last executing test programs:

1.430114769s ago: executing program 2 (id=2781):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRESHEX], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0, 0x3}, &(0x7f0000000400)=0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000180018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f0ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000100cc0000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef)

1.339289277s ago: executing program 0 (id=2782):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x34, r1, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_rx_ntuple={0x35, {0x12, @udp_ip4_spec={@loopback, @empty, 0x4e24, 0x4e21, 0x3a}, @usr_ip4_spec={@loopback, @rand_addr=0x64010101, 0xff, 0x2, 0x1, 0x5}, 0x6455, 0x7, 0x800, 0x1, 0xfffffffffffffffe}}})

1.338755862s ago: executing program 2 (id=2783):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000680)={'veth0_to_bond\x00', &(0x7f00000005c0)=@ethtool_pauseparam={0x13, 0xd, 0x4, 0x2}})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRESDEC=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000202010200000000000000000100000308000940000000040400038094000a800800014000000000080001400000000108000140000000017800028006000340000000001400018008000100ac1414bb08000200e00000012c00018014000300fe8000000000000000bb14000400fe8000000000000000000000000000352c00018014000300fe88000000000000000000000000010114000400fc010000000000000000000000000000180001801400018008000100ac1414bb08000200e0000001"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r4, 0x5c2a7000)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000006c0)=0x7, &(0x7f0000000700)=0x4)
sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c7000fbdbdf250a2068fd", @ANYRES32=r2, @ANYBLOB="080009000600000014000200fc01000000000000000000000000000014000600020000005b1600000800000000000000140006000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x4084)
r5 = openat$cgroup_ro(r4, &(0x7f0000000640)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r6, 0xac9d4000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000034c0)=@newtaction={0x2a7c, 0x30, 0x53b, 0x0, 0x25dfdbfe, {0x9}, [{0x2a68, 0x1, [@m_sample={0x114, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xd026}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0xa, 0x20000000, 0x7, 0x5}}]}, {0xb6, 0x6, "71814c2c610b9f721b4c75a78631e05b716f5952c032a35aeef1345dad2eaeaa3d9e44c9cf3655321aaf4c5b50045b7e7bc88277e64a85762b45e20d2ccc600e9563e2ee8454132498da25756f4ff0ff00d78e8662741ae5b02b3ce46dcfa958f1e1aec4b6fcb17759bd4ec8986de589449b1d5c1e0f219e4c239ea02d6d4f57d7efc292c8d67e67ee62b04c8118ec617290473bac606334dfe2a316b913f7cc0c9a4aa6260baf1d72231f9b1f998bf2c191"}, {0xc}, {0xc, 0x4, {0x1}}}}, @m_police={0x2950, 0x9, 0x0, 0x0, {{0xb}, {0x1924, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x4620}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0xc0, 0x3, 0x3, 0x4, 0x2, 0x7, 0x6, 0xc9c, 0xb, 0x2, 0x4, 0x4, 0x4b44, 0x3, 0x1, 0x5, 0x3, 0x2, 0xd28e, 0x1, 0x2, 0x7, 0xffff, 0x8, 0x0, 0xc, 0x8, 0xe368, 0xd9d5, 0x1, 0x400, 0x5, 0x0, 0x3aa, 0x8, 0xffff, 0xfffffffd, 0x7d9be9d8, 0x2232c6, 0x9, 0x2, 0xdc, 0x8, 0x4, 0x0, 0x2002, 0x4, 0x9, 0x80000000, 0x33, 0x71, 0x4, 0xd, 0xffff2cb8, 0xde, 0x4, 0x1f1, 0x9a7, 0x2, 0x2, 0x7, 0x6, 0x3, 0x150, 0xfffffff7, 0x3bc, 0x7, 0x1, 0xc, 0x7, 0x2e6, 0xffff, 0x6, 0x5d, 0x3, 0x7ff, 0xfffffffd, 0x101, 0x206, 0xc3, 0x8, 0x1da, 0x9, 0x1, 0x80000000, 0x1, 0x1, 0x5, 0x5, 0x3fc, 0x3, 0x0, 0x6, 0x3, 0x0, 0x5, 0xc, 0x33, 0xda0, 0x5, 0x5, 0x3, 0xcc4e, 0x3ff, 0x4ac, 0x3, 0xfb5, 0x2, 0xffff, 0x2, 0xffffffff, 0x1e, 0x10001, 0x4, 0xcd93, 0x85, 0x0, 0x10001, 0x2130, 0xca, 0x3, 0x7, 0x3, 0x10, 0x8, 0x5a, 0x8, 0x9, 0x10, 0x7, 0x6800, 0x53, 0x1ff, 0x8, 0x6, 0x1, 0x5768, 0xf20, 0x2, 0xb, 0xfffffffa, 0x0, 0x400, 0x4, 0x0, 0x100, 0x6, 0xa, 0x48, 0x5, 0x3, 0x0, 0x1, 0x8cc, 0x8, 0x7f, 0x6, 0x77, 0xe, 0x71af, 0xb4ef, 0x5, 0xe, 0x4, 0xff, 0x4, 0x7fffffff, 0x1, 0x8, 0x6f, 0x524, 0x2, 0xe, 0xfb, 0x82c, 0x3, 0x4cdd, 0x8, 0x0, 0x10001, 0x764, 0x8, 0x9, 0x4, 0xfffffff9, 0x4, 0xf, 0x0, 0x1ff, 0x101, 0x5, 0x0, 0x8000, 0x520, 0x8, 0xe1b, 0x7, 0x0, 0x4, 0x1, 0xc0000000, 0x2, 0x1, 0xcc, 0x0, 0xd5, 0xc8, 0x5, 0x100, 0x2, 0x80000000, 0x3, 0x5, 0x0, 0x1, 0x6, 0xc5d9, 0x40, 0x8, 0x9ff, 0x1, 0x9, 0x400, 0xffff7fff, 0x9, 0x5, 0x5, 0xb4, 0x4, 0x6, 0xc4, 0x80, 0x5, 0x8, 0x6, 0x2, 0x815, 0xa57, 0x2, 0xa0, 0x3, 0x3, 0x7, 0xe6a, 0x5, 0x1, 0x4, 0x3, 0x3, 0x8000, 0x5, 0x800, 0x7, 0x8000, 0x7]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x4b, 0xff, 0x1000, {0x9, 0x0, 0xc, 0x0, 0x5, 0x8}, {0x9, 0x2, 0x7fff, 0x92f, 0x200, 0x401}, 0x1e7c, 0x6, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x87, 0x3, 0xfffffffa, 0x8, 0x2, 0x4, 0x3, 0x8, 0xf7b, 0x10000, 0x4926fd43, 0x2, 0x10001, 0x6, 0x2, 0x3, 0xd2c, 0x6, 0xff, 0x3, 0x1, 0x9, 0x8, 0x8, 0x6, 0x6, 0x2b9a, 0x1, 0xfffffff0, 0x7, 0x7, 0x7, 0x9a7, 0x0, 0x80, 0xcc, 0x8, 0x2, 0x3, 0x7, 0x9, 0x9b59, 0x7, 0x3ff, 0x2, 0x7fff, 0x84f, 0x3b3b, 0x2c, 0x2, 0x1, 0xffffffff, 0x4, 0x9, 0x7, 0x8, 0x0, 0x5, 0x101, 0x6, 0xfffb, 0x7, 0x9, 0xfffffff8, 0x8, 0x4, 0x6, 0x3, 0x8, 0x3, 0xfffffffd, 0xc1cb, 0x40, 0x1ff, 0xd, 0x6, 0x6, 0x5, 0x5, 0x7fffffef, 0x9, 0x5, 0x20000000, 0x4, 0xee3f, 0xfffffffc, 0xdb, 0x1, 0xaaa6, 0x1, 0x9, 0x5, 0x97, 0x8, 0x101, 0x2, 0x1, 0x5, 0x8, 0xfffffff9, 0x0, 0x6, 0x69, 0x4cf, 0x200, 0x1, 0x8, 0x0, 0x6, 0xf5, 0x80000001, 0x1, 0xe, 0x75fbae28, 0x81, 0x7, 0x6, 0x8, 0x8, 0xd9f4, 0x6, 0xbe2, 0x270b, 0xe2, 0x6, 0x9, 0x1, 0xfffffffa, 0x26, 0xe514, 0x4, 0x40, 0x10000, 0x4, 0x8001, 0x0, 0x8, 0x8, 0x97c, 0xfffff68c, 0x2, 0x9, 0xfffffffa, 0x4, 0x4, 0x5, 0x8, 0x1000, 0x56, 0xfff, 0x4, 0x7fff, 0x0, 0x401, 0x8, 0xfffffffc, 0x3, 0x5, 0xffffffff, 0x2, 0x9, 0x7, 0x5, 0x5, 0x5, 0x8, 0xc71c, 0x8, 0x2, 0x1000, 0x3, 0x0, 0x1, 0x4, 0x7, 0x9, 0x1, 0x400, 0x0, 0x9, 0x7ff, 0x9, 0x8, 0x7fff, 0x9, 0xa58, 0xc, 0x510, 0x7, 0x3, 0x0, 0x9, 0x2, 0x4, 0x800, 0xfffff801, 0x8, 0x2, 0x6, 0x6, 0xfff, 0x0, 0x2, 0xf, 0x1, 0x1, 0x7, 0x94f, 0x2, 0x5, 0x9, 0x4, 0x48c7, 0x7, 0xff, 0x3, 0x5, 0xfffffff6, 0x6, 0xd, 0xfb, 0xd6, 0x5, 0x6, 0xf, 0xffffffff, 0x2, 0x9, 0x10001, 0x8000, 0x0, 0x3d8b, 0x9, 0x2, 0x6, 0xfffffff8, 0xfffffff7, 0x1, 0x3, 0x10001, 0x5, 0x2, 0x9, 0x4, 0x2, 0x8000, 0x1, 0xa, 0x80, 0x5, 0x0, 0x1, 0x3ff, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xfffffff9, 0x73, 0x2, 0x8, 0x3, 0x1, 0x3, 0x1, 0x3, 0x8, 0x0, 0x59, 0x3, 0x2c, 0x5, 0x2, 0x1ff, 0x1000, 0xc277, 0x8, 0x7, 0xcd7, 0x10000, 0x5e, 0x1, 0xfffffffe, 0x4, 0x101, 0x9, 0x8001, 0x8b12, 0x6, 0x0, 0x2, 0x1, 0x1, 0x7, 0xb, 0x122, 0x0, 0x6, 0x32400, 0x47, 0x15, 0x3fff8, 0x9, 0x1, 0x7, 0x7, 0x4, 0x7, 0x3, 0x7, 0x4, 0x2, 0x8, 0x80, 0x100, 0x1, 0x6, 0x0, 0x8, 0x6, 0x3, 0x4, 0x47, 0xe0000000, 0x1, 0x7ff, 0x63f, 0x6, 0x0, 0x800, 0x8, 0x1, 0x0, 0x2, 0xf4a5, 0x8, 0x2, 0x7fff, 0xbc9d0b7, 0x8000, 0x9, 0x4, 0x80, 0x9, 0x0, 0x5, 0x80000001, 0xffffff80, 0x0, 0x7, 0x6, 0x4, 0x7, 0x401ba2f, 0x4, 0x83a, 0xfffffff7, 0x3, 0xff, 0xed, 0x8, 0xfa41, 0x7, 0xfffffff7, 0x6, 0x8, 0x6, 0x6, 0x0, 0x401, 0x1, 0x7, 0x3, 0x5, 0x0, 0x68c6, 0x1000, 0x8, 0x1400000, 0x0, 0xe4f, 0x1, 0x8, 0x8001, 0x10000, 0x0, 0x3a, 0x1, 0xc, 0x80000000, 0x9, 0x31e1, 0x400, 0xfff, 0x0, 0x8, 0x9, 0x4, 0x3, 0x3, 0x0, 0x69f, 0x5, 0x7, 0xac, 0x4, 0x9, 0x10000, 0x400, 0xcc, 0x4, 0x1, 0x1449, 0x4, 0xf3, 0x55, 0x800, 0x38000000, 0xf02e, 0x1, 0x7, 0x742, 0xa, 0x0, 0x7, 0x2000, 0x3, 0x7, 0x85e, 0xe, 0x5f, 0x7, 0x401, 0x3, 0x80100001, 0x7fff, 0x1, 0xffffffff, 0x2, 0xe, 0x6, 0x8, 0x4, 0x8001, 0x0, 0x0, 0x3ff, 0x8, 0x2, 0xfffffffc, 0xa9b, 0x7ff, 0x30, 0x3, 0x0, 0x4, 0x3, 0x800, 0x2, 0x25a, 0x9, 0x1, 0x7, 0x9, 0x2, 0xfa8, 0x6, 0xed618ea6, 0x0, 0x8, 0x3, 0x10, 0xffffffff, 0x4, 0x7fff, 0x9, 0x1, 0x6, 0x588e, 0xfffffff8, 0x7, 0x0, 0x6, 0x5059, 0xfffffffa, 0x8, 0x10000000, 0x8000, 0x7, 0x6, 0xa2b, 0x4, 0xf, 0x9, 0x9, 0x8, 0x5, 0x8, 0xfffffff8, 0x345, 0xfff, 0x0, 0x74, 0x7fff, 0x8, 0x6, 0x2, 0x1, 0x2, 0xac, 0x1000, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x7, 0x7, 0x0, {0x8, 0x1, 0x6, 0x6, 0xfffa, 0x1}, {0xb5, 0x2, 0x9, 0x1, 0x17a2, 0xfffffffc}, 0xa, 0x0, 0x10001}}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x101, 0x3, 0x69, 0x6, 0x5c, 0x200, 0xca55, 0x0, 0x8000a8, 0x6, 0x9, 0x101, 0xde42, 0x80, 0x6, 0x4, 0x4, 0xd10, 0x1, 0x80, 0x7ff, 0x1, 0x5, 0x10000, 0x9, 0x4, 0x8, 0x6, 0x7, 0x7d1, 0xfffffff9, 0xc, 0xf45, 0x0, 0x4, 0x1, 0x1ff, 0x9, 0x66, 0xfffffeff, 0xa, 0x8, 0x2, 0x5, 0x3, 0x2, 0x4, 0x2, 0x8, 0x2, 0xd4, 0xc8ad, 0x5, 0xfffff5a5, 0x100, 0xa38, 0x9, 0x7, 0x0, 0xff, 0x40, 0x395b, 0x1, 0x4, 0x5, 0x6, 0xb, 0xffffffff, 0x7fff, 0x5, 0x2, 0x3, 0x74d51353, 0x8, 0x7fffffff, 0x2, 0x40, 0xfa, 0x7f, 0x80000001, 0x100, 0xfffff84a, 0x3b73, 0x2, 0xf, 0xae2, 0x401, 0x1abb, 0xcf0d, 0x1, 0x3, 0x6, 0x5, 0x5c8, 0x2, 0x4, 0x0, 0x489, 0x4, 0xf64b, 0xfffffffb, 0x40, 0x3, 0x200, 0x6, 0x80, 0x0, 0x0, 0x3, 0x5, 0x401, 0x8, 0x6, 0x9, 0x401, 0x2, 0x1, 0x81, 0x9, 0xf2638800, 0x8, 0x2, 0x893, 0xe086, 0xfffff10e, 0x5dee9eed, 0x7, 0xca, 0x5, 0x8, 0x906, 0x3, 0x8001, 0x4, 0x0, 0x8, 0x9, 0x5, 0x1, 0x80000001, 0x0, 0x800, 0xfffffffb, 0x3, 0x9, 0xaba, 0x5, 0x3, 0x3, 0x10000, 0x4f2b, 0x8, 0x5d4b, 0x9, 0xeee8, 0x8, 0x2, 0x0, 0x200000, 0xb, 0x7fffffff, 0x6, 0x7, 0x6, 0x9, 0x5, 0x6, 0x3, 0x3, 0x7, 0x7, 0x8001, 0x80, 0x3, 0x1, 0x1000, 0x7fff, 0x5, 0x3, 0x1, 0x3, 0x8, 0xb, 0x1, 0x51c, 0x6, 0x4, 0xfffffff9, 0x9, 0x1, 0x9, 0x6, 0x8, 0x0, 0x5, 0xffffffff, 0x7f, 0x7, 0x0, 0x800, 0x4, 0xe, 0x9, 0x9, 0x9, 0x5, 0x1f76, 0xffffffff, 0x4, 0x4, 0x3, 0xc7, 0x8, 0x7f, 0x10000, 0x8, 0xffffc6d8, 0x4, 0x10001, 0x3, 0x40, 0x7fffffff, 0x9, 0x2, 0x9, 0x3, 0xfff, 0xa, 0xf77, 0x1, 0x8, 0x4, 0x401, 0x7, 0x1, 0x10001, 0x1, 0x7fff, 0x7e883f81, 0xfdb6, 0x5, 0x0, 0x80000000, 0x2, 0x10001, 0x8, 0x8, 0xfffffff9, 0x4, 0x3, 0x1000, 0x8, 0x800, 0x1, 0x3]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x7, 0x9, 0x2, 0x2b, 0x77f, 0xfffffffe, 0xffff, 0x1, 0x1, 0xaa, 0x4ce6ccbb, 0x45d5, 0x80000001, 0x5, 0xb2a, 0xfbaf, 0x5, 0x80000001, 0x576d21ab, 0x0, 0x10, 0x2, 0xffff, 0xf, 0x7, 0x4, 0x1, 0x3, 0x0, 0x5, 0x9, 0x804, 0x7fffffff, 0x0, 0xe, 0x1, 0x0, 0x8, 0x1, 0x80000000, 0xa, 0x5, 0x9, 0x4, 0x80000000, 0x400, 0x800, 0x2980, 0x4, 0xa, 0x9, 0x6, 0x6, 0x2, 0x396c, 0x8, 0x8000, 0xad, 0x8, 0x1, 0xe3, 0xfff, 0x1ff, 0xe1b0, 0x6, 0x0, 0xffff, 0x6, 0x9, 0xd, 0x6, 0x38, 0x5, 0x81, 0xed0, 0x7, 0x21, 0x7fffffff, 0x40, 0x8, 0xfffffffb, 0xfffffe01, 0x4, 0xfb8d, 0x8, 0x10001, 0xd, 0x0, 0x2, 0x8, 0x9, 0x6, 0x2, 0xcba, 0xc18, 0x9, 0x27, 0x7, 0x9c, 0x3, 0xa716, 0x5, 0x1ab23dc4, 0x9, 0x8, 0xb, 0xd9, 0x53, 0xd, 0x7, 0x3, 0x7f, 0x7, 0xfffffffb, 0x7, 0x8, 0x2, 0xcb1, 0xffff, 0x9a, 0x2, 0x1, 0x9, 0xcb5, 0xd3, 0x3, 0x5, 0x92f6, 0xfff, 0x4b, 0x101, 0x1, 0x4, 0x4, 0x3, 0x25, 0x1, 0x4000003, 0xb2, 0x6, 0x4, 0x1000, 0x1, 0x1, 0xffff, 0x2, 0x0, 0x7, 0x5, 0x9, 0x5d36, 0x8, 0xa6ac, 0x1, 0x3, 0x800, 0x10000, 0x7, 0x3, 0x7, 0x3ff, 0xfffffffd, 0x7, 0x5, 0x8000, 0x4, 0x400, 0xa4, 0x6, 0x6, 0x6fdb20f9, 0xfffffff7, 0x34c1, 0x7, 0x8, 0x8, 0x3, 0x9, 0xe, 0x9, 0x3, 0x300, 0x200, 0x8, 0x3, 0xb949, 0x6, 0x5b1, 0x9, 0x33d2, 0x7, 0x5, 0x8, 0x40, 0x9, 0x3ff, 0x5, 0x8, 0x22, 0xff, 0x3, 0x200, 0x3, 0x101, 0x7f, 0x7, 0xd61c, 0xfffffc01, 0x1, 0x10000, 0x7ff, 0x2, 0x7, 0xb2, 0x2, 0x6, 0x7, 0xdb5a, 0xff, 0x9, 0x2, 0x4, 0x5, 0x9, 0x1, 0xa, 0x7, 0x3, 0x7ff, 0x0, 0x6a, 0x7, 0x1, 0xff, 0x0, 0x5, 0x297, 0x2, 0x8000, 0x4, 0xe83, 0x80000001, 0x20, 0xbc4, 0x6, 0x4, 0x6, 0x6, 0x8, 0x5f, 0x0, 0x1f2f374f, 0xa, 0x3, 0xc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1f, 0x0, 0x7f, 0x3, 0x80, {0x9, 0x0, 0x4, 0x2, 0x1, 0x7}, {0x8, 0x2, 0x2, 0x5, 0xe00, 0x3}, 0x8001, 0x1, 0xa9ea}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xe, 0x1, 0x4, 0xc, 0x200, 0xe, 0xb09, 0x9, 0x3, 0x2, 0x9, 0x6, 0x7fff, 0xff, 0x100, 0x4, 0xc, 0xe, 0x80, 0x1, 0xfc, 0x3, 0x101, 0xfffffffb, 0x9, 0x6, 0x3, 0x10001, 0x1, 0x400, 0x9, 0x2, 0x5, 0x81, 0x5, 0x2, 0x4, 0x1, 0x9, 0x6, 0xfffffff8, 0x1ff, 0x2400, 0xfffffffb, 0xbcf9, 0x7, 0x50f0, 0xfff, 0x3, 0x3, 0x3, 0x80, 0x2, 0x8, 0x2, 0xd1b, 0x788, 0xcb4, 0x1, 0x0, 0x33c2, 0x1, 0x10, 0x4, 0x5, 0x200, 0xeed, 0xffff0001, 0xfffffff7, 0x1, 0x7, 0xb, 0x401, 0x4, 0x9, 0x0, 0x8, 0x8, 0x3, 0x3, 0x10, 0x8, 0x2000000, 0x9, 0x401, 0xf, 0x100, 0x5, 0x7, 0xc201, 0x9, 0xdf, 0xe, 0x0, 0x5, 0x6d, 0x3, 0x0, 0x3, 0x6, 0x5, 0x9, 0x8, 0x1, 0x3ff, 0x6, 0x0, 0x6, 0x4, 0x1, 0x100, 0x401, 0x6, 0xffff, 0x7f, 0x9, 0x6, 0x2, 0x1, 0x4, 0x3, 0x800, 0x5, 0xfffffffa, 0x7, 0x2, 0x8, 0x3, 0x0, 0x200, 0x2, 0x21e0, 0xffff, 0x7f, 0x5043, 0x4a6, 0x0, 0x8, 0x5, 0x8, 0x7, 0x5, 0x3, 0x92, 0x343, 0x2, 0x7, 0x3, 0x2, 0x7fff, 0x4, 0x1, 0xffffffff, 0xfffffffc, 0x7, 0x7fffffff, 0xc4e6, 0x6, 0x5, 0x7f, 0x8, 0x4, 0x1, 0x1, 0x1ff, 0xb, 0x100, 0xe, 0x8, 0x7, 0x8, 0x3, 0x3ff, 0x7f, 0x8, 0xac, 0x400008, 0x36, 0x0, 0x1, 0xffffffff, 0x1000000, 0xe85, 0x2, 0x4, 0x401, 0x9, 0x5, 0x7, 0x5, 0x1, 0x3, 0x738c97cf, 0xff, 0x1150, 0x1f, 0x54, 0xa33e, 0x800, 0xffffffff, 0xbc, 0x4, 0x7, 0xa, 0x5, 0x9, 0x4, 0xc, 0x9, 0x6, 0x7, 0x4, 0x8, 0x0, 0x8bd0, 0x40, 0x2, 0xfffffffb, 0x200, 0x8, 0x101, 0x3, 0xffff, 0xc, 0x4, 0xff, 0x7fffffff, 0x4, 0x3, 0xee2, 0xb, 0x10, 0x7, 0x10000, 0x49, 0x400, 0x22c, 0x7, 0x0, 0x80000000, 0x2, 0x1, 0x7, 0x8, 0x5, 0x46c8, 0xff, 0xfffffff9, 0xff, 0x8, 0xe6, 0x459f, 0x8000, 0xaca, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x2a7c}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'caif0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd]}})
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)

