491517][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  638.495552][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  638.498142][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  638.847774][T32124] netlink: 'syz.3.6965': attribute type 1 has an invalid length.
[  638.865809][T32124] 8021q: adding VLAN 0 to HW filter on device bond21
[  638.876785][T32124] vlan8: entered allmulticast mode
[  638.878559][T32124] bond21: entered allmulticast mode
[  638.950639][T32133] veth1acvtap: renamed from veth0_vlan
[  638.987444][T32135] netlink: 'syz.3.6968': attribute type 8 has an invalid length.
[  639.017234][T32139] netlink: 'syz.3.6969': attribute type 1 has an invalid length.
[  639.040593][T32139] bond22: (slave geneve3): making interface the new active one
[  639.043528][T32139] bond22: (slave geneve3): Enslaving as an active interface with an up link
[  639.048244][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  639.050992][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  639.055361][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  639.058068][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  639.127441][T32142] xt_CT: You must specify a L4 protocol and not use inversions on it
[  639.225652][T32147] bond23: entered promiscuous mode
[  639.230282][T32147] 8021q: adding VLAN 0 to HW filter on device bond23
[  639.247034][T32147] 8021q: adding VLAN 0 to HW filter on device bond23
[  639.253603][T32147] bond23: (slave sit3): The slave device specified does not support setting the MAC address
[  639.259975][T32147] bond23: (slave sit3): Error -95 calling set_mac_address
[  639.371834][T32155] veth0_macvtap: left promiscuous mode
[  639.375636][T32155] veth0_macvtap: entered promiscuous mode
[  639.382566][T32155] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  639.389268][T32159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  639.410858][ T8499] syz1: Port: 1 Link ACTIVE
[  639.462652][T32165] netlink: 'syz.1.6976': attribute type 9 has an invalid length.
[  639.533935][T32167] 8021q: adding VLAN 0 to HW filter on device bond24
[  639.560885][T32167] bond24: (slave veth11): Enslaving as an active interface with a down link
[  639.585103][T32167] 8021q: adding VLAN 0 to HW filter on device batadv1
[  639.590163][T32167] bond24: (slave batadv1): making interface the new active one
[  639.594404][T32167] batadv1: entered promiscuous mode
[  639.597464][T32167] bond24: (slave batadv1): Enslaving as an active interface with an up link
[  639.674116][T32171] bond24 (unregistering): (slave veth11): Releasing active interface
[  639.682300][T32171] bond24 (unregistering): (slave batadv1): Releasing active interface
[  639.689146][T32171] bond24 (unregistering): Released all slaves
[  639.775803][T32173] bond260: Unable to set up delay as MII monitoring is disabled
[  639.780647][T32173] bond260 (unregistering): Released all slaves
[  639.927101][T32178] gtp10: entered promiscuous mode
[  639.928745][T32178] gtp10: entered allmulticast mode
[  640.030235][T32184] vlan46: entered allmulticast mode
[  640.068516][T32186] bond260: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  640.072755][T32186] bond260 (unregistering): Released all slaves
[  640.243678][T32190] ip6tnl13: entered allmulticast mode
[  640.331407][T32198] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  640.379025][T32201] 8021q: adding VLAN 0 to HW filter on device bond260
[  640.391265][T32201] 8021q: adding VLAN 0 to HW filter on device bond260
[  640.394134][T32201] bond260: (slave vcan1): The slave device specified does not support setting the MAC address
[  640.398780][T32201] bond260: (slave vcan1): Error -95 calling set_mac_address
[  640.652426][T32223] bond24: entered promiscuous mode