1.279183716s ago: executing program 0 (id=2784):
r0 = socket(0x10, 0x1, 0x4) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x25971c7f9d24d66c}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r2 = accept4(r0, &(0x7f0000000180)=@un=@abs, &(0x7f0000000200)=0x80, 0x80000) (async)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000300)="58747f595196ee1629ab528c18bd9c0bd38397c14042605839d299e4727b037149a6dd9f38aa42df297dbc3879c93d9edd97058f9f5c2e3868b79ccdccb1b851deaed2e981774bbbfeb10017bddc8812f4aa23ed40eec6ee0f413f502d51683a2d3aa18e0b4b5405870a01c50c5b044a743835b6b3af26c60bbb76cd5a6ebff82a89015d30d30fb131b04f5523e028e56b7b66501a24e396a8dc561525a4e629dbeff50a72469f198e5db505cea654bb93b438ef52491644604529e90ac74a74a001fc12af981b1453446f79aca61e0027262f0852a685de334ea4dac01b3caf3bbcd8a73f83f2fe6c7c7b5a", 0xec, 0x4000010, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r7, 0x108, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000640)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/114, 0x72, 0x1, &(0x7f00000005c0)=""/127, 0x7f}, &(0x7f0000000680)=0x40) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000006c0)={0x0, 0x100, 0x7, 0xb}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x16080, 0x0) (async, rerun: 64)
connect$l2tp6(r2, &(0x7f0000000740)={0xa, 0x0, 0xfff, @local, 0x40, 0x4}, 0x20) (rerun: 64)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000780)='scalable\x00', 0x9)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000800), r6) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000840)=<r10=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000880)=<r11=>0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, r9, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) (async)
ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f00000009c0)={0x26, "8ef48048ce6d96b2780b0699f2e96d8b47f76728754afe89b42bcf06b8f2c2fbcac90b54cd0aa5b51f0728d13e9ddaaa600b7fa14184b5725fa772be5bbd5c876c53470f92aad0c168d877d86cf11f66411f3ca40182613b1331112b22e1e7a20d721da263cd5a96e7d05ae08c741e3b476655787692abfe323b14c71311cf1f"})
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r4, <r12=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xb, 0x1, &(0x7f0000000a80)=@raw=[@ldst={0x0, 0x3, 0x2, 0xf, 0xa, 0x1, 0xfffffffffffffff0}], &(0x7f0000000ac0)='syzkaller\x00', 0x9, 0xa4, &(0x7f0000000b00)=""/164, 0x41100, 0x21, '\x00', r5, @fallback=0x36, r4, 0x8, &(0x7f0000000bc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0xa, 0x6, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000c80)=[r4, r12, r4], &(0x7f0000000cc0)=[{0x1, 0x5, 0xa, 0x1}], 0x10, 0x1}, 0x94) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), r13) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000e80)={'ip6gre0\x00', &(0x7f0000000e00)={'syztnl0\x00', r5, 0x4, 0x1c, 0x4, 0x4, 0x1, @loopback, @rand_addr=' \x01\x00', 0x80, 0x8000, 0xffffff80, 0x1}})
r14 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl(r14, 0x7, &(0x7f0000000ec0)="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")

1.229765942s ago: executing program 0 (id=2785):
r0 = socket(0xa, 0x3, 0x3a)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r2, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={'xfrm0\x00', {0x2, 0x4e22, @private=0xa010101}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000500000003000000000000110300f400004578e137a404469baa2d00000000000000000000041dc1fb15fb0fd90b631c1cf39700000000000000000100"], 0x0, 0x51}, 0x28)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0})
connect$x25(r0, &(0x7f0000000000), 0x12)

1.229315199s ago: executing program 2 (id=2786):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
r1 = socket$inet6(0xa, 0x1, 0x0) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockopt(r2, 0xff, 0x1, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x800, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x20) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})

1.170271914s ago: executing program 2 (id=2787):
socket(0xa, 0x3, 0x3a) (async)
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
socket$kcm(0x2d, 0x2, 0x0) (async)
r5 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={<r6=>r5})
bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (async)
bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYBLOB="0c00018008000100"], 0x24}}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', <r8=>0x0, 0x7800, 0x700, 0x6, 0xfffffff1, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x68, 0x0, 0x3, 0x4, 0x0, @local, @empty, {[@noop]}}}}})
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x4008094)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r9, @ANYBLOB="3103efff0000000000040800000004"], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x24008010)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0xc081)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}], 0x1)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x2000000, 0x0, 0x11) (async)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x2000000, 0x0, 0x11)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x20, 0xfd, [0x0, 0x0, 0x4000000, 0xc, 0x0, 0x0, 0x0, 0x2]}}) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x20, 0xfd, [0x0, 0x0, 0x4000000, 0xc, 0x0, 0x0, 0x0, 0x2]}})

1.016854701s ago: executing program 2 (id=2789):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf291000000008000900000000001800018014000200776c616e3000000000000000000000000800080000000010"], 0x3c}}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, 0x0, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000480)='veno\x00', 0x5)
connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000200))
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440)={0x1f, 0x8, @any, 0x6}, 0xffffffffffffff69)
openat$tun(0xffffffffffffff9c, 0x0, 0x10d620, 0x0)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[], 0x20}}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x3, &(0x7f00000007c0)=ANY=[], 0x0, 0xd78, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe3d}, 0x94)
unshare(0x4a000000)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000)
close(0x4)
unshare(0x6a040000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

939.938471ms ago: executing program 0 (id=2790):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x14004851}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000480)={'filter\x00', 0x0, 0x0, 0x0, [0x7ff, 0xac74, 0x0, 0x101, 0x101, 0x4], 0x2, &(0x7f0000000400)=[{}, {}], 0x0, [{}, {}]}, 0x98)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040), 0x10)
connect$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10)
listen(r5, 0x0)
socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
accept4$unix(r5, 0x0, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c00028005001d00ed00000005001b005400000008000f0003000000080005c76ad1c209b34353bc526f0005"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000020", @ANYRES16=r11, @ANYBLOB="01032abd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x60000800)
r12 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r12, 0x29, 0x1a, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000040)={<r13=>0x0, 0x6, 0x6, [0x2, 0x3, 0x3, 0xfff8, 0x6223, 0x0]}, &(0x7f0000000240)=0x14)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000000340)={0x4a5, 0x2, 0x8009, 0x4, 0x4, 0x0, 0x400, 0x4, r13}, 0x20)

876.131862ms ago: executing program 0 (id=2792):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000002700)='xen_mmu_write_cr3\x00', r2}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="440002804000010024000100"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x20040884)
write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r3, r2, 0x4, r2}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', <r8=>0x0, 0x7, 0x40, 0x4, 0x9, {{0x2c, 0x4, 0x1, 0x1c, 0xb0, 0x67, 0x0, 0x7f, 0x0, 0x0, @private=0xa010101, @remote, {[@lsrr={0x83, 0x13, 0x67, [@empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @rr={0x7, 0x27, 0xda, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @multicast2, @multicast2, @loopback, @local]}, @timestamp_prespec={0x44, 0xc, 0xcc, 0x3, 0x4, [{@broadcast, 0x8000}]}, @lsrr={0x83, 0xf, 0xd8, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x87, 0x1, 0x9, [{@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0x34}, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xbf}]}, @timestamp_addr={0x44, 0x1c, 0x7d, 0x1, 0xf, [{@loopback, 0x3}, {@local, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x8001}]}, @timestamp={0x44, 0xc, 0x61, 0x0, 0xe, [0xfa95, 0x7fffffff]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', r8, 0x29, 0x8, 0x6, 0x1, 0x3e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x40, 0x20, 0x6, 0xe}})
r9 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
socket(0x1d, 0x3, 0x3)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000140)={&(0x7f0000000540)="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", &(0x7f0000001540)=""/210, &(0x7f0000001640)="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", &(0x7f0000002640)="047fa42d4b08468496d8996a892cdd4005684318df694665394bfd63ef19a7518c361c4d128cdf5a99910830df7adbe38543f3db16a0550f5febd88e41add4b99b9c4feae4e0623de40b7d3374cf1ba2dc4a84e8dfd758dcb0c3d47c868c", 0x7, r1}, 0x38)
r10 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x3a0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x7, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000026c0)=0xd)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r11, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r11, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r12 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
recvmmsg$unix(r12, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x52}}], 0x1, 0x0, 0x0)
sendmmsg(r12, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

539.822655ms ago: executing program 1 (id=2795):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2c}, 0x94)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="05000000010001", 0x7)
close(0x4)
pipe(0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000021401"], 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="c903e52e000000007b538c7700"/24])
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r3, 0x0, r7, 0x0, 0xf3a, 0x0)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x20, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4020000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000001c0)={r9, 0x1, 0xffffffffffffffde, @remote}, 0x10)
r10 = socket$kcm(0x10, 0x2, 0x10)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x1a, &(0x7f0000000080)=0x5, 0x4)
bind$inet(r11, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x40010)

450.327244ms ago: executing program 1 (id=2796):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRESHEX], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)={0x0, 0x3}, &(0x7f0000000400)=0x8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000180018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f0ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000300cc0000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef)

364.874892ms ago: executing program 1 (id=2797):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x4}}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = getuid()
sendmsg$nl_generic(r1, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x11000210}, 0xc, &(0x7f00000012c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x11e4}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) (async)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r5, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742042d1085849792762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0x57, 0xad, &(0x7f0000000300)="7adf9e1d85a58c0f14ce4a66c5eacb334cc07d29172c4eca1914199141cc0f10d05a1390648cee9c06431730f0291c6db349b6f14f20e51c3a846726bc03bd9d93e8d64ad577bf47b3363f061af8143f8b7173713d6325", &(0x7f0000000400)=""/173, 0x2, 0x0, 0xe0, 0xa5, &(0x7f00000004c0)="b6a4038d402c108af4b93ba0c46241f6682c3b0bd5c65f0a5b2d742c22b19c06ae6373f7a7cdc4745cc0ffbe0eaef53ff9bbdbd1fbd62abae6420b3b499aba013ddb5e7d700a9b205f19ce96c2ab813138738c2507a43ca8595f065392acf54ca546be9276f9c74795a7b545f2d05cee4441e88d3d584849bde6cbf8211e7b1629d939d0bb94761c83b30da175b9c4cc52ca09788975f355736fd85fcf350de23398b5a1094bf8eb54436b7e1c608c74a39a29bbdbe4caea7230bc808b25aba182a590f813888abe243d59454bc76f0818a71bbdbd5fb20c6afca92cad8371d8", &(0x7f0000000680)="951efff465dd4d71863d9e652186f87482ebee0a05c2f2dfe31cc535a0ff7ef0ddf2af5093e9fa0825ac5f1cc0ad71f532447b51a3c2e954b75c41497814a77638d8d5be20e4ec9143b3e0cda236ce41eff091ff7943d59bb7491b1d0e3fab9de595fb9ba278783bde6e62d8b9bb675640dd2635c8435ba2e210f0fa8e7f909ae7284f61e47eff27b8d3462d15fb99ac7e4666761d84f2126cf8c051c714f3caf5e0facd84", 0x7, 0x0, 0xa63}, 0x50) (async)
socket$inet(0xa, 0x801, 0x84) (async)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$vsock_stream(r6, 0x0, 0x0) (async)
listen(r6, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
shutdown(0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2, 0x7ebe}, 0x0, 0x0)

364.507087ms ago: executing program 2 (id=2798):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x6, [0x2, 0x5, 0x9, 0x8000000000000000, 0xfff, 0x2]}})
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18)
socket$netlink(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x6, [0x2, 0x5, 0x9, 0x8000000000000000, 0xfff, 0x2]}}) (async)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) (async)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_sctp(0xa, 0x4, 0x84) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) (async)

287.234204ms ago: executing program 1 (id=2799):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats})

286.862559ms ago: executing program 1 (id=2800):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000000008"], 0x174}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async)
getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) (async, rerun: 64)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x24, r4, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}}, 0x0) (async)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) (async, rerun: 64)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@dev}, {@multicast2}]}]}}, @timestamp}}}}, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="620ac4ff000000b802e7dc977de5b0069500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) (async, rerun: 64)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async, rerun: 64)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x40, 0x1, 0x6, 0x1b, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x7, 0x0, 0x5eae}})

174.604397ms ago: executing program 1 (id=2801):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000400000007000000080000000000000012c1b414d0bc3f43d233c8abffaa542e43e4d88750cf7b65ccbc6013de601be3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020600)
socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$inet6(0xa, 0x3, 0x7)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4)
connect$unix(r6, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
close(r5)
r7 = accept4(r4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r7)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "e55971277418921583c74b99353b9d55d90908b6ea7cafd3188b931053629563", "d2e91e1188a3a6208b5e013818b75a932a2934e7cb5f9bcc53167b323a69eacb", "94d16db71df3a371c4f2294565f888dbc7a32ab04fa38b3c82a67f05ef87e88f", "3e19aa35f2f7b5d3a59b86ed9f130f0574c90f48b2a5c02c6465aebcda9a59f9", "55841bf439f886e44c5aa56197f103b446e00a88a651523ad900000000000004", "6b29a0ff0d9f919c93b5a267", 0x10, 0x44, 0x7ffbffff, 0x5, 0x8}})

0s ago: executing program 0 (id=2802):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x6, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r3=>0x0)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x72, 0x19, "502a8950b7a6c10118fb124d631e0e5fbc655cb532313c055147ff0a6e086d06160a8da036deb1f918a5937ccbacea1ae59ea8181ea7d4365d0dc9f409514d5b495ab7be75e63477b6f42f7fe49e1565c38a33b41da9bb269f5880066c42b781770d06eb89a00047ae96c27cf939"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000d0}, 0x8000)
r4 = socket$igmp6(0xa, 0x3, 0x2)
socket$kcm(0x29, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0)
r6 = accept4(r4, 0x0, &(0x7f00000003c0), 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r7=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={<r8=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={<r9=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa4, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xde4a}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xcd9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000640)={'wlan1\x00'})
connect$inet(r6, &(0x7f0000000680)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r6)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r12, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48080)
ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000800)={@any, 0x71b1})
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000840)={<r13=>0x0, 0x86}, &(0x7f0000000880)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000008c0)={r13, @in6={{0xa, 0x4e21, 0x3, @private0, 0x40}}, 0x0, 0xf0a5}, &(0x7f0000000980)=0x90)
syz_genetlink_get_family_id$net_dm(&(0x7f00000009c0), r0)
sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r12, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xe}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x4c}}, 0x15)
ioctl$IMCTRLREQ(r6, 0x80044945, &(0x7f0000000b40)={0x400, 0xffff, 0x1, 0x10001})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x9, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x7}, @float={0xa, 0x0, 0x0, 0x10, 0x4}, @func={0xc, 0x0, 0x0, 0xc, 0x4}, @enum={0xb, 0x7, 0x0, 0x6, 0x4, [{0x4, 0x6e43}, {0xd, 0x5}, {0xd, 0x8}, {0xb, 0x9}, {0x7, 0xfffffffb}, {0xb, 0x8}, {0x1, 0x2}]}, @ptr={0xf, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x30, 0x30, 0x61]}}, &(0x7f0000000c40)=""/29, 0x99, 0x1d, 0x0, 0x7}, 0x28)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4810)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x1)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000001080)={&(0x7f0000000f40), 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x98, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_VENDOR_DATA={0x81, 0x1f, "8fd308023b3ef6e81af00531dc5852e89edeedf394f84c25a613c822ce0362f6cecac03421848e5c2ae4e1b5ef63cfb86f63b2a18ec44e05f4b1a22847e1f686597832fae3a9fd25e4ce84d9e2b5eab5e9eb6773d8afda0658385cee9645beab9f5d1d8e8de32d24fb578bc6547aaa67e326c6cda140207120738499f6"}]}, 0x98}, 0x1, 0x0, 0x0, 0x881}, 0x4048044)
sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000002e80)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002e40)={&(0x7f0000002380)={0xaa0, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x800, 0x7, 0x6, 0x6}, {0x1, 0x5, 0x6, 0x53}, {0x4, 0x5, 0xff, 0xc1}, {0x1, 0x2, 0xe}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0xe7c00}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xf4b6, 0xe3, 0x6, 0x5}, {0x0, 0x6, 0x3, 0x5}, {0x9294, 0x69, 0x6, 0x9}]}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff297}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8ece}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xa, 0x8, 0x0, 0x100000}, {0x10, 0x8, 0x0, 0x1}, {0x1, 0x7, 0x8, 0x7}]}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1a1faa35}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x849}}, {0x8}}}]}}]}, 0xaa0}, 0x1, 0x0, 0x0, 0x800}, 0xc8c5)

kernel console output (not intermixed with test programs):