[  640.655313][T32223] 8021q: adding VLAN 0 to HW filter on device bond24
[  640.722471][T32235] 8021q: adding VLAN 0 to HW filter on device bond221
[  640.767801][T32238] veth13: entered allmulticast mode
[  640.772572][T32238] bond25: (slave veth13): Enslaving as an active interface with an up link
[  640.844154][T32247] bond25 (unregistering): (slave veth13): Releasing backup interface
[  640.850299][T32247] bond25 (unregistering): Released all slaves
[  641.017860][T32252] vlan0: entered promiscuous mode
[  641.020374][T32252] dummy0: entered promiscuous mode
[  641.023080][T32252] vlan0: entered allmulticast mode
[  641.025877][T32252] dummy0: entered allmulticast mode
[  641.040986][T32254] syzkaller1: tun_chr_ioctl cmd 2147767506
[  641.451308][T32269] 8021q: adding VLAN 0 to HW filter on device bond25
[  641.475694][T32268] veth15: entered allmulticast mode
[  641.630161][T32273] 8021q: adding VLAN 0 to HW filter on device bond27
[  641.639780][T32273] bond26: (slave bond27): making interface the new active one
[  641.643924][T32273] bond26: (slave bond27): Enslaving as an active interface with an up link
[  641.667261][T32273] bond26: (slave gretap2): Enslaving as a backup interface with an up link
[  641.730513][T32273] 8021q: adding VLAN 0 to HW filter on device bond26
[  641.867705][ T5613] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  641.871193][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  641.871206][ T5613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  641.871212][ T5613] Call Trace:
[  641.871217][ T5613]  <TASK>
[  641.871221][ T5613]  dump_stack_lvl+0xe8/0x150
[  641.871236][ T5613]  dump_header+0xd3/0x4c0
[  641.871250][ T5613]  oom_kill_process+0x3ab/0x970
[  641.871263][ T5613]  out_of_memory+0x106c/0x1410
[  641.871273][ T5613]  ? try_charge_memcg+0xbb9/0x1570
[  641.871286][ T5613]  ? __pfx___mutex_lock+0x10/0x10
[  641.871301][ T5613]  ? __pfx_out_of_memory+0x10/0x10
[  641.871311][ T5613]  ? do_raw_spin_unlock+0x4d/0x210
[  641.871326][ T5613]  try_charge_memcg+0xc77/0x1570
[  641.871349][ T5613]  ? __pfx_try_charge_memcg+0x10/0x10
[  641.871360][ T5613]  ? percpu_ref_tryget+0x15/0x180
[  641.871380][ T5613]  ? charge_memcg+0x23/0x2b0
[  641.871392][ T5613]  charge_memcg+0x1a2/0x2b0
[  641.871403][ T5613]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  641.871414][ T5613]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  641.871427][ T5613]  __swap_cache_prepare_and_add+0xdc/0x700
[  641.871439][ T5613]  ? page_rmappable_folio+0x9a/0x170
[  641.871455][ T5613]  swap_cache_alloc_folio+0xf1/0x240
[  641.871466][ T5613]  swap_cluster_readahead+0x523/0x670
[  641.871478][ T5613]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  641.871493][ T5613]  ? get_vma_policy+0x27b/0x3c0
[  641.871506][ T5613]  swapin_readahead+0x196/0xc50
[  641.871517][ T5613]  ? swap_table_get+0x1e/0x260
[  641.871528][ T5613]  ? __pfx_swapin_readahead+0x10/0x10
[  641.871539][ T5613]  ? swap_table_get+0x1e/0x260
[  641.871547][ T5613]  ? swap_table_get+0x1e/0x260
[  641.871555][ T5613]  ? swap_table_get+0x1e/0x260
[  641.871564][ T5613]  ? swap_table_get+0x216/0x260
[  641.871574][ T5613]  ? swap_cache_get_folio+0x2e4/0x2f0
[  641.871586][ T5613]  do_swap_page+0x555/0x5120
[  641.871598][ T5613]  ? __pte_offset_map+0x29/0x240
[  641.871609][ T5613]  ? __pte_offset_map+0x29/0x240
[  641.871622][ T5613]  ? do_swap_page+0x128/0x5120
[  641.871631][ T5613]  ? __pfx_do_swap_page+0x10/0x10
[  641.871639][ T5613]  ? __pte_offset_map+0x1ae/0x240
[  641.871650][ T5613]  ? pte_offset_map_rw_nolock+0xea/0x160
[  641.871661][ T5613]  handle_mm_fault+0x12d2/0x3170
[  641.871677][ T5613]  ? handle_mm_fault+0xee/0x3170
[  641.871689][ T5613]  ? __pfx_handle_mm_fault+0x10/0x10
[  641.871698][ T5613]  ? lock_vma_under_rcu+0x45a/0x500
[  641.871729][ T5613]  do_user_addr_fault+0xa73/0x1340
[  641.871747][ T5613]  ? rcu_is_watching+0x15/0xb0
[  641.871763][ T5613]  ? trace_page_fault_user+0x84/0x1e0
[  641.871776][ T5613]  exc_page_fault+0x6a/0xc0
[  641.871788][ T5613]  asm_exc_page_fault+0x26/0x30
[  641.871797][ T5613] RIP: 0033:0x7f962b55d60e
[  641.871807][ T5613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  641.871815][ T5613] RSP: 002b:00007ffd1c53c8e8 EFLAGS: 00010246
[  641.871824][ T5613] RAX: 0000000000000000 RBX: 000055555c252500 RCX: 00007f962b55d60e
[  641.871830][ T5613] RDX: 00007ffd1c53c940 RSI: 0000000000000000 RDI: 0000000000000000
[  641.871836][ T5613] RBP: 00007ffd1c53c9ac R08: 0000000000000000 R09: 0000000000000000
[  641.871841][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  641.871848][ T5613] R13: 00000000000927c0 R14: 000000000009c846 R15: 00007ffd1c53ca00
[  641.871862][ T5613]  </TASK>
[  641.871866][ T5613] memory: usage 307200kB, limit 307200kB, failcnt 6963
[  642.077470][ T5613] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0
[  642.086207][ T5613] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  642.104721][ T5613] Memory cgroup stats for /syz0:
[  642.104786][ T5613] cache 0
[  642.108906][ T5613] rss 0
[  642.115791][ T5613] rss_huge 0
[  642.117124][ T5613] shmem 0
[  642.119762][ T5613] mapped_file 0
[  642.121180][ T5613] dirty 0
[  642.126844][ T5613] writeback 0
[  642.129569][ T5613] workingset_refault_anon 63
[  642.134208][ T5613] workingset_refault_file 2215
[  642.137678][ T5613] swap 192512
[  642.139124][ T5613] swapcached 860160
[  642.143642][ T5613] pgpgin 330163
[  642.147189][ T5613] pgpgout 330157
[  642.151063][ T5613] pgfault 569858
[  642.152784][ T5613] pgmajfault 76
[  642.156808][ T5613] inactive_anon 24576
[  642.158638][ T5613] active_anon 0
[  642.160042][ T5613] inactive_file 0
[  642.161717][ T5613] active_file 0
[  642.163124][ T5613] unevictable 0
[  642.165784][ T5613] hierarchical_memory_limit 314572800
[  642.168408][ T5613] hierarchical_memsw_limit 9223372036854771712
[  642.171143][ T5613] total_cache 0
[  642.172783][ T5613] total_rss 0
[  642.174335][ T5613] total_rss_huge 0
[  642.176532][ T5613] total_shmem 0
[  642.178209][ T5613] total_mapped_file 0
[  642.180038][ T5613] total_dirty 0
[  642.186142][ T5613] total_writeback 0
[  642.189119][ T5613] total_workingset_refault_anon 63
[  642.193150][ T5613] total_workingset_refault_file 2215
[  642.199935][ T5613] total_swap 192512
[  642.205540][ T5613] total_swapcached 860160
[  642.206998][ T5613] total_pgpgin 330166
[  642.217504][ T5613] total_pgpgout 330160
[  642.219782][ T5613] total_pgfault 569865
[  642.230332][ T5613] total_pgmajfault 76
[  642.235358][ T5613] total_inactive_anon 24576
[  642.240517][ T5613] total_active_anon 0
[  642.245137][ T5613] total_inactive_file 0
[  642.247147][ T5613] total_active_file 0
[  642.249770][ T5613] total_unevictable 0
[  642.255490][ T5613] anon_cost 0
[  642.256902][ T5613] file_cost 0
[  642.259304][ T5613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7004,pid=32253,uid=0
[  642.267450][ T5613] Memory cgroup out of memory: Killed process 32253 (syz.0.7004) total-vm:102496kB, anon-rss:1240kB, file-rss:23308kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  642.363001][T32304] __nla_validate_parse: 95 callbacks suppressed
[  642.363018][T32304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7017'.
[  642.468464][T32309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7018'.
[  642.568276][T32311] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.7019'.
[  642.577964][T32311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7019'.
[  642.589400][T32311] validate_nla: 10 callbacks suppressed
[  642.589417][T32311] netlink: 'syz.1.7019': attribute type 1 has an invalid length.