ibutes in process `syz.2.1007'.
[  108.100137][ T9589] bridge6: entered promiscuous mode
[  108.101845][ T9589] bridge6: entered allmulticast mode
[  108.104636][ T9589] team0: Port device bridge6 added
[  108.109816][ T9591] xt_CT: You must specify a L4 protocol and not use inversions on it
[  108.116349][ T9589] rdma_rxe: rxe_newlink: failed to add macvlan1
[  108.263042][ T9606] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1015'.
[  108.267026][ T9606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'.
[  108.270841][ T9607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1013'.
[  108.274882][ T9606] netlink: 'syz.0.1015': attribute type 1 has an invalid length.
[  108.308171][ T9606] 8021q: adding VLAN 0 to HW filter on device bond15
[  108.474391][ T9622] netlink: 'syz.0.1019': attribute type 1 has an invalid length.
[  108.545495][ T9628] x_tables: duplicate underflow at hook 1
[  108.682452][ T9644] netlink: 'syz.0.1025': attribute type 1 has an invalid length.
[  108.713880][ T9644] 8021q: adding VLAN 0 to HW filter on device bond16
[  108.733634][ T9647] hsr0 speed is unknown, defaulting to 1000
[  108.737960][ T9647] lo speed is unknown, defaulting to 1000
[  108.764512][ T9644] veth15: entered promiscuous mode
[  108.773841][ T9644] bond16: (slave veth15): Enslaving as a backup interface with a down link
[  108.801447][ T9644] bond10: (slave batadv1): Releasing active interface
[  108.810324][ T9644] bond11: (slave veth13): Releasing active interface
[  108.819028][ T9644] bond12: (slave gretap3): Releasing active interface
[  108.840150][ T9644] team0: Port device batadv2 removed
[  108.846933][ T9644] team0: Port device bridge6 removed
[  108.850015][ T9644] bond16: (slave veth15): Releasing backup interface
[  108.892201][ T9647] lo speed is unknown, defaulting to 1000
[  109.353729][ T9676] siw: device registration error -23
[  109.611152][ T9697] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.614198][ T9696] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.631617][ T9697] ieee802154 phy0 wpan0: encryption failed: -22
[  109.633858][ T9696] ieee802154 phy0 wpan0: encryption failed: -22
[  109.642290][ T9698] hsr0 speed is unknown, defaulting to 1000
[  109.650566][ T9698] lo speed is unknown, defaulting to 1000
[  109.749582][ T9698] lo speed is unknown, defaulting to 1000
[  109.968624][ T9723] netlink: 'syz.1.1049': attribute type 1 has an invalid length.
[  109.992468][ T9723] 8021q: adding VLAN 0 to HW filter on device bond11
[  110.080988][ T9728] batadv_slave_1: mtu greater than device maximum
[  110.317777][ T9746] vlan0: entered promiscuous mode
[  110.345882][ T9746] team0: Port device vlan0 added
[  110.451403][ T9768] netlink: 'syz.0.1061': attribute type 1 has an invalid length.
[  110.483914][ T9768] 8021q: adding VLAN 0 to HW filter on device bond17
[  110.569163][ T9773] netlink: 'syz.0.1064': attribute type 1 has an invalid length.
[  111.060744][ T9823] pim6reg: entered allmulticast mode
[  111.294261][ T9827] netlink: 'syz.0.1079': attribute type 1 has an invalid length.
[  111.621756][ T9839] netlink: 'syz.0.1083': attribute type 18 has an invalid length.
[  111.628776][ T5856] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.628830][ T9839] netlink: 'syz.0.1083': attribute type 18 has an invalid length.
[  111.631699][ T5856] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.641064][ T5856] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.643786][ T5856] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.393725][ T9812] Set syz1 is full, maxelem 65536 reached
[  112.469089][ T9868] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.472209][ T9868] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.518230][ T9874] 8021q: adding VLAN 0 to HW filter on device bond17
[  112.521022][ T9874] bridge0: port 1(bond17) entered blocking state
[  112.523303][ T9874] bridge0: port 1(bond17) entered disabled state
[  112.525913][ T9874] bond17: entered allmulticast mode
[  112.529340][ T9874] bond17: entered promiscuous mode
[  112.538551][ T9868] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.542577][ T9868] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.551688][ T9874] __nla_validate_parse: 24 callbacks suppressed
[  112.551697][ T9874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1092'.
[  112.560657][ T9874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1092'.
[  112.563843][ T9874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1092'.
[  112.585168][ T9868] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.588295][ T9868] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.651802][ T9868] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.655208][ T9868] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.731189][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.744144][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.754267][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.766609][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.781290][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.815268][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.823605][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.829074][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.868236][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'.
[  112.879186][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'.
[  112.886919][ T9885] batadv0: entered promiscuous mode
[  112.889537][ T9885] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  112.892745][ T9885] batadv0: left promiscuous mode
[  113.130413][ T9898] netlink: 'syz.1.1100': attribute type 12 has an invalid length.
[  113.199978][ T9900] netlink: 'syz.2.1098': attribute type 16 has an invalid length.
[  113.202628][ T9900] netlink: 'syz.2.1098': attribute type 17 has an invalid length.
[  113.217308][ T9900] 8021q: adding VLAN 0 to HW filter on device team0
[  113.221681][ T9900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.894806][ T9909] syzkaller1: entered promiscuous mode
[  113.899434][ T9909] syzkaller1: entered allmulticast mode
[  113.904862][ T9909] xt_hashlimit: size too large, truncated to 1048576
[  113.910864][ T9910] xt_hashlimit: size too large, truncated to 1048576
[  113.913743][ T9910] xt_hashlimit: max too large, truncated to 1048576
[  113.915164][ T9909] xt_hashlimit: max too large, truncated to 1048576
[  114.120238][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'.
[  114.130583][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1106'.
[  114.588146][ T9947] xt_CT: No such helper "syz0"
[  114.661059][  T971] IPVS: starting estimator thread 0...
[  114.664167][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'.
[  114.684745][ T9950] bridge11: port 1(veth19) entered blocking state
[  114.687664][ T9950] bridge11: port 1(veth19) entered disabled state
[  114.690061][ T9950] veth19: entered allmulticast mode
[  114.692748][ T9950] veth19: entered promiscuous mode
[  114.701025][ T9950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'.
[  114.711499][ T9950] vlan4: entered allmulticast mode
[  114.713247][ T9950] veth1: entered allmulticast mode
[  114.725436][ T9950] bridge11: port 2(vlan4) entered blocking state
[  114.727775][ T9950] bridge11: port 2(vlan4) entered disabled state
[  114.731140][ T9950] vlan4: entered promiscuous mode
[  114.733071][ T9950] veth1: entered promiscuous mode
[  114.751867][ T9951] IPVS: using max 80 ests per chain, 192000 per kthread
[  114.809124][ T9955] macvlan2: entered allmulticast mode
[  114.811444][ T9955] bridge0: port 2(macvlan2) entered blocking state
[  114.813641][ T9955] bridge0: port 2(macvlan2) entered disabled state
[  114.847535][ T9957] netlink: 'syz.0.1118': attribute type 13 has an invalid length.
[  114.850346][ T9957] netlink: 'syz.0.1118': attribute type 17 has an invalid length.
[  115.072039][ T9957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.090866][ T9958] hsr0 speed is unknown, defaulting to 1000
[  115.093659][ T9958] lo speed is unknown, defaulting to 1000
[  115.219939][ T9958] lo speed is unknown, defaulting to 1000
[  115.240835][ T9971] netlink: 'syz.1.1122': attribute type 13 has an invalid length.
[  115.243318][ T9971] netlink: 'syz.1.1122': attribute type 17 has an invalid length.
[  115.260474][ T9971] erspan0: left allmulticast mode
[  115.296807][ T9971] team0: left promiscuous mode
[  115.332391][ T9971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.351540][ T9974] siw: device registration error -23
[  115.386966][ T9972] hsr0 speed is unknown, defaulting to 1000
[  115.390821][ T9972] lo speed is unknown, defaulting to 1000
[  115.566744][ T9977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1125'.
[  115.600464][ T9972] lo speed is unknown, defaulting to 1000
[  116.175186][T10026] bridge8: port 1(veth17) entered blocking state
[  116.177571][T10026] bridge8: port 1(veth17) entered disabled state
[  116.179700][T10026] veth17: entered allmulticast mode
[  116.182853][T10026] veth17: entered promiscuous mode
[  116.198240][T10026] bridge8: port 2(veth0_to_bond) entered blocking state
[  116.202041][T10026] bridge8: port 2(veth0_to_bond) entered disabled state
[  116.204449][T10026] veth0_to_bond: entered allmulticast mode
[  116.210370][T10026] veth0_to_bond: entered promiscuous mode
[  116.237315][T10026] vlan4: entered allmulticast mode
[  116.239045][T10026] veth1: entered allmulticast mode
[  116.414112][T10046] hsr0 speed is unknown, defaulting to 1000
[  116.460142][T10046] lo speed is unknown, defaulting to 1000
[  116.491741][T10049] 8021q: adding VLAN 0 to HW filter on device bond12
[  116.514243][T10049] macvlan4: entered promiscuous mode
[  116.517497][T10049] macvlan4: entered allmulticast mode
[  116.519787][T10049] bond12: entered promiscuous mode
[  116.521744][T10049] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  116.536985][T10049] bond12: left promiscuous mode
[  116.589196][T10053] hsr0 speed is unknown, defaulting to 1000
[  116.594207][T10053] lo speed is unknown, defaulting to 1000
[  116.598803][T10048] delete_channel: no stack
[  116.693381][T10046] lo speed is unknown, defaulting to 1000
[  116.948023][T10053] lo speed is unknown, defaulting to 1000
[  116.954783][T10080] hsr0 speed is unknown, defaulting to 1000
[  116.964933][T10080] lo speed is unknown, defaulting to 1000
[  117.098052][T10085] bridge0: entered promiscuous mode
[  117.099975][T10085] macvlan4: entered allmulticast mode
[  117.101681][T10085] bridge0: entered allmulticast mode
[  117.103655][T10085] bridge0: port 1(macvlan4) entered blocking state
[  117.106365][T10085] bridge0: port 1(macvlan4) entered disabled state
[  117.128136][T10082] IPv6: NLM_F_CREATE should be specified when creating new route
[  117.137370][T10085] bridge0: left allmulticast mode
[  117.139159][T10085] bridge0: left promiscuous mode
[  117.238872][T10080] lo speed is unknown, defaulting to 1000
[  117.723892][T10102] 8021q: adding VLAN 0 to HW filter on device bond18
[  117.728124][T10102] bridge0: port 1(bond18) entered blocking state
[  117.732593][T10102] bridge0: port 1(bond18) entered disabled state
[  117.734804][T10102] bond18: entered allmulticast mode
[  117.764934][T10102] __nla_validate_parse: 7 callbacks suppressed
[  117.764944][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1159'.
[  117.774829][T10102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1159'.
[  117.884448][T10116] netlink: 'syz.1.1161': attribute type 1 has an invalid length.
[  117.984322][T10119] can: request_module (can-proto-4) failed.
[  118.140440][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1166'.
[  118.149596][T10130] ieee802154 phy0 wpan0: encryption failed: -22
[  118.229063][T10138] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  118.250868][T10138] netlink: 'syz.2.1170': attribute type 1 has an invalid length.
[  118.256942][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1172'.
[  118.276882][T10138] bond18: entered promiscuous mode
[  118.285411][T10138] 8021q: adding VLAN 0 to HW filter on device bond18
[  118.342684][T10151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  118.362174][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1176'.
[  118.371718][T10151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  118.460196][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'.
[  118.463652][T10164] netlink: 'syz.1.1180': attribute type 10 has an invalid length.
[  118.466722][T10164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1180'.
[  118.471675][T10164] dummy0: entered allmulticast mode
[  118.473801][T10164] bridge0: port 1(dummy0) entered blocking state
[  118.478704][T10164] bridge0: port 1(dummy0) entered disabled state
[  118.480477][T10165] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1179'.
[  118.485595][T10164] bridge0: port 1(dummy0) entered blocking state
[  118.487740][T10164] bridge0: port 1(dummy0) entered forwarding state
[  118.618428][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'.
[  118.763158][T10174] netlink: 'syz.0.1181': attribute type 13 has an invalid length.
[  118.789742][T10174] netlink: 'syz.0.1181': attribute type 17 has an invalid length.
[  118.959222][T10174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.133537][T10199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1188'.
[  119.574868][T10247] netlink: 'syz.1.1201': attribute type 1 has an invalid length.
[  119.591602][T10247] 8021q: adding VLAN 0 to HW filter on device bond13
[  119.607855][T10247] 8021q: adding VLAN 0 to HW filter on device bond13
[  119.611426][T10247] bond13: (slave vxcan5): The slave device specified does not support setting the MAC address
[  119.615917][T10247] bond13: (slave vxcan5): Error -95 calling set_mac_address
[  119.652273][T10252] gretap4: entered promiscuous mode
[  119.659863][T10252] bond13: (slave gretap4): making interface the new active one
[  119.662566][T10252] bond13: (slave gretap4): Enslaving as an active interface with an up link
[  119.679522][T10247] macvlan4: entered promiscuous mode
[  119.681283][T10247] macvlan4: entered allmulticast mode
[  119.683340][T10247] bond13: entered promiscuous mode
[  119.686137][T10247] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  119.689776][T10247] bond13: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap4
[  119.694231][T10247] bond13: left promiscuous mode
[  119.847577][T10267] bond17: left allmulticast mode
[  119.849790][T10267] bond17: left promiscuous mode
[  119.855307][T10267] bridge0: port 1(bond17) entered disabled state
[  119.873723][T10267] bridge0 (unregistering): left allmulticast mode
[  119.922956][T10270] netlink: 'syz.2.1207': attribute type 10 has an invalid length.
[  120.034859][T10274] netlink: 'syz.1.1209': attribute type 10 has an invalid length.
[  120.039268][T10274] bond0: (slave wlan1): Opening slave failed
[  120.928284][T10302] ipvlan2: entered promiscuous mode
[  120.930037][T10302] ipvlan2: entered allmulticast mode
[  120.931824][T10302] batadv0: entered allmulticast mode
[  120.934307][T10302] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  120.994758][T10298] netlink: 'syz.2.1215': attribute type 4 has an invalid length.
[  121.029408][T10310] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.059054][T10310] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.069695][T10314] netlink: 'syz.1.1220': attribute type 1 has an invalid length.
[  121.152054][T10310] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.168275][T10314] bond14: (slave vti0): The slave device specified does not support setting the MAC address
[  121.172176][T10314] bond14: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  121.188764][T10314] bond14: (slave vti0): making interface the new active one
[  121.192054][T10314] bond14: (slave vti0): Enslaving as an active interface with an up link
[  121.218159][T10310] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.270939][T10332] netlink: 'syz.1.1224': attribute type 1 has an invalid length.
[  121.290272][ T5691] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.302087][T10332] bond15: (slave geneve2): making interface the new active one
[  121.306006][T10332] bond15: (slave geneve2): Enslaving as an active interface with an up link
[  121.310578][ T5691] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  121.313450][ T5691] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  121.329594][ T5691] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  121.332336][ T5691] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  121.353507][ T5691] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.356749][ T5691] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.359377][ T5691] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.520168][T10354] hsr0 speed is unknown, defaulting to 1000
[  121.522869][T10354] lo speed is unknown, defaulting to 1000
[  121.621910][T10362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.631212][T10354] lo speed is unknown, defaulting to 1000
[  121.849563][T10372] pim6reg1: entered promiscuous mode
[  121.853717][T10372] pim6reg1: entered allmulticast mode
[  122.101355][T10379] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  122.178162][T10384] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  122.180663][T10384] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  122.183080][T10384] tipc: New replicast peer: 255.255.255.255
[  122.192315][T10384] tipc: Enabled bearer <udp:syz2>, priority 9
[  122.202703][T10384] batman_adv: batadv0: Adding interface: team0
[  122.215095][T10384] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  122.222345][T10384] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  122.271981][T10384] team0: entered promiscuous mode
[  122.274699][T10384] 8021q: adding VLAN 0 to HW filter on device team0
[  122.278759][T10384] batman_adv: batadv0: Interface activated: team0
[  122.281537][T10384] batman_adv: batadv0: Interface deactivated: team0
[  122.283721][T10384] batman_adv: batadv0: Removing interface: team0
[  122.372969][T10389] sctp: [Deprecated]: syz.2.1239 (pid 10389) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.372969][T10389] Use struct sctp_sack_info instead
[  122.449208][T10398] 8021q: adding VLAN 0 to HW filter on device bond19
[  122.462057][T10398] bond19: (slave gretap3): making interface the new active one
[  122.474898][T10398] bond19: (slave gretap3): Enslaving as an active interface with an up link
[  122.717349][T10433] SET target dimension over the limit!
[  122.781173][T10436] bond16: entered promiscuous mode
[  122.782840][T10436] bond16: entered allmulticast mode
[  122.952438][T10457] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.957497][T10457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.993255][T10459] __nla_validate_parse: 29 callbacks suppressed