[  642.710337][T32316] netlink: 'syz.0.7021': attribute type 4 has an invalid length.
[  642.741120][T32316] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  642.770991][T32320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7022'.
[  642.782771][T32321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7022'.
[  642.788957][T32320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7022'.
[  642.832399][T32325] netlink: 'syz.1.7024': attribute type 3 has an invalid length.
[  642.885904][T32325] block nbd1: NBD_DISCONNECT
[  642.919123][T32330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7026'.
[  642.922439][T32330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7026'.
[  642.951117][T32332] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  643.030209][T32336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7029'.
[  643.033440][T32336] netlink: 'syz.1.7029': attribute type 14 has an invalid length.
[  643.040864][T32336] netlink: 'syz.1.7029': attribute type 13 has an invalid length.
[  643.197203][T32349] vlan47: entered promiscuous mode
[  643.281779][T32361] netlink: 'syz.1.7037': attribute type 7 has an invalid length.
[  643.285242][T32361] netlink: 'syz.1.7037': attribute type 8 has an invalid length.
[  643.399067][T32371] sch_tbf: burst 185 is lower than device syzkaller0 mtu (313) !
[  643.493985][T32382] ip6gretap7: entered promiscuous mode
[  643.514256][T32386] netlink: 'syz.3.7047': attribute type 1 has an invalid length.
[  643.592427][T32386] 8021q: adding VLAN 0 to HW filter on device bond28
[  643.618526][T32386] veth15: entered allmulticast mode
[  643.628056][T32386] bond28: (slave veth15): Enslaving as an active interface with an up link
[  643.640743][T32386] bond28 (unregistering): (slave veth15): Releasing backup interface
[  643.646870][T32386] bond28 (unregistering): Released all slaves
[  643.804664][T32406] syzkaller0 speed is unknown, defaulting to 1000
[  643.830648][T32412] mac80211_hwsim hwsim177 syzkaller0: left allmulticast mode
[  643.880610][T32413] syzkaller0 speed is unknown, defaulting to 1000
[  643.921450][T32420] 0X: renamed from batadv0
[  643.929838][T32420] 0X: entered allmulticast mode
[  643.932524][T32420] 8021q: adding VLAN 0 to HW filter on device 60X
[  643.945952][T32420] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  644.367890][T32439] syzkaller0 speed is unknown, defaulting to 1000
[  644.600480][   T33] audit: type=1804 audit(1778600862.415:37): pid=32452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7060" name="/newroot/2418/memory.events" dev="tmpfs" ino=12357 res=1 errno=0
[  644.609743][   T33] audit: type=1800 audit(1778600862.415:38): pid=32452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7060" name="memory.events" dev="tmpfs" ino=12357 res=0 errno=0
[  644.638971][T32452] bond222: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  644.645458][T32452] bond222 (unregistering): Released all slaves
[  644.832281][T32461] netlink: 'syz.3.7064': attribute type 1 has an invalid length.
[  644.871274][T32463] xt_hashlimit: max too large, truncated to 1048576
[  644.876640][T32461] 8021q: adding VLAN 0 to HW filter on device bond28
[  644.891421][T32461] bond28 (unregistering): Released all slaves
[  644.978312][T32468] xt_hashlimit: size too large, truncated to 1048576
[  645.032332][T32472] netlink: 'syz.1.7065': attribute type 1 has an invalid length.