[  122.993268][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1257'.
[  123.021576][T10459] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1257'.
[  123.163535][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'.
[  123.239314][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1264'.
[  123.472755][T10505] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  123.482095][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1272'.
[  123.514159][T10507] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1272'.
[  123.553592][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'.
[  123.560626][T10512] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  123.564091][T10512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  123.570214][T10511] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  123.573410][T10511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  123.647706][T10521] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  123.651022][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1276'.
[  123.653270][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1277'.
[  123.662867][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1276'.
[  123.669809][T10525] validate_nla: 12 callbacks suppressed
[  123.669819][T10525] netlink: 'syz.2.1274': attribute type 10 has an invalid length.
[  123.688483][T10525] team0: Port device dummy0 added
[  123.742135][T10530] netlink: 'syz.0.1279': attribute type 1 has an invalid length.
[  123.753837][T10533] netlink: 'syz.2.1274': attribute type 10 has an invalid length.
[  123.762763][T10533] team0: Port device dummy0 removed
[  123.767842][T10533] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  123.784218][T10535] syzkaller0: entered promiscuous mode
[  123.788720][T10535] syzkaller0: entered allmulticast mode
[  123.818856][T10536] bridge0: port 2(macsec0) entered blocking state
[  123.821277][T10536] bridge0: port 2(macsec0) entered disabled state
[  123.823921][T10536] macsec0: entered allmulticast mode
[  123.827220][T10536] macsec0: entered promiscuous mode
[  123.829418][T10536] bond18: entered promiscuous mode
[  124.537686][T10548] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[  124.948124][T10575] netlink: 'syz.0.1293': attribute type 1 has an invalid length.
[  124.978852][T10575] veth23: entered promiscuous mode
[  124.982337][T10575] bond19: (slave veth23): Enslaving as a backup interface with a down link
[  124.986589][T10575] netlink: 'syz.0.1293': attribute type 1 has an invalid length.
[  124.990745][T10575] 8021q: adding VLAN 0 to HW filter on device bond19
[  125.019452][T10580] netlink: 'syz.0.1295': attribute type 1 has an invalid length.
[  125.184289][T10588] pim6reg1: entered allmulticast mode
[  125.190657][T10588] netlink: 'syz.0.1297': attribute type 1 has an invalid length.
[  125.590240][T10631] netlink: 'syz.2.1311': attribute type 1 has an invalid length.
[  125.616939][T10631] veth27: entered promiscuous mode
[  125.620696][T10631] bond20: (slave veth27): Enslaving as a backup interface with a down link
[  125.628646][T10631] 8021q: adding VLAN 0 to HW filter on device bond20
[  125.707634][T10634] netlink: 'syz.2.1312': attribute type 1 has an invalid length.
[  125.750716][T10641] netlink: 'syz.0.1314': attribute type 1 has an invalid length.
[  125.757009][T10641] veth0_to_bond: left allmulticast mode
[  125.758975][T10641] veth0_to_bond: left promiscuous mode
[  125.761018][T10641] bridge8: port 2(veth0_to_bond) entered disabled state
[  125.764925][T10641] macsec0: left allmulticast mode
[  125.770305][T10641] macsec0: left promiscuous mode
[  125.772660][T10641] bridge0: port 2(macsec0) entered disabled state
[  125.778020][T10641] bond18: left promiscuous mode
[  125.782646][T10641] veth17: left allmulticast mode
[  125.784737][T10641] veth17: left promiscuous mode
[  125.787801][T10641] bridge8: port 1(veth17) entered disabled state
[  125.791787][T10641] bond18: left allmulticast mode
[  125.793746][T10641] bridge0: port 1(bond18) entered disabled state
[  125.801648][T10641] bond19: (slave veth23): Releasing backup interface
[  126.210983][T10688] team0: Port device bond0 removed
[  126.213905][T10688] bond0: (slave dummy0): Releasing backup interface
[  126.228760][T10688] bond16: (slave gretap2): Releasing active interface
[  126.233583][T10688] veth19: left allmulticast mode
[  126.235851][T10688] veth19: left promiscuous mode
[  126.237614][T10688] bridge11: port 1(veth19) entered disabled state
[  126.240994][T10688] vlan4: left promiscuous mode
[  126.242688][T10688] veth1: left promiscuous mode
[  126.244464][T10688] bridge11: port 2(vlan4) entered disabled state
[  126.254043][T10688] bond19: (slave gretap3): Releasing active interface
[  126.259065][  T971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  126.264617][T10688] bond20: (slave veth27): Releasing backup interface
[  126.407111][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  126.588065][T10737] netlink: del zone limit has 4 unknown bytes
[  126.593650][T10738] netlink: del zone limit has 4 unknown bytes
[  126.593670][T10741] siw: device registration error -23
[  126.600586][T10737] team0: entered promiscuous mode
[  126.605584][T10737] bridge0: port 2(team0) entered blocking state
[  126.607832][T10737] bridge0: port 2(team0) entered disabled state
[  126.610119][T10737] team0: entered allmulticast mode
[  126.611842][T10737] vlan0: entered allmulticast mode
[  126.613637][T10737] veth0_vlan: entered allmulticast mode
[  126.617313][T10737] bridge0: port 2(team0) entered blocking state
[  126.619437][T10737] bridge0: port 2(team0) entered forwarding state
[  126.951498][T10772] hsr0 speed is unknown, defaulting to 1000
[  126.957756][T10772] lo speed is unknown, defaulting to 1000
[  127.058984][T10779] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  127.170687][T10784] delete_channel: no stack
[  127.178845][T10772] lo speed is unknown, defaulting to 1000
[  127.191334][T10792] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  127.786519][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  127.800350][T10833] hsr0 speed is unknown, defaulting to 1000
[  127.803079][T10833] lo speed is unknown, defaulting to 1000
[  127.837177][T10836] tipc: Failed to remove unknown binding: 66,1,1/1660133909:3315769144/3315769146
[  127.842532][T10836] tipc: Failed to remove unknown binding: 66,1,1/1660133909:3315769144/3315769146
[  127.846225][T10836] tipc: Failed to remove unknown binding: 66,1,1/1660133909:3315769144/3315769146
[  127.850089][ T5830] Bluetooth: hci2: link tx timeout
[  127.852075][ T5830] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  127.858276][ T5830] Bluetooth: hci2: link tx timeout
[  127.860676][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  127.944908][T10844] 8021q: adding VLAN 0 to HW filter on device bond23
[  127.947985][T10844] bridge0: port 1(bond23) entered blocking state
[  127.950238][T10844] bridge0: port 1(bond23) entered disabled state
[  127.952423][T10844] bond23: entered allmulticast mode
[  127.970564][T10845] 8021q: adding VLAN 0 to HW filter on device bond24
[  127.972974][T10845] bridge0: port 2(bond24) entered blocking state
[  127.975261][T10845] bridge0: port 2(bond24) entered disabled state
[  127.977518][T10845] bond24: entered allmulticast mode
[  127.980282][T10845] bond24: entered promiscuous mode
[  127.982157][T10845] bond23: entered promiscuous mode
[  127.984340][T10833] lo speed is unknown, defaulting to 1000
[  128.206175][T10861] __nla_validate_parse: 24 callbacks suppressed
[  128.206186][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'.
[  128.228181][T10861] sch_tbf: burst 2 is lower than device bridge5 mtu (1514) !
[  128.367897][T10882] veth1_to_team: entered allmulticast mode
[  128.370143][T10882] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  128.752126][T10929] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1397'.
[  128.758331][T10929] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1397'.
[  128.803977][T10935] bridge0: port 3(syz_tun) entered blocking state
[  128.817839][T10935] bridge0: port 3(syz_tun) entered disabled state
[  128.825867][T10935] syz_tun: entered allmulticast mode
[  128.831345][T10931] validate_nla: 5 callbacks suppressed
[  128.831354][T10931] netlink: 'syz.2.1398': attribute type 10 has an invalid length.
[  128.895330][T10942] team0: left allmulticast mode
[  128.896943][T10942] vlan0: left allmulticast mode
[  128.898468][T10942] veth0_vlan: left allmulticast mode
[  128.900327][T10942] bridge0: port 2(team0) entered disabled state
[  128.910110][T10942] bridge0: port 1(dummy0) entered disabled state
[  128.929942][T10942] team0: Port device vlan0 removed
[  128.948240][T10942] bond13: (slave gretap4): Releasing active interface
[  128.953637][T10942] bond14: (slave vti0): Releasing backup interface
[  128.960252][T10942] bond15: (slave geneve2): Releasing active interface
[  128.991942][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  128.998861][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  129.001565][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  129.004126][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  129.057369][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1407'.
[  129.366485][T10976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1411'.
[  129.381105][T10980] syz_tun: entered allmulticast mode
[  129.389078][T10976] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1411'.
[  129.396348][T10976] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1411'.
[  129.399587][T10976] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1411'.
[  129.402570][T10976] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1411'.
[  129.451069][T10983] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  129.461901][T10980] syz_tun: left allmulticast mode
[  129.770908][T11020] netlink: 'syz.2.1419': attribute type 1 has an invalid length.
[  129.773685][T11020] netlink: 'syz.2.1419': attribute type 1 has an invalid length.
[  129.813504][T11034] netlink: 'syz.1.1423': attribute type 1 has an invalid length.
[  129.831109][T11038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1422'.
[  129.841155][T11038] syz_tun: left allmulticast mode
[  129.842986][T11038] bridge0: port 3(syz_tun) entered disabled state
[  129.857824][T11038] bond23: left allmulticast mode
[  129.859485][T11038] bond23: left promiscuous mode
[  129.861252][T11038] bridge0: port 1(bond23) entered disabled state
[  129.865570][ T5830] Bluetooth: hci2: command 0x040f tx timeout
[  129.881610][T11038] bond24: left promiscuous mode
[  129.886906][T11038] bond24: left allmulticast mode
[  129.888774][T11038] bridge0: port 2(bond24) entered disabled state
[  129.914856][T11041] netlink: 'syz.2.1425': attribute type 10 has an invalid length.
[  130.016553][T11053] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.019888][T11053] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.060195][T11053] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.064131][T11053] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.088161][T11058] Cannot find del_set index 3 as target
[  130.114514][T11053] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.117774][T11053] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.182301][T11053] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.186114][T11053] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.252796][T11073] netlink: 'syz.2.1433': attribute type 1 has an invalid length.
[  130.262696][T11073] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  130.263043][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.272409][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.281415][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.284202][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.296502][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.299153][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.310782][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.313319][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.654875][T11106] netlink: 'syz.0.1441': attribute type 6 has an invalid length.
[  130.662332][T11107] netlink: 'syz.1.1439': attribute type 16 has an invalid length.
[  130.668903][T11107] netlink: 'syz.1.1439': attribute type 17 has an invalid length.
[  130.681386][T11107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.750968][T11111] x_tables: duplicate underflow at hook 2
[  130.859798][T11115] netlink: 'syz.0.1444': attribute type 2 has an invalid length.
[  131.126537][T11127] tipc: Enabled bearer <udp:syz2>, priority 10
[  131.185977][T11130] 8021q: adding VLAN 0 to HW filter on device bond26
[  131.207464][T11130] 8021q: adding VLAN 0 to HW filter on device bond26
[  131.210828][T11130] bond26: (slave vxcan3): The slave device specified does not support setting the MAC address
[  131.216711][T11130] bond26: (slave vxcan3): Error -95 calling set_mac_address
[  131.344958][T11135] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.392086][T11135] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.442787][T11135] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.501553][T11135] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.507864][T11152] ip6t_rpfilter: unknown options
[  131.509940][T11150] tipc: Invalid UDP bearer configuration
[  131.509968][T11150] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  131.591316][ T5856] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.600447][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.626839][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.647314][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.758793][T11154] 8021q: adding VLAN 0 to HW filter on device bond27
[  131.956596][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  132.005293][T11168] gretap0: refused to change device tx_queue_len
[  132.007554][T11168] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  132.246444][ T5863] tipc: Node number set to 3722525003
[  132.267157][ T1360] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  132.270256][   T55] Bluetooth: hci0: command 0x0c20 tx timeout
[  132.273566][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.460911][T11178] x_tables: duplicate underflow at hook 1
[  132.633767][T11192] IPVS: length: 4096 != 8
[  132.786348][T11202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.800500][T11205] xt_cgroup: path and classid specified
[  133.564908][T11211] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  133.785564][T11227] __nla_validate_parse: 78 callbacks suppressed
[  133.785574][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1481'.
[  133.820433][   T33] audit: type=1800 audit(1753327879.722:2): pid=11231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1482" name=14 dev="tmpfs" ino=2336 res=0 errno=0
[  133.879337][T11240] hsr0 speed is unknown, defaulting to 1000
[  133.882545][T11240] lo speed is unknown, defaulting to 1000
[  134.003582][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1486'.
[  134.015233][T11245] openvswitch: netlink: Unknown nsh attribute 0
[  134.018064][T11245] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.023142][T11240] lo speed is unknown, defaulting to 1000
[  134.129694][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'.
[  134.341847][T11265] dummy0: entered promiscuous mode
[  134.350720][T11265] vlan5: entered promiscuous mode
[  134.469451][T11277] validate_nla: 6 callbacks suppressed
[  134.469463][T11277] netlink: 'syz.0.1491': attribute type 1 has an invalid length.
[  134.536928][T11277] 8021q: adding VLAN 0 to HW filter on device bond28
[  134.562683][T11279] 8021q: adding VLAN 0 to HW filter on device bond28
[  134.576932][T11279] bond28: (slave vxcan3): The slave device specified does not support setting the MAC address
[  134.588353][T11279] bond28: (slave vxcan3): Error -95 calling set_mac_address
[  134.608769][T11277] bond28: (slave bridge10): Enslaving as an active interface with a down link
[  134.770848][T11289] netlink: 'syz.1.1495': attribute type 1 has an invalid length.
[  134.794160][T11289] 8021q: adding VLAN 0 to HW filter on device bond17
[  134.810963][T11289] veth29: entered promiscuous mode
[  134.814608][T11289] bond17: (slave veth29): Enslaving as a backup interface with a down link
[  134.833914][T11289] bond17: (slave veth29): Releasing backup interface
[  134.901682][T11302] netlink: 'syz.1.1499': attribute type 1 has an invalid length.
[  135.033351][T11312] netlink: 'syz.1.1500': attribute type 1 has an invalid length.
[  135.148943][T11318] 8021q: adding VLAN 0 to HW filter on device bond20
[  135.152133][T11318] bridge0: port 1(bond20) entered blocking state
[  135.154749][T11318] bridge0: port 1(bond20) entered disabled state
[  135.159772][T11318] bond20: entered allmulticast mode
[  135.165464][T11318] bond20: entered promiscuous mode
[  135.168514][T11318] bridge0: port 1(bond20) entered blocking state
[  135.171065][T11318] bridge0: port 1(bond20) entered forwarding state
[  135.188842][ T1089] bridge0: port 1(bond20) entered disabled state
[  135.289258][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1506'.
[  135.360874][T11340] hsr0 speed is unknown, defaulting to 1000
[  135.369258][T11340] lo speed is unknown, defaulting to 1000
[  135.443412][T11351] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000
[  135.510796][T11340] lo speed is unknown, defaulting to 1000
[  135.686427][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'.
[  135.716170][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1515'.
[  135.720816][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'.
[  135.774135][T11365] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1516'.
[  135.777230][T11365] netlink: 'syz.1.1516': attribute type 1 has an invalid length.
[  135.788085][T11365] syzkaller1: entered promiscuous mode
[  135.789885][T11365] syzkaller1: entered allmulticast mode
[  136.060916][T11373] netlink: 'syz.0.1518': attribute type 16 has an invalid length.
[  136.063463][T11373] netlink: 'syz.0.1518': attribute type 17 has an invalid length.
[  136.076920][T11373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  136.274595][T11384] hsr0 speed is unknown, defaulting to 1000
[  136.277419][T11384] lo speed is unknown, defaulting to 1000
[  136.394879][T11384] lo speed is unknown, defaulting to 1000
[  136.634262][T11399] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1528'.
[  136.639471][T11399] nbd: illegal input index 65508
[  136.722028][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'.
[  136.747936][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  136.750794][   T55] Bluetooth: hci0: command 0x0c20 tx timeout