[  645.088848][T32471] bond28: invalid ARP target 0.0.0.0 specified for addition
[  645.094976][T32471] bond28: option arp_ip_target: invalid value (0)
[  645.098705][T32471] bond28 (unregistering): Released all slaves
[  645.434070][T32509] veth17: entered allmulticast mode
[  645.804301][T32529] veth111: entered allmulticast mode
[  646.017636][T32534] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  646.020707][T32534] CPU: 1 UID: 0 PID: 32534 Comm: syz.0.7079 Not tainted syzkaller #0 PREEMPT(full) 
[  646.020726][T32534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  646.020735][T32534] Call Trace:
[  646.020742][T32534]  <TASK>
[  646.020749][T32534]  dump_stack_lvl+0xe8/0x150
[  646.020771][T32534]  sysfs_warn_dup+0x8e/0xa0
[  646.020790][T32534]  sysfs_do_create_link_sd+0xc0/0x110
[  646.020810][T32534]  device_add_class_symlinks+0x1cf/0x240
[  646.020866][T32534]  device_add+0x475/0xbb0
[  646.020886][T32534]  wiphy_register+0x1dc5/0x2dc0
[  646.020920][T32534]  ? __pfx_wiphy_register+0x10/0x10
[  646.020940][T32534]  ? __pfx_netdev_run_todo+0x10/0x10
[  646.020961][T32534]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  646.020991][T32534]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  646.021016][T32534]  ieee80211_register_hw+0x3d82/0x4a70
[  646.021047][T32534]  ? ieee80211_register_hw+0x1961/0x4a70
[  646.021081][T32534]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  646.021106][T32534]  ? __asan_memset+0x22/0x50
[  646.021124][T32534]  ? __hrtimer_setup+0x1b7/0x260
[  646.021143][T32534]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  646.021163][T32534]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  646.021202][T32534]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  646.021218][T32534]  ? kstrndup+0xbf/0x160
[  646.021240][T32534]  hwsim_new_radio_nl+0xf6a/0x1c00
[  646.021274][T32534]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  646.021297][T32534]  ? rcu_is_watching+0x15/0xb0
[  646.021312][T32534]  ? trace_kmalloc+0x2a/0xf0
[  646.021334][T32534]  ? __nla_parse+0x40/0x60
[  646.021357][T32534]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  646.021374][T32534]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  646.021395][T32534]  genl_family_rcv_msg_doit+0x22a/0x330
[  646.021416][T32534]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  646.021442][T32534]  ? bpf_lsm_capable+0x9/0x20
[  646.021456][T32534]  ? security_capable+0x7e/0x2c0
[  646.021478][T32534]  genl_rcv_msg+0x61c/0x7a0
[  646.021498][T32534]  ? __pfx_genl_rcv_msg+0x10/0x10
[  646.021512][T32534]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  646.021540][T32534]  netlink_rcv_skb+0x232/0x4b0
[  646.021559][T32534]  ? __pfx_genl_rcv_msg+0x10/0x10
[  646.021573][T32534]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  646.021603][T32534]  ? down_read+0x270/0x2e0
[  646.021615][T32534]  ? genl_rcv+0xd/0x40
[  646.021630][T32534]  genl_rcv+0x28/0x40
[  646.021643][T32534]  netlink_unicast+0x75c/0x8e0
[  646.021669][T32534]  netlink_sendmsg+0x813/0xb40
[  646.021696][T32534]  ? __pfx_netlink_sendmsg+0x10/0x10
[  646.021715][T32534]  ? aa_sock_msg_perm+0xf1/0x1b0
[  646.021736][T32534]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  646.021756][T32534]  ____sys_sendmsg+0x972/0x9f0
[  646.021775][T32534]  ? __might_fault+0xaf/0x130
[  646.021797][T32534]  ? __pfx_____sys_sendmsg+0x10/0x10
[  646.021854][T32534]  ? import_iovec+0x73/0xa0
[  646.021878][T32534]  ___sys_sendmsg+0x2a5/0x360
[  646.021898][T32534]  ? __lock_acquire+0x6b5/0x2cf0
[  646.021917][T32534]  ? __pfx____sys_sendmsg+0x10/0x10
[  646.021942][T32534]  ? futex_wait+0x2a2/0x390
[  646.021988][T32534]  ? __fget_files+0x2a/0x420
[  646.022005][T32534]  ? __fget_files+0x3a0/0x420
[  646.022031][T32534]  __x64_sys_sendmsg+0x1bd/0x2a0
[  646.022053][T32534]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  646.022080][T32534]  ? rcu_is_watching+0x15/0xb0
[  646.022101][T32534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.022118][T32534]  do_syscall_64+0x15f/0xf80
[  646.022137][T32534]  ? trace_irq_disable+0x3b/0x140
[  646.022162][T32534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  646.022178][T32534] RIP: 0033:0x7f962b59cdd9
[  646.022194][T32534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  646.022206][T32534] RSP: 002b:00007f962c446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  646.022225][T32534] RAX: ffffffffffffffda RBX: 00007f962b815fa0 RCX: 00007f962b59cdd9
[  646.022236][T32534] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  646.022246][T32534] RBP: 00007f962b632d69 R08: 0000000000000000 R09: 0000000000000000
[  646.022255][T32534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  646.022264][T32534] R13: 00007f962b816038 R14: 00007f962b815fa0 R15: 00007ffd1c53c608
[  646.022288][T32534]  </TASK>
[  646.416912][T32550] 8021q: adding VLAN 0 to HW filter on device bond30
[  646.428892][T32550] bond30 (unregistering): Released all slaves
[  646.458848][T32561] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  646.631037][T32574] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  646.634894][T32567] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  646.648355][T32569] bond222: (slave vxcan1): The slave device specified does not support setting the MAC address
[  646.652339][T32569] bond222: (slave vxcan1): Error -95 calling set_mac_address
[  646.667519][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  646.670459][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  646.673704][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  646.680536][T32572] mac80211_hwsim hwsim177 syzkaller0: entered allmulticast mode
[  646.684947][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  646.824741][T32585] 8021q: adding VLAN 0 to HW filter on device bond223
[  646.861494][T32585] 8021q: adding VLAN 0 to HW filter on device bond223
[  646.865895][T32585] bond223: (slave vcan2): The slave device specified does not support setting the MAC address
[  646.871108][T32585] bond223: (slave vcan2): Error -95 calling set_mac_address
[  646.952838][T32591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  647.006814][T32593] 8021q: adding VLAN 0 to HW filter on device bond224
[  647.136686][T32613] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  647.197855][T32620] 8021q: adding VLAN 0 to HW filter on device 
[  647.224981][T32620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  647.228912][T32620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  647.235990][T32620] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  647.252647][T32619] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  647.301138][   T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  647.303781][   T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  647.306504][   T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  647.315860][   T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  647.429618][T32624] 8021q: adding VLAN 0 to HW filter on device bond30
[  647.442879][T32624] vlan0: entered allmulticast mode
[  647.445284][T32624] bond30: entered allmulticast mode
[  647.462684][T32624] bond30: (slave geneve4): making interface the new active one
[  647.466145][T32624] geneve4: entered allmulticast mode
[  647.470165][T32624] bond30: (slave geneve4): Enslaving as an active interface with an up link
[  647.491750][T32627] __nla_validate_parse: 28 callbacks suppressed
[  647.491763][T32627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7103'.
[  647.581326][T32636] 8021q: adding VLAN 0 to HW filter on device bond31
[  647.652299][T32639] bond261: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  647.968404][ T5610] Bluetooth: hci3: link tx timeout
[  647.972522][ T5610] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  647.994343][T32661] validate_nla: 6 callbacks suppressed
[  647.994354][T32661] netlink: 'syz.3.7111': attribute type 10 has an invalid length.
[  647.999572][T32661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7111'.
[  648.007008][T32661] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  648.038441][T32664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7112'.
[  648.056171][T32664] bond225: option broadcast_neighbor: invalid value (30)
[  648.062872][T32664] bond225 (unregistering): Released all slaves
[  648.081301][   T53] Bluetooth: hci3: link tx timeout
[  648.083128][   T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  648.105876][   T53] Bluetooth: hci3: link tx timeout
[  648.112593][   T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  648.213160][T32679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7115'.
[  648.236140][T32667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  648.296362][T32683] sctp: [Deprecated]: syz.0.7115 (pid 32683) Use of int in max_burst socket option.
[  648.296362][T32683] Use struct sctp_assoc_value instead
[  648.435135][   T53] Bluetooth: hci3: link tx timeout
[  648.436913][   T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  648.463156][T32703] xt_hashlimit: size too large, truncated to 1048576
[  648.474741][T32704] xt_hashlimit: size too large, truncated to 1048576
[  648.492894][T32705] netlink: 'syz.0.7119': attribute type 1 has an invalid length.
[  648.496243][T32705] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7119'.
[  648.581130][T32711] tap0: tun_chr_ioctl cmd 1074025676
[  648.583305][T32711] tap0: owner set to 0
[  648.606901][T32715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7121'.
[  648.637774][   T53] Bluetooth: hci3: link tx timeout
[  648.639418][   T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  648.661995][T32718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7122'.
[  648.683678][T32718] veth111: entered promiscuous mode
[  648.693937][T32718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7122'.
[  648.705966][T32718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7122'.