[  136.969446][T11413] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.008842][T11413] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.100387][T11413] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.179266][T11413] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.248529][ T5856] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.262768][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.276247][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.295473][ T5856] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.383548][T11433] siw: device registration error -23
[  137.559999][T11444] netlink: 'syz.1.1541': attribute type 1 has an invalid length.
[  137.578655][T11444] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  137.651963][T11452] netlink: 'syz.1.1544': attribute type 11 has an invalid length.
[  137.803176][T11470] tc_dump_action: action bad kind
[  137.837262][T11470] netlink: 'syz.1.1549': attribute type 13 has an invalid length.
[  137.840008][T11470] netlink: 'syz.1.1549': attribute type 17 has an invalid length.
[  137.943387][T11484] 8021q: adding VLAN 0 to HW filter on device bond21
[  137.947905][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.996518][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  138.207132][T11501] bond20: left allmulticast mode
[  138.209147][T11501] bond20: left promiscuous mode
[  138.211293][T11501] bridge0: port 1(bond20) entered disabled state
[  138.236229][T11501] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  138.273090][T11506] bridge: RTM_NEWNEIGH with invalid state 0x1
[  138.277763][T11506] ieee802154 phy0 wpan0: encryption failed: -22
[  138.994488][T11576] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  139.350124][T11585] __nla_validate_parse: 7 callbacks suppressed
[  139.350136][T11585] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.1584'.
[  139.422071][T11591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1586'.
[  139.434667][T11591] geneve0: entered promiscuous mode
[  139.440739][T11591] team0: Port device geneve0 added
[  139.551097][T11604] validate_nla: 4 callbacks suppressed
[  139.551110][T11604] netlink: 'syz.1.1589': attribute type 3 has an invalid length.
[  139.556545][T11604] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1589'.
[  139.581481][T11607] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1590'.
[  139.656516][T11608] hsr0 speed is unknown, defaulting to 1000
[  139.659295][T11608] lo speed is unknown, defaulting to 1000
[  139.741077][T11608] lo speed is unknown, defaulting to 1000
[  140.589772][T11619] netlink: 'syz.1.1592': attribute type 1 has an invalid length.
[  140.617778][T11619] 8021q: adding VLAN 0 to HW filter on device bond22
[  140.641963][T11619] 8021q: adding VLAN 0 to HW filter on device bond22
[  140.644501][T11619] bond22: (slave vxcan5): The slave device specified does not support setting the MAC address
[  140.658776][T11619] bond22: (slave vxcan5): Error -95 calling set_mac_address
[  140.682814][T11621] batadv_slave_1: entered promiscuous mode
[  140.738886][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1592'.
[  140.740078][T11621] bond22: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  140.749307][T11619] 8021q: adding VLAN 0 to HW filter on device bond22
[  140.840108][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'.
[  140.844160][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'.
[  141.129377][T11650] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  141.192052][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'.
[  141.201884][T11651] dvmrp8: entered allmulticast mode
[  141.530383][T11657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1602'.
[  141.534212][T11657] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1602'.
[  141.806140][T11671] vlan0: entered promiscuous mode
[  142.047718][T11693] netlink: 'syz.0.1612': attribute type 1 has an invalid length.
[  142.074183][T11693] 8021q: adding VLAN 0 to HW filter on device bond29
[  142.108243][T11705] x_tables: duplicate underflow at hook 2
[  142.136247][T11708] hsr0 speed is unknown, defaulting to 1000
[  142.138826][T11708] lo speed is unknown, defaulting to 1000
[  142.244878][T11708] lo speed is unknown, defaulting to 1000
[  142.258954][T11722] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20004
[  142.709073][T11732] netlink: 'syz.0.1623': attribute type 1 has an invalid length.
[  142.740763][T11732] 8021q: adding VLAN 0 to HW filter on device bond30
[  142.758274][T11732] veth27: entered promiscuous mode
[  142.763662][T11732] bond30: (slave veth27): Enslaving as a backup interface with a down link
[  142.777714][T11732] bond28: (slave bridge10): Releasing active interface
[  142.783343][T11732] bond30: (slave veth27): Releasing backup interface
[  142.828327][T11735] netlink: 'syz.2.1624': attribute type 10 has an invalid length.
[  143.026837][T11757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  143.035164][T11757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.039195][T11757] 8021q: adding VLAN 0 to HW filter on device hsr0
[  143.209672][T11769] hsr0 speed is unknown, defaulting to 1000
[  143.212489][T11769] lo speed is unknown, defaulting to 1000
[  143.375620][T11769] lo speed is unknown, defaulting to 1000
[  143.841829][T11805] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  143.939817][T11817] netlink: 'syz.2.1648': attribute type 1 has an invalid length.
[  143.976426][T11817] 8021q: adding VLAN 0 to HW filter on device bond21
[  144.029938][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  144.167132][T11829] netlink: 'syz.0.1652': attribute type 1 has an invalid length.
[  144.180683][T11829] 8021q: adding VLAN 0 to HW filter on device bond31
[  144.192372][T11829] 8021q: adding VLAN 0 to HW filter on device bond31
[  144.194792][T11829] bond31: (slave vxcan3): The slave device specified does not support setting the MAC address
[  144.199746][T11829] bond31: (slave vxcan3): Error -95 calling set_mac_address
[  144.244972][T11831] bond31: (slave bridge13): Enslaving as an active interface with a down link
[  144.382220][T11849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.384591][T11849] IPv6: NLM_F_CREATE should be set when creating new route
[  144.524245][T11867] geneve4: entered promiscuous mode
[  144.527044][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.528495][T11867] __nla_validate_parse: 14 callbacks suppressed
[  144.528502][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'.
[  144.530226][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.549307][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.553394][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.639757][T11876] netlink: 'syz.0.1665': attribute type 9 has an invalid length.
[  144.770303][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'.
[  144.773354][T11888] chnl_net:caif_netlink_parms(): no params data found
[  144.809433][T11888] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1668'.
[  144.985634][   T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.299883][T11917] ieee802154 phy0 wpan0: encryption failed: -22
[  145.353985][T11924] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1679'.
[  145.358534][T11924] netlink: 'syz.0.1679': attribute type 1 has an invalid length.
[  145.376763][T11924] 8021q: adding VLAN 0 to HW filter on device bond32
[  145.390466][T11924] 8021q: adding VLAN 0 to HW filter on device batadv3
[  145.393666][T11924] bond32: (slave batadv3): making interface the new active one
[  145.397034][T11924] bond32: (slave batadv3): Enslaving as an active interface with an up link
[  145.397347][T11927] netlink: 'syz.1.1680': attribute type 1 has an invalid length.
[  145.417361][T11927] 8021q: adding VLAN 0 to HW filter on device bond23
[  145.428592][T11930] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  145.434590][T11927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1680'.
[  145.541365][T11942] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1684'.
[  145.771855][T11957] netlink: 'syz.1.1688': attribute type 10 has an invalid length.
[  145.774447][T11957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1688'.
[  145.778720][T11957] batadv0: entered promiscuous mode
[  145.780729][T11957] bridge0: port 1(batadv0) entered blocking state
[  145.782861][T11957] bridge0: port 1(batadv0) entered disabled state
[  145.786389][T11957] bridge0: port 1(batadv0) entered blocking state
[  145.788474][T11957] bridge0: port 1(batadv0) entered forwarding state
[  146.148079][ T8443] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  146.151324][ T8443] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  146.223314][T11983] netlink: 'syz.1.1696': attribute type 1 has an invalid length.
[  146.240467][T11983] 8021q: adding VLAN 0 to HW filter on device bond24
[  146.256371][T11983] bond24: (slave veth35): Enslaving as an active interface with a down link
[  146.400668][T11997] 8021q: adding VLAN 0 to HW filter on device bond25
[  146.403151][T11997] bridge0: port 2(bond25) entered blocking state
[  146.405908][T11997] bridge0: port 2(bond25) entered disabled state
[  146.407982][T11997] bond25: entered allmulticast mode
[  146.410841][T11997] bond25: entered promiscuous mode
[  146.412747][T11997] bridge0: port 2(bond25) entered blocking state
[  146.414809][T11997] bridge0: port 2(bond25) entered forwarding state
[  146.438872][T11998] 8021q: adding VLAN 0 to HW filter on device bond26
[  146.441518][T11998] bridge0: port 3(bond26) entered blocking state
[  146.443789][T11998] bridge0: port 3(bond26) entered disabled state
[  146.449119][T11998] bond26: entered allmulticast mode
[  146.452203][T11998] bond26: entered promiscuous mode
[  146.454542][T11998] bridge0: port 3(bond26) entered blocking state
[  146.456860][T11998] bridge0: port 3(bond26) entered forwarding state
[  146.472604][T11997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1701'.
[  146.472622][T11998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1701'.
[  146.478178][T11997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1701'.
[  146.482132][T11998] veth0: entered promiscuous mode
[  146.485536][T11998] veth0: left promiscuous mode
[  146.494157][T11997] veth0: entered promiscuous mode
[  146.499435][T11997] veth0: left promiscuous mode
[  146.726048][T12024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.832682][   T26] bridge0: port 2(bond25) entered disabled state
[  146.841860][   T26] bridge0: port 3(bond26) entered disabled state
[  147.152388][T12068] netlink: 'syz.2.1727': attribute type 1 has an invalid length.
[  147.187703][T12068] 8021q: adding VLAN 0 to HW filter on device bond22
[  147.191770][T12071] netlink: 'syz.1.1728': attribute type 13 has an invalid length.
[  147.194334][T12071] netlink: 'syz.1.1728': attribute type 17 has an invalid length.
[  147.197898][T12071] netlink: 'syz.1.1728': attribute type 27 has an invalid length.
[  147.208156][T12068] veth31: entered promiscuous mode
[  147.212610][T12068] bond22: (slave veth31): Enslaving as a backup interface with a down link
[  147.232104][T12068] bond22: (slave veth31): Releasing backup interface
[  147.246104][ T5863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.371398][T12084] netlink: 'syz.2.1733': attribute type 10 has an invalid length.
[  147.436302][T12092] No such timeout policy "syz1"
[  147.440569][T12092] siw: device registration error -23
[  147.839628][ T5863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  148.110613][T12134] hsr0 speed is unknown, defaulting to 1000
[  148.113589][T12134] lo speed is unknown, defaulting to 1000
[  148.203042][T12134] lo speed is unknown, defaulting to 1000
[  148.542430][T12143] bond23 (unregistering): Released all slaves
[  148.665333][ T5830] Bluetooth: hci2: command 0x040f tx timeout
[  148.983537][T12182] hsr0 speed is unknown, defaulting to 1000
[  148.989533][T12182] lo speed is unknown, defaulting to 1000
[  149.153074][T12182] lo speed is unknown, defaulting to 1000
[  149.196581][T12195] tc_dump_action: action bad kind
[  149.212010][T12193] team0: left promiscuous mode
[  149.213583][T12193] geneve0: left promiscuous mode
[  149.228387][T12193] dummy0: left allmulticast mode
[  149.230922][T12193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.257649][T12197] 8021q: adding VLAN 0 to HW filter on device bond23
[  149.404262][T12206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.404287][T12210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.424901][T12206] siw: device registration error -23
[  149.424912][T12210] siw: device registration error -23
[  149.668337][T12220] syzkaller0: entered promiscuous mode
[  149.670859][T12220] syzkaller0: entered allmulticast mode
[  150.786050][T12237] validate_nla: 1 callbacks suppressed
[  150.786059][T12237] netlink: 'syz.0.1778': attribute type 1 has an invalid length.
[  150.792062][T12237] __nla_validate_parse: 10 callbacks suppressed
[  150.792070][T12237] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1778'.
[  151.022315][T12253] netlink: 'syz.2.1784': attribute type 13 has an invalid length.
[  151.022391][T12252] netlink: 'syz.2.1784': attribute type 13 has an invalid length.
[  151.024832][T12253] netlink: 'syz.2.1784': attribute type 17 has an invalid length.
[  151.028270][T12252] netlink: 'syz.2.1784': attribute type 17 has an invalid length.
[  151.046576][T12252] erspan0: left allmulticast mode
[  151.073355][T12252] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.093133][T12250] set match dimension is over the limit!
[  151.165977][T12252] team0: left promiscuous mode
[  151.169388][T12252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.179761][T12253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.201617][T12259] hsr0 speed is unknown, defaulting to 1000
[  151.204393][T12259] lo speed is unknown, defaulting to 1000
[  151.266767][T12267] netlink: 'syz.1.1788': attribute type 13 has an invalid length.
[  151.274026][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'.
[  151.284611][T12267] netlink: 'syz.1.1788': attribute type 3 has an invalid length.
[  151.288365][T12267] netlink: 'syz.1.1788': attribute type 10 has an invalid length.
[  151.297321][T12267] team0: Port device bond0 added
[  151.339588][T12259] lo speed is unknown, defaulting to 1000
[  151.440524][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'.
[  151.570058][T12288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1796'.
[  151.662391][T12286] hsr0 speed is unknown, defaulting to 1000
[  151.690602][T12286] lo speed is unknown, defaulting to 1000
[  151.859297][T12286] lo speed is unknown, defaulting to 1000
[  151.993418][T12305] hsr0 speed is unknown, defaulting to 1000
[  152.001646][T12305] lo speed is unknown, defaulting to 1000
[  152.070819][T12307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1799'.
[  152.073750][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1799'.
[  152.076774][T12307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1799'.
[  152.079647][T12307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1799'.
[  152.144093][T12305] lo speed is unknown, defaulting to 1000
[  152.244586][T12323] netlink: 'syz.0.1804': attribute type 10 has an invalid length.
[  152.250015][T12323] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1804'.
[  152.256611][T12323] team0: Port device geneve0 added
[  152.641983][T12357] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1814'.
[  152.738549][T12366] team0: entered promiscuous mode
[  152.740810][T12366] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  152.747021][T12366] team0: left promiscuous mode
[  152.808795][T12372] netlink: 'syz.1.1816': attribute type 10 has an invalid length.
[  152.824362][T12372] bridge0: port 1(batadv0) entered disabled state
[  152.831218][T12372] batadv0: left promiscuous mode
[  152.835499][T12372] bridge0: port 1(batadv0) entered disabled state
[  152.856239][T12372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.877078][T12372] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  153.196557][T12395] siw: device registration error -23
[  154.131449][T12423] team0: Device gtp1 is of different type
[  154.386437][T12455] IPVS: length: 137 != 8
[  154.404571][T12452] 8021q: adding VLAN 0 to HW filter on device bond27
[  154.518416][ T5855] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.521106][ T5855] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.525240][ T5855] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.527773][ T5855] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.533961][T12476] batman_adv: batadv0: Adding interface: team0
[  154.538485][T12476] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  154.559841][T12480] bond28: entered promiscuous mode
[  154.561754][T12480] 8021q: adding VLAN 0 to HW filter on device bond28
[  154.565576][T12476] team0: entered promiscuous mode
[  154.570991][T12476] 8021q: adding VLAN 0 to HW filter on device team0
[  154.573373][T12476] batman_adv: batadv0: Interface activated: team0
[  154.577898][T12476] batman_adv: batadv0: Interface deactivated: team0
[  154.579917][T12476] batman_adv: batadv0: Removing interface: team0
[  154.642653][T12486] 8021q: adding VLAN 0 to HW filter on device bond24
[  154.872442][T12508] siw: device registration error -23
[  154.919613][T12512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.061528][T12523] 8021q: adding VLAN 0 to HW filter on device bond25
[  155.760430][T12565] team0: Device veth0_vlan failed to register rx_handler
[  155.942363][T12587] bridge: RTM_NEWNEIGH with invalid state 0x1
[  155.946755][T12587] ieee802154 phy0 wpan0: encryption failed: -22
[  155.952307][T12587] vlan5: entered promiscuous mode
[  156.026954][T12597] No such timeout policy "syz0"
[  156.223221][T12610] validate_nla: 42 callbacks suppressed
[  156.228423][T12610] netlink: 'syz.1.1887': attribute type 10 has an invalid length.
[  156.416374][T12623] veth0_vlan: entered allmulticast mode
[  156.421002][T12623] : renamed from vlan1
[  156.514256][T12631] syzkaller0: entered promiscuous mode
[  156.516710][T12631] syzkaller0: entered allmulticast mode
[  156.588593][T12635] __nla_validate_parse: 19 callbacks suppressed
[  156.588603][T12635] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1897'.
[  156.703102][T12645] netlink: 'syz.1.1902': attribute type 1 has an invalid length.
[  156.725602][T12645] 8021q: adding VLAN 0 to HW filter on device bond30
[  156.818722][T12654] 8021q: adding VLAN 0 to HW filter on device bond31
[  156.821954][T12654] bridge0: port 1(bond31) entered blocking state
[  156.824724][T12654] bridge0: port 1(bond31) entered disabled state
[  156.832105][T12654] bond31: entered allmulticast mode
[  156.836023][T12654] bond31: entered promiscuous mode
[  156.838950][T12654] bridge0: port 1(bond31) entered blocking state
[  156.841612][T12654] bridge0: port 1(bond31) entered forwarding state