[  648.731562][   T53] Bluetooth: hci3: link tx timeout
[  648.733236][   T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  648.738782][T32725] netlink: 'syz.1.7124': attribute type 1 has an invalid length.
[  648.739411][T32718] gtp11: entered promiscuous mode
[  648.743430][T32718] gtp11: entered allmulticast mode
[  648.778934][T32725] bond262: (slave vxcan1): The slave device specified does not support setting the MAC address
[  648.782841][T32725] bond262: (slave vxcan1): Error -95 calling set_mac_address
[  648.892451][T32737] dvmrp0: entered allmulticast mode
[  649.047318][T32747] x_tables: duplicate underflow at hook 1
[  649.135385][T32751] syzkaller1: entered promiscuous mode
[  649.139299][T32751] syzkaller1: entered allmulticast mode
[  649.235800][T32757] netlink: 'syz.1.7133': attribute type 1 has an invalid length.
[  649.257386][T32757] 8021q: adding VLAN 0 to HW filter on device bond263
[  649.278763][T32757] bond263: (slave veth171): Enslaving as an active interface with a down link
[  649.288970][T32757] 8021q: adding VLAN 0 to HW filter on device batadv10
[  649.292704][T32757] bond263: (slave batadv10): making interface the new active one
[  649.296281][T32757] batadv10: entered promiscuous mode
[  649.298277][T32757] bond263: (slave batadv10): Enslaving as an active interface with an up link
[  649.306768][T32757] bond263 (unregistering): (slave veth171): Releasing active interface
[  649.311209][T32757] bond263 (unregistering): (slave batadv10): Releasing active interface
[  649.315572][T32757] bond263 (unregistering): Released all slaves
[  649.443823][T32760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7134'.
[  649.716132][   T53] Bluetooth: hci3: link tx timeout
[  649.718000][   T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  649.720984][   T53] Bluetooth: hci3: link tx timeout
[  649.722735][   T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  649.762786][  T312] netlink: 'syz.1.7138': attribute type 1 has an invalid length.
[  649.769492][  T309] netlink: 'syz.0.7140': attribute type 1 has an invalid length.
[  649.798974][  T309] 8021q: adding VLAN 0 to HW filter on device bond225
[  649.866190][   T53] Bluetooth: hci3: link tx timeout
[  649.868053][   T53] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  650.034927][   T53] Bluetooth: hci3: command 0x0406 tx timeout
[  650.478086][  T303] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  650.481568][  T303] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  650.493471][  T303] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  650.495938][  T303] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  650.502099][  T303] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  650.504362][  T303] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  650.597342][  T303] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  650.601267][  T303] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  650.604081][  T303] CPU: 1 UID: 0 PID: 303 Comm: syz.1.7138 Not tainted syzkaller #0 PREEMPT(full) 
[  650.607129][  T303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  650.610996][  T303] RIP: 0010:klist_remove+0x156/0x340
[  650.613110][  T303] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd ee 91 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be ee 91 f6 49 8b 44 24 58 48 89 44 24 08
[  650.620828][  T303] RSP: 0018:ffffc900280af820 EFLAGS: 00010202
[  650.622764][  T303] RAX: 000000000000000b RBX: ffff8880206fd880 RCX: 0000000000000000
[  650.625530][  T303] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  650.628229][  T303] RBP: ffffc900280af920 R08: ffffffff90172043 R09: 1ffffffff202e408
[  650.630943][  T303] R10: dffffc0000000000 R11: fffffbfff202e409 R12: 0000000000000000
[  650.633619][  T303] R13: 1ffff1100496d30c R14: ffff888024b69860 R15: dffffc0000000000
[  650.636074][  T303] FS:  00007fb5de4376c0(0000) GS:ffff8882a928f000(0000) knlGS:0000000000000000