[  156.854051][ T1089] bridge0: port 1(bond31) entered disabled state
[  156.862635][T12654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1904'.
[  156.870108][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1904'.
[  156.949924][T12659] netlink: 'syz.1.1905': attribute type 1 has an invalid length.
[  156.977907][T12659] bond32: (slave vxcan5): The slave device specified does not support setting the MAC address
[  156.981889][T12659] bond32: (slave vxcan5): Error -95 calling set_mac_address
[  157.225286][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  157.227543][ T5830] Bluetooth: hci0: command 0x0c20 tx timeout
[  157.794934][T12674] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1907'.
[  158.140052][T12663] syz_tun: entered allmulticast mode
[  158.142332][T12667] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  158.146610][T12667] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  158.238940][T12680] netlink: 'syz.1.1910': attribute type 1 has an invalid length.
[  158.258835][T12680] bond33: (slave gretap5): making interface the new active one
[  158.262206][T12680] bond33: (slave gretap5): Enslaving as an active interface with an up link
[  158.424888][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'.
[  158.517844][T12712] netlink: 'syz.1.1920': attribute type 1 has an invalid length.
[  158.540275][T12712] bond34: (slave bridge7): making interface the new active one
[  158.548822][T12712] bond34: (slave bridge7): Enslaving as an active interface with an up link
[  158.583856][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1921'.
[  158.652088][T12718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1922'.
[  158.655238][T12718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1922'.
[  158.712314][T12724] netlink: 'syz.1.1924': attribute type 1 has an invalid length.
[  158.872002][T12731] netlink: 'syz.1.1927': attribute type 13 has an invalid length.
[  158.874789][T12731] netlink: 'syz.1.1927': attribute type 17 has an invalid length.
[  158.884276][T12731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.773182][T12765] netem: incorrect ge model size
[  159.776947][T12765] netem: change failed
[  159.868357][T12774] netlink: 'syz.1.1939': attribute type 1 has an invalid length.
[  160.423243][T12788] netlink: 'syz.2.1945': attribute type 10 has an invalid length.
[  160.894720][T12831] 8021q: adding VLAN 0 to HW filter on device bond33
[  160.917837][T12830] can: request_module (can-proto-5) failed.
[  161.044918][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'.
[  161.147771][T12863] 8021q: adding VLAN 0 to HW filter on device bond26
[  161.158322][T12864] vlan5: entered promiscuous mode
[  161.160250][T12864] bond26: entered promiscuous mode
[  161.162175][T12864] vlan5: entered allmulticast mode
[  161.164252][T12864] bond26: entered allmulticast mode
[  161.183864][T12859] Cannot find add_set index 2 as target
[  161.363936][T12879] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1972'.
[  161.394121][T12883] validate_nla: 3 callbacks suppressed
[  161.394131][T12883] netlink: 'syz.2.1974': attribute type 1 has an invalid length.
[  161.511572][T12889] team0: Port device geneve0 removed
[  161.518428][T12889] bond31: (slave bridge13): Releasing active interface
[  161.535441][T12889] bond32: (slave batadv3): Releasing active interface
[  161.629191][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  161.644140][T12899] netlink: 'syz.0.1981': attribute type 3 has an invalid length.
[  161.652918][T12899] __nla_validate_parse: 2 callbacks suppressed
[  161.652926][T12899] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1981'.
[  161.721834][T12905] netlink: 'syz.0.1983': attribute type 1 has an invalid length.
[  161.742917][T12905] 8021q: adding VLAN 0 to HW filter on device bond34
[  161.759413][T12905] 8021q: adding VLAN 0 to HW filter on device bond34
[  161.761769][T12905] bond34: (slave vxcan3): The slave device specified does not support setting the MAC address
[  161.765999][T12905] bond34: (slave vxcan3): Error -95 calling set_mac_address
[  161.814642][T12909] veth29: entered promiscuous mode
[  161.818735][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'.
[  161.822812][T12909] bond34: (slave veth29): Enslaving as an active interface with a down link
[  161.828545][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'.
[  161.831531][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'.
[  161.851756][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'.
[  161.854734][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'.
[  161.857760][T12905] erspan0: entered allmulticast mode
[  161.864062][T12905] bond34: (slave erspan0): making interface the new active one
[  161.871251][T12905] bond34: (slave erspan0): Enslaving as an active interface with an up link
[  161.994621][T12932] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  161.999742][T12937] netlink: 'syz.0.1992': attribute type 3 has an invalid length.
[  162.002192][T12937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1992'.
[  162.047080][T12943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1995'.
[  162.094782][T12949] 8021q: adding VLAN 0 to HW filter on device bond37
[  162.097419][T12949] bridge0: port 4(bond37) entered blocking state
[  162.099511][T12949] bridge0: port 4(bond37) entered disabled state
[  162.101616][T12949] bond37: entered allmulticast mode
[  162.104347][T12949] bond37: entered promiscuous mode
[  162.107755][T12949] bridge0: port 4(bond37) entered blocking state
[  162.109792][T12949] bridge0: port 4(bond37) entered forwarding state
[  162.114757][ T1089] bridge0: port 4(bond37) entered disabled state
[  162.126961][T12949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1997'.
[  162.129799][T12949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1997'.
[  162.350763][T12983] x_tables: duplicate underflow at hook 2
[  162.402310][T12990] syzkaller1: entered promiscuous mode
[  162.404072][T12990] syzkaller1: entered allmulticast mode
[  162.422226][T12990] hsr0 speed is unknown, defaulting to 1000
[  162.424972][T12990] lo speed is unknown, defaulting to 1000
[  162.454178][T12999] netlink: 'syz.2.2010': attribute type 9 has an invalid length.
[  162.457555][T12999] netlink: 'syz.2.2010': attribute type 9 has an invalid length.
[  162.591261][T12990] lo speed is unknown, defaulting to 1000
[  162.868652][T13028] netlink: 'syz.0.2014': attribute type 10 has an invalid length.
[  163.033853][T13043] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  163.554473][T13100] netlink: 'syz.2.2031': attribute type 1 has an invalid length.
[  163.564760][T13102] netlink: 'syz.1.2030': attribute type 10 has an invalid length.
[  163.569817][T13105] netlink: 'syz.0.2032': attribute type 1 has an invalid length.
[  163.578466][T13102] 8021q: adding VLAN 0 to HW filter on device team0
[  163.594765][T13100] veth33: entered promiscuous mode
[  163.600136][T13100] bond27: (slave veth33): Enslaving as a backup interface with a down link
[  163.618223][T13100] bond27: (slave veth33): Releasing backup interface
[  163.638773][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  163.824606][T13123] bridge13: entered promiscuous mode
[  163.829716][T13123] bridge13: entered allmulticast mode
[  163.833016][T13123] team0: Port device bridge13 added
[  164.230336][ T5863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  164.263030][T13158] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  164.600448][T13193] IPVS: length: 8 != 446622349272
[  164.715747][T13177] syz.1.2053: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  164.721788][T13177] CPU: 1 UID: 0 PID: 13177 Comm: syz.1.2053 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  164.721799][T13177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.721804][T13177] Call Trace:
[  164.721808][T13177]  <TASK>
[  164.721811][T13177]  dump_stack_lvl+0x189/0x250
[  164.721826][T13177]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.721834][T13177]  ? __pfx__printk+0x10/0x10
[  164.721844][T13177]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  164.721854][T13177]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  164.721863][T13177]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  164.721872][T13177]  warn_alloc+0x214/0x310
[  164.721882][T13177]  ? __pfx_warn_alloc+0x10/0x10
[  164.721892][T13177]  ? __get_vm_area_node+0x28f/0x300
[  164.721902][T13177]  ? nf_tables_newset+0x132b/0x2530
[  164.721913][T13177]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  164.721935][T13177]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  164.721946][T13177]  ? rcu_is_watching+0x15/0xb0
[  164.721955][T13177]  ? nf_tables_newset+0x132b/0x2530
[  164.721963][T13177]  ? nf_tables_newset+0x132b/0x2530
[  164.721970][T13177]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  164.721980][T13177]  ? nf_tables_newset+0x132b/0x2530
[  164.721988][T13177]  ? nft_table_lookup+0x211/0x230
[  164.721995][T13177]  ? nft_set_lookup+0x128/0x150
[  164.722003][T13177]  ? nft_hash_privsize+0x5f/0xf0
[  164.722012][T13177]  nf_tables_newset+0x132b/0x2530
[  164.722025][T13177]  ? __pfx_nf_tables_newset+0x10/0x10
[  164.722041][T13177]  ? __nla_parse+0x40/0x60
[  164.722051][T13177]  nfnetlink_rcv+0x1132/0x2520
[  164.722092][T13177]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  164.722109][T13177]  ? ref_tracker_free+0x63a/0x7d0
[  164.722128][T13177]  ? __netlink_deliver_tap+0x807/0x850
[  164.722135][T13177]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.722149][T13177]  netlink_unicast+0x82f/0x9e0
[  164.722162][T13177]  ? __pfx_netlink_unicast+0x10/0x10
[  164.722172][T13177]  ? netlink_sendmsg+0x642/0xb30
[  164.722178][T13177]  ? skb_put+0x11b/0x210
[  164.722187][T13177]  netlink_sendmsg+0x805/0xb30
[  164.722198][T13177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.722206][T13177]  ? aa_sock_msg_perm+0x94/0x160
[  164.722214][T13177]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.722221][T13177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.722228][T13177]  __sock_sendmsg+0x21c/0x270
[  164.722239][T13177]  ____sys_sendmsg+0x505/0x830
[  164.722250][T13177]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.722262][T13177]  ? import_iovec+0x74/0xa0
[  164.722273][T13177]  ___sys_sendmsg+0x21f/0x2a0
[  164.722282][T13177]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.722304][T13177]  ? __fget_files+0x2a/0x420
[  164.722310][T13177]  ? __fget_files+0x3a0/0x420
[  164.722320][T13177]  __x64_sys_sendmsg+0x19b/0x260
[  164.722329][T13177]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.722342][T13177]  ? rcu_is_watching+0x15/0xb0
[  164.722351][T13177]  ? do_syscall_64+0xbe/0x3b0
[  164.722361][T13177]  do_syscall_64+0xfa/0x3b0
[  164.722367][T13177]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.722374][T13177]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.722380][T13177]  ? exc_page_fault+0x9f/0xf0
[  164.722388][T13177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.722394][T13177] RIP: 0033:0x7f188d78e9a9
[  164.722403][T13177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.722409][T13177] RSP: 002b:00007f188e5af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.722417][T13177] RAX: ffffffffffffffda RBX: 00007f188d9b5fa0 RCX: 00007f188d78e9a9
[  164.722422][T13177] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  164.722426][T13177] RBP: 00007f188d810d69 R08: 0000000000000000 R09: 0000000000000000
[  164.722431][T13177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.722435][T13177] R13: 0000000000000000 R14: 00007f188d9b5fa0 R15: 00007fff0f044b88
[  164.722446][T13177]  </TASK>
[  164.722449][T13177] Mem-Info:
[  164.837389][T13202] : entered promiscuous mode
[  164.839632][T13177] active_anon:5707 inactive_anon:0 isolated_anon:0
[  164.839632][T13177]  active_file:1233 inactive_file:38254 isolated_file:0
[  164.839632][T13177]  unevictable:1768 dirty:112 writeback:0
[  164.839632][T13177]  slab_reclaimable:10279 slab_unreclaimable:115368
[  164.839632][T13177]  mapped:18272 shmem:2457 pagetables:1039
[  164.839632][T13177]  sec_pagetables:0 bounce:0
[  164.839632][T13177]  kernel_misc_reclaimable:0
[  164.839632][T13177]  free:234647 free_pcp:17722 free_cma:0
[  164.868214][T13177] Node 0 active_anon:13708kB inactive_anon:0kB active_file:3604kB inactive_file:137584kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38884kB dirty:296kB writeback:0kB shmem:4968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5040kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  164.878645][T13177] Node 1 active_anon:9120kB inactive_anon:0kB active_file:1328kB inactive_file:15432kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34204kB dirty:152kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9712kB pagetables:1592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  164.889130][T13177] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  164.900114][T13177] lowmem_reserve[]: 0 812 812 812 812
[  164.901918][T13177] Node 0 DMA32 free:197156kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13708kB inactive_anon:0kB active_file:3604kB inactive_file:137584kB unevictable:3536kB writepending:296kB present:1556484kB managed:831796kB mlocked:0kB bounce:0kB free_pcp:27536kB local_pcp:15236kB free_cma:0kB
[  164.912940][T13177] lowmem_reserve[]: 0 0 0 0 0
[  164.914574][T13177] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  164.926847][T13177] lowmem_reserve[]: 0 0 854 854 854
[  164.928547][T13177] Node 1 Normal free:275488kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9120kB inactive_anon:0kB active_file:1328kB inactive_file:15432kB unevictable:3536kB writepending:152kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:36096kB local_pcp:20748kB free_cma:0kB
[  164.939207][T13177] lowmem_reserve[]: 0 0 0 0 0
[  164.940334][T13205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.940794][T13177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  164.943507][T13205] syzkaller0: entered promiscuous mode
[  164.947178][T13177] Node 0 DMA32: 543*4kB (UME) 145*8kB (ME) 316*16kB (UME) 300*32kB (UME) 96*64kB (UME) 14*128kB (UM) 9*256kB (UM) 22*512kB (UME) 10*1024kB (UME) 4*2048kB (ME) 34*4096kB (UM) = 197188kB
[  164.947249][T13177] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  164.947313][T13177] Node 1 Normal: 517*4kB (UM) 305*8kB (UME) 121*16kB (UME) 290*32kB (UME) 157*64kB (UME) 93*128kB (UM) 65*256kB (UME) 30*512kB (UM) 23*1024kB (UME) 15*2048kB (UM) 37*4096kB (UM) = 275500kB
[  164.947384][T13177] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  164.947390][T13177] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  164.947396][T13177] 41944 total pagecache pages
[  164.947400][T13177] 0 pages in swap cache
[  164.947403][T13177] Free swap  = 124996kB
[  164.947406][T13177] Total swap = 124996kB
[  164.947409][T13177] 786301 pages RAM
[  164.947412][T13177] 0 pages HighMem/MovableOnly
[  164.947415][T13177] 241104 pages reserved
[  164.947418][T13177] 0 pages cma reserved
[  164.988986][T13205] syzkaller0: entered allmulticast mode
[  165.031586][T13212] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  165.054908][T13206] tipc: Resetting bearer <eth:syzkaller0>
[  165.066848][T13206] tipc: Disabling bearer <eth:syzkaller0>
[  165.072844][T13209] delete_channel: no stack
[  166.058128][T13264] ip6gre1: entered allmulticast mode
[  166.148262][T13272] syzkaller0: entered promiscuous mode
[  166.150118][T13272] syzkaller0: entered allmulticast mode
[  166.222470][T13281] bridge8: entered promiscuous mode
[  166.227274][T13281] macsec0: entered promiscuous mode
[  166.229335][T13281] macsec0: entered allmulticast mode
[  166.231356][T13281] bridge8: entered allmulticast mode
[  166.234314][T13281] bridge8: port 1(macsec0) entered blocking state
[  166.238788][T13281] bridge8: port 1(macsec0) entered disabled state
[  166.248223][T13281] bridge8: left allmulticast mode
[  166.251579][T13281] bridge8: left promiscuous mode
[  166.288741][T13293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.491027][T13327] syz_tun: left allmulticast mode
[  166.498222][T13327] rdma_rxe: rxe_newlink: failed to add lo
[  166.506782][T13327] team0: left promiscuous mode
[  166.511604][T13327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.719447][T13345] validate_nla: 2 callbacks suppressed
[  166.719457][T13345] netlink: 'syz.2.2104': attribute type 39 has an invalid length.
[  166.797085][T13359] netlink: 'syz.1.2108': attribute type 10 has an invalid length.
[  166.799787][T13359] __nla_validate_parse: 24 callbacks suppressed
[  166.799794][T13359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2108'.
[  166.853915][T13365] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2110'.
[  166.859699][T13365] netlink: 'syz.0.2110': attribute type 29 has an invalid length.
[  166.861156][T13363] netlink: 'syz.2.2109': attribute type 1 has an invalid length.
[  166.881515][T13365] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2110'.
[  166.882200][T13363] bond28: (slave vxcan3): The slave device specified does not support setting the MAC address
[  166.889280][T13363] bond28: (slave vxcan3): Error -95 calling set_mac_address
[  166.939885][T13373] macvlan2: entered promiscuous mode
[  166.941698][T13373] macvlan2: entered allmulticast mode
[  166.944792][T13373] bond28: entered promiscuous mode
[  166.950521][T13373] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  166.958071][T13373] bond28: left promiscuous mode
[  167.052904][T13381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2116'.
[  167.198725][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2119'.
[  167.208858][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2122'.
[  167.254346][T13402] netlink: 'syz.0.2122': attribute type 9 has an invalid length.
[  167.317855][T13413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2125'.
[  167.414981][T13427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2129'.
[  167.453002][T13427] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2129'.
[  167.540130][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'.
[  167.652450][T13431] vlan0: entered promiscuous mode
[  167.657938][T13431] team0: Port device vlan0 added
[  167.877468][T13448] netlink: 'syz.2.2135': attribute type 10 has an invalid length.
[  167.880138][T13448] batadv0: entered promiscuous mode
[  167.881981][T13448] batadv0: entered allmulticast mode
[  167.884316][T13448] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  168.103646][T13464] netlink: 'syz.0.2139': attribute type 1 has an invalid length.
[  168.317710][T13492] netlink: 'syz.0.2146': attribute type 9 has an invalid length.
[  168.687438][T13537] siw: device registration error -23
[  169.180773][T13539] 8021q: adding VLAN 0 to HW filter on device bond35