[  650.639559][  T303] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  650.642238][  T303] CR2: 0000564829935950 CR3: 0000000021b10000 CR4: 00000000000006f0
[  650.644931][  T303] Call Trace:
[  650.646013][  T303]  <TASK>
[  650.647024][  T303]  ? __pfx_klist_remove+0x10/0x10
[  650.648805][  T303]  ? kobject_move+0x5de/0x720
[  650.650373][  T303]  ? __pfx_kobject_move+0x10/0x10
[  650.652085][  T303]  ? do_raw_spin_unlock+0x4d/0x210
[  650.653847][  T303]  ? get_device_parent+0x366/0x3a0
[  650.655585][  T303]  device_move+0x193/0x730
[  650.657089][  T303]  hci_conn_del_sysfs+0xb8/0x1a0
[  650.659060][  T303]  hci_conn_del+0xc36/0x1230
[  650.660554][  T303]  hci_conn_hash_flush+0x191/0x260
[  650.662368][  T303]  hci_dev_close_sync+0x821/0x10e0
[  650.664035][  T303]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  650.665790][  T303]  ? do_raw_spin_lock+0x12b/0x2f0
[  650.667376][  T303]  hci_dev_do_close+0x30/0xc0
[  650.669008][  T303]  hci_rfkill_set_block+0x1f4/0x290
[  650.671023][  T303]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  650.673239][  T303]  rfkill_set_block+0x1a4/0x4e0
[  650.675171][  T303]  rfkill_fop_write+0x461/0x5a0
[  650.677066][  T303]  ? apparmor_file_permission+0x1f4/0x300
[  650.679383][  T303]  ? __pfx_rfkill_fop_write+0x10/0x10
[  650.681526][  T303]  ? security_file_permission+0x10/0x260
[  650.684006][  T303]  ? rw_verify_area+0x255/0x4d0
[  650.685918][  T303]  ? __pfx_rfkill_fop_write+0x10/0x10
[  650.688061][  T303]  vfs_write+0x29a/0xb90
[  650.689956][  T303]  ? __pfx_vfs_write+0x10/0x10
[  650.691776][  T303]  ? __fget_files+0x2a/0x420
[  650.693431][  T303]  ? __fget_files+0x2a/0x420
[  650.695105][  T303]  ? __fget_files+0x3a0/0x420
[  650.696947][  T303]  ? __fget_files+0x2a/0x420
[  650.698763][  T303]  ksys_write+0x150/0x270
[  650.700219][  T303]  ? __pfx_ksys_write+0x10/0x10
[  650.701768][  T303]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.703922][  T303]  do_syscall_64+0x15f/0xf80
[  650.705734][  T303]  ? trace_irq_disable+0x3b/0x140
[  650.707705][  T303]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.710024][  T303] RIP: 0033:0x7fb5dd59cdd9
[  650.711773][  T303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.719635][  T303] RSP: 002b:00007fb5de437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  650.723025][  T303] RAX: ffffffffffffffda RBX: 00007fb5dd815fa0 RCX: 00007fb5dd59cdd9
[  650.726172][  T303] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004
[  650.729568][  T303] RBP: 00007fb5dd632d69 R08: 0000000000000000 R09: 0000000000000000
[  650.732413][  T303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  650.735030][  T303] R13: 00007fb5dd816038 R14: 00007fb5dd815fa0 R15: 00007ffc4d27b1d8
[  650.737670][  T303]  </TASK>
[  650.738689][  T303] Modules linked in:
[  650.741199][  T303] ---[ end trace 0000000000000000 ]---
[  650.750459][  T303] RIP: 0010:klist_remove+0x156/0x340
[  650.752437][  T303] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd ee 91 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be ee 91 f6 49 8b 44 24 58 48 89 44 24 08
[  650.763544][  T303] RSP: 0018:ffffc900280af820 EFLAGS: 00010202
[  650.766879][  T303] RAX: 000000000000000b RBX: ffff8880206fd880 RCX: 0000000000000000
[  650.775221][  T303] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  650.779980][  T303] RBP: ffffc900280af920 R08: ffffffff90172043 R09: 1ffffffff202e408
[  650.782880][  T303] R10: dffffc0000000000 R11: fffffbfff202e409 R12: 0000000000000000
[  650.786570][  T303] R13: 1ffff1100496d30c R14: ffff888024b69860 R15: dffffc0000000000
[  650.789365][  T303] FS:  00007fb5de4376c0(0000) GS:ffff8882a928f000(0000) knlGS:0000000000000000
[  650.792378][  T303] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  650.795095][  T303] CR2: 00007fffcbd45708 CR3: 0000000021b10000 CR4: 00000000000006f0
[  650.801249][  T303] Kernel panic - not syncing: Fatal exception
[  650.804094][  T303] Kernel Offset: disabled
[  650.805514][  T303] Rebooting in 86400 seconds..