[  169.183935][T13539] bond35: entered promiscuous mode
[  169.187369][T13539] bond0: (slave bond35): Enslaving as an active interface with a down link
[  169.213126][T13542] netlink: 'syz.0.2158': attribute type 1 has an invalid length.
[  169.227345][T13542] 8021q: adding VLAN 0 to HW filter on device bond36
[  169.239155][T13542] bond36: (slave gretap4): making interface the new active one
[  169.243875][T13542] bond36: (slave gretap4): Enslaving as an active interface with an up link
[  169.262065][T13542] syz.0.2158 (13542) used greatest stack depth: 18232 bytes left
[  169.279319][T13545] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  169.398199][T13556] IPv6: sit1: Disabled Multicast RS
[  169.400372][T13556] sit1: entered allmulticast mode
[  169.401825][T13557] netlink: 'syz.1.2163': attribute type 1 has an invalid length.
[  169.657435][T13566] bond29: (slave vti0): The slave device specified does not support setting the MAC address
[  169.661785][T13566] bond29: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  169.670365][T13566] bond29: (slave vti0): making interface the new active one
[  169.674179][T13566] bond29: (slave vti0): Enslaving as an active interface with an up link
[  169.796700][T13575] batman_adv: batadv0: Adding interface: team0
[  169.798945][T13575] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  169.803457][T13575] team0: entered promiscuous mode
[  169.808875][T13575] 8021q: adding VLAN 0 to HW filter on device team0
[  169.811334][T13575] batman_adv: batadv0: Interface activated: team0
[  169.813535][T13575] batman_adv: batadv0: Interface deactivated: team0
[  169.816987][T13575] batman_adv: batadv0: Removing interface: team0
[  169.848631][T13580] veth1_to_bond: entered allmulticast mode
[  169.851190][T13580] bond_slave_1: entered promiscuous mode
[  169.866003][T13584] bond_slave_1: left promiscuous mode
[  169.868284][T13584] veth1_to_bond: left allmulticast mode
[  169.956737][T13588] xt_TCPMSS: Only works on TCP SYN packets
[  170.185272][T13465] Bluetooth: hci0: command 0x0c20 tx timeout
[  170.186066][ T5221] Bluetooth: hci1: command 0x0406 tx timeout
[  170.854717][T13643] x_tables: duplicate underflow at hook 3
[  170.909459][T13647] team0: Port device bond0 removed
[  170.916202][T13647] bond0: (slave batadv0): Releasing backup interface
[  170.931742][T13647] bond22: (slave batadv_slave_1): Releasing active interface
[  170.942749][T13647] team0: Port device geneve0 removed
[  170.950618][T13647] bond24: (slave veth35): Releasing active interface
[  170.954221][T13647] bond25: left allmulticast mode
[  170.958335][T13647] bond25: left promiscuous mode
[  170.960335][T13647] bridge0: port 2(bond25) entered disabled state
[  170.963782][T13647] bond26: left allmulticast mode
[  170.968022][T13647] bond26: left promiscuous mode
[  170.970402][T13647] bridge0: port 3(bond26) entered disabled state
[  170.979641][T13647] bond31: left allmulticast mode
[  170.981393][T13647] bond31: left promiscuous mode
[  170.983303][T13647] bridge0: port 1(bond31) entered disabled state
[  170.998283][T13647] bond33: (slave gretap5): Releasing active interface
[  171.010967][T13647] bond34: (slave bridge7): Releasing active interface
[  171.028404][T13647] bond37: left allmulticast mode
[  171.030066][T13647] bond37: left promiscuous mode
[  171.031738][T13647] bridge0: port 4(bond37) entered disabled state
[  171.189964][T13664] 8021q: adding VLAN 0 to HW filter on device bond37
[  171.230909][T13664] veth31: entered promiscuous mode
[  171.234611][T13664] bond37: (slave veth31): Enslaving as a backup interface with a down link
[  171.400816][T13684] 8021q: adding VLAN 0 to HW filter on device bond38
[  171.432231][T13684] veth39: entered promiscuous mode
[  171.438746][T13684] bond38: (slave veth39): Enslaving as a backup interface with a down link
[  171.628163][T13711] 8021q: adding VLAN 0 to HW filter on device bond39
[  171.704273][T13722] 8021q: adding VLAN 0 to HW filter on device bond40
[  171.981395][T13754] sctp: [Deprecated]: syz.1.2220 (pid 13754) Use of struct sctp_assoc_value in delayed_ack socket option.
[  171.981395][T13754] Use struct sctp_sack_info instead
[  172.034252][T13763] __nla_validate_parse: 19 callbacks suppressed
[  172.034260][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'.
[  172.069568][T13771] validate_nla: 8 callbacks suppressed
[  172.069596][T13771] netlink: 'syz.1.2224': attribute type 10 has an invalid length.
[  172.075336][T13771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2224'.
[  172.081226][T13771] team0: Port device geneve0 added
[  172.711029][T13825] syzkaller1: entered promiscuous mode
[  172.713147][T13825] syzkaller1: entered allmulticast mode
[  172.868173][T13836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2243'.
[  172.880077][T13838] netlink: 'syz.0.2244': attribute type 1 has an invalid length.
[  172.884859][T13838] workqueue: Failed to create a rescuer kthread for wq "bond38": -EINTR
[  172.886274][T13836] netlink: 'syz.2.2243': attribute type 10 has an invalid length.
[  172.891616][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2243'.
[  172.904298][T13836] geneve0: entered promiscuous mode
[  172.907730][T13836] team0: Port device geneve0 added
[  173.110029][T13861] bond34: (slave erspan0): Releasing active interface
[  173.123054][T13861] bond34: (slave veth29): Releasing active interface
[  173.137003][T13861] bond0: (slave bond35): Releasing backup interface
[  173.139640][T13861] bond35: left promiscuous mode
[  173.143895][T13861] bond36: (slave gretap4): Releasing active interface
[  173.154124][T13861] bond37: (slave veth31): Releasing backup interface
[  173.159424][T13872] netlink: 'syz.0.2249': attribute type 10 has an invalid length.
[  173.175852][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2251'.
[  173.184898][T13873] geneve3: entered promiscuous mode
[  173.190089][T13869] netlink: 4256 bytes leftover after parsing attributes in process `syz.2.2251'.
[  173.208316][T13869] netlink: 'syz.2.2251': attribute type 10 has an invalid length.
[  173.211950][T13869] team0: left promiscuous mode
[  173.214330][T13869] geneve0: left promiscuous mode
[  173.230133][T13869] 8021q: adding VLAN 0 to HW filter on device team0
[  173.236075][T13869] team0: entered promiscuous mode
[  173.238020][T13869] geneve0: entered promiscuous mode
[  173.240056][T13869] team0: entered allmulticast mode
[  173.241818][T13869] vlan0: entered allmulticast mode
[  173.243581][T13869] veth0_vlan: entered allmulticast mode
[  173.245730][T13869] geneve0: entered allmulticast mode
[  173.311519][T13877] sctp: [Deprecated]: syz.2.2253 (pid 13877) Use of int in maxseg socket option.
[  173.311519][T13877] Use struct sctp_assoc_value instead
[  173.317059][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'.
[  173.328497][T13875] macvlan2: entered allmulticast mode
[  173.330854][T13875] veth1_vlan: entered allmulticast mode
[  173.414159][T13880] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  173.418369][T13880] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  173.902322][T13914] netlink: 'syz.2.2267': attribute type 2 has an invalid length.
[  173.905091][T13914] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2267'.
[  174.075584][T13926] netlink: 'syz.0.2271': attribute type 1 has an invalid length.
[  174.100951][T13926] 8021q: adding VLAN 0 to HW filter on device bond39
[  174.344067][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2277'.
[  174.428522][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2277'.
[  174.586523][T13967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.589049][T13967] IPv6: NLM_F_CREATE should be set when creating new route
[  174.591585][T13972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.620898][T13982] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  174.764736][T13997] hsr0 speed is unknown, defaulting to 1000
[  174.776161][T13997] lo speed is unknown, defaulting to 1000
[  174.921866][T13997] lo speed is unknown, defaulting to 1000
[  174.924130][T14010] netlink: 'syz.0.2293': attribute type 1 has an invalid length.
[  174.992520][T14010] bond40: entered promiscuous mode
[  174.994383][T14010] 8021q: adding VLAN 0 to HW filter on device bond40
[  175.081740][T14026] netlink: 'syz.0.2297': attribute type 1 has an invalid length.
[  175.104933][T14026] 8021q: adding VLAN 0 to HW filter on device bond41
[  175.110552][T14029] netlink: 'syz.0.2297': attribute type 1 has an invalid length.
[  175.132217][T14032] 8021q: adding VLAN 0 to HW filter on device bond30
[  175.237761][T14046] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  175.419172][T14057] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  175.881327][T14097] syzkaller1: entered promiscuous mode
[  175.883164][T14097] syzkaller1: entered allmulticast mode
[  176.034723][T14109] 8021q: adding VLAN 0 to HW filter on device bond42
[  176.048928][T14112] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000
[  176.056222][T14109] vlan1: entered promiscuous mode
[  176.057880][T14109] bond42: entered promiscuous mode
[  176.059696][T14109] vlan1: entered allmulticast mode
[  176.061328][T14109] bond42: entered allmulticast mode
[  176.103635][T14118] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  176.118608][T14118] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  176.121634][T14118] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  176.489676][T14147] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  176.507316][T14147] vlan0: left allmulticast mode
[  176.508923][T14147] veth0_vlan: left allmulticast mode
[  176.512982][T14147] team0: Port device vlan0 removed
[  176.518883][T14147] geneve0: left promiscuous mode
[  176.520575][T14147] geneve0: left allmulticast mode
[  176.524643][T14147] team0: Port device geneve0 removed
[  176.538539][T14147] team0: Port device bridge13 removed
[  176.541041][T14147] bond29: (slave vti0): Releasing backup interface
[  176.555397][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  176.560548][T14147] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  176.563753][T14147] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  176.730433][T14163] bpq0: entered promiscuous mode
[  176.733334][T14163] bpq0: left promiscuous mode
[  176.833016][T14176] tipc: Started in network mode
[  176.834636][T14176] tipc: Node identity 165764ee5319, cluster identity 4711
[  176.837622][T14176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.839911][T14177] syzkaller0: entered promiscuous mode
[  176.841649][T14177] syzkaller0: entered allmulticast mode
[  176.850858][T14178] tipc: Resetting bearer <eth:syzkaller0>
[  176.862928][T14175] tipc: Resetting bearer <eth:syzkaller0>
[  176.873329][T14175] tipc: Disabling bearer <eth:syzkaller0>
[  177.192092][T14188] validate_nla: 4 callbacks suppressed
[  177.192105][T14188] netlink: 'syz.0.2347': attribute type 1 has an invalid length.
[  177.197004][T14188] __nla_validate_parse: 17 callbacks suppressed
[  177.197012][T14188] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2347'.
[  177.234076][T14192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.237124][T14190] syzkaller0: entered promiscuous mode
[  177.239144][T14190] syzkaller0: entered allmulticast mode
[  177.250104][T14190] tipc: Resetting bearer <eth:syzkaller0>
[  177.260338][T14190] tipc: Disabling bearer <eth:syzkaller0>
[  177.305278][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  177.401137][T14208] siw: device registration error -23
[  177.568715][T14218] delete_channel: no stack
[  177.792812][T14227] netlink: 'syz.2.2357': attribute type 23 has an invalid length.
[  178.217237][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'.
[  178.220789][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'.
[  178.233875][T14251] hsr0 speed is unknown, defaulting to 1000
[  178.239489][T14251] lo speed is unknown, defaulting to 1000
[  178.328670][T14251] lo speed is unknown, defaulting to 1000
[  178.386518][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'.
[  178.389629][T14256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2362'.
[  178.542844][T14263] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2365'.
[  178.572449][T14265] netlink: 'syz.0.2366': attribute type 4 has an invalid length.
[  178.668516][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'.
[  178.689017][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2369'.
[  178.692033][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2369'.
[  178.709896][T14275] 8021q: adding VLAN 0 to HW filter on device bond43
[  178.726139][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'.
[  178.754407][T14275] macvlan3: entered promiscuous mode
[  178.759314][T14275] macvlan3: entered allmulticast mode
[  178.761787][T14275] bond43: entered promiscuous mode
[  178.763887][T14275] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  178.779758][T14275] bond43: left promiscuous mode
[  179.398700][T14351] hsr0 speed is unknown, defaulting to 1000
[  179.401400][T14351] lo speed is unknown, defaulting to 1000
[  179.523094][T14351] lo speed is unknown, defaulting to 1000
[  179.524248][T14356] hsr0 speed is unknown, defaulting to 1000
[  179.530847][T14356] lo speed is unknown, defaulting to 1000
[  179.571012][T14359] bridge: RTM_NEWNEIGH with invalid state 0x1
[  179.611506][T14359] vlan6: entered promiscuous mode
[  179.732257][T14356] lo speed is unknown, defaulting to 1000
[  180.005800][T14375] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  180.441539][T14411] hsr0 speed is unknown, defaulting to 1000
[  180.449665][T14411] lo speed is unknown, defaulting to 1000
[  180.640052][T14411] lo speed is unknown, defaulting to 1000
[  180.846684][T14433] syzkaller1: entered promiscuous mode
[  180.848553][T14433] syzkaller1: entered allmulticast mode
[  180.864837][T14433] netlink: 'syz.0.2417': attribute type 1 has an invalid length.
[  180.911318][T14433] openvswitch: netlink: IP tunnel dst address not specified
[  180.930747][T14433] veth33: entered promiscuous mode
[  180.934167][T14433] bond44: (slave veth33): Enslaving as a backup interface with a down link
[  180.956546][T14433] 8021q: adding VLAN 0 to HW filter on device bond44
[  181.177566][T14436] syzkaller0: entered promiscuous mode
[  181.179413][T14436] syzkaller0: entered allmulticast mode
[  181.182150][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.189331][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.314813][T14456] __nla_validate_parse: 8 callbacks suppressed
[  182.314823][T14456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2425'.
[  182.331998][T14460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2427'.
[  182.336621][T14460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2427'.
[  182.339559][T14460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2427'.
[  182.355125][T14460] netlink: 'syz.1.2427': attribute type 1 has an invalid length.
[  182.469233][T14476] netlink: 'syz.1.2433': attribute type 10 has an invalid length.
[  182.472611][T14476] batman_adv: batadv0: Adding interface: team0
[  182.474659][T14476] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.484067][T14476] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  182.492606][T14476] netlink: 'syz.1.2433': attribute type 10 has an invalid length.
[  182.495950][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2432'.
[  182.498816][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2432'.
[  182.501129][T14476] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2433'.
[  182.505977][T14476] team0: entered promiscuous mode
[  182.507669][T14476] geneve0: entered promiscuous mode
[  182.510378][T14476] 8021q: adding VLAN 0 to HW filter on device team0
[  182.512757][T14476] batman_adv: batadv0: Interface activated: team0
[  182.514916][T14476] batman_adv: batadv0: Interface deactivated: team0
[  182.517770][T14476] batman_adv: batadv0: Removing interface: team0
[  182.520309][T14476] bridge0: port 1(team0) entered blocking state
[  182.523039][T14476] bridge0: port 1(team0) entered disabled state
[  182.525808][T14476] team0: entered allmulticast mode
[  182.527565][T14476] geneve0: entered allmulticast mode
[  182.530595][T14476] bridge0: port 1(team0) entered blocking state
[  182.532703][T14476] bridge0: port 1(team0) entered forwarding state
[  182.579491][T14484] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  182.583966][T14487] openvswitch: netlink: Multiple metadata blocks provided
[  182.614545][T14491] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2440'.
[  182.622805][T14491] netlink: 'syz.2.2440': attribute type 10 has an invalid length.
[  182.704458][T14506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2445'.
[  182.776421][T14519] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  182.798176][T14523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2448'.
[  182.835950][T14528] netlink: 'syz.2.2450': attribute type 1 has an invalid length.
[  182.860831][T14528] 8021q: adding VLAN 0 to HW filter on device bond31
[  182.887962][T14533] netlink: 'syz.0.2451': attribute type 9 has an invalid length.
[  182.908270][T14526] netlink: 'syz.1.2449': attribute type 4 has an invalid length.
[  182.918026][    T9] lo speed is unknown, defaulting to 1000
[  182.920384][    T9] syz1: Port: 1 Link DOWN
[  182.928117][T14526] netlink: 'syz.1.2449': attribute type 4 has an invalid length.
[  182.949566][    T9] lo speed is unknown, defaulting to 1000
[  182.952003][    T9] syz1: Port: 1 Link ACTIVE
[  182.962114][T14526] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  182.992580][T14539] x_tables: duplicate underflow at hook 3
[  183.210919][T14553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.219167][T14553] siw: device registration error -23
[  183.902326][T14570] netlink: 'syz.0.2461': attribute type 10 has an invalid length.
[  183.907685][T14570] team0: Port device geneve0 added
[  183.954850][T14572] syzkaller1: tun_chr_ioctl cmd 1074025672
[  183.957089][T14572] syzkaller1: ignored: set checksum disabled
[  184.022239][T14582] siw: device registration error -23
[  184.101969][T14593] netlink: 'syz.2.2468': attribute type 1 has an invalid length.
[  184.134521][T14600] 8021q: adding VLAN 0 to HW filter on device bond41
[  184.158072][T14600] bond41: (slave veth43): Enslaving as an active interface with a down link
[  184.585617][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  184.858782][T14676] erspan0: left allmulticast mode
[  184.874470][T14676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.946410][T14686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.967921][T14686] tap0: tun_chr_ioctl cmd 1074025678
[  184.969684][T14686] tap0: group set to 0
[  185.167946][T14717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.171052][T14717] syzkaller0: entered promiscuous mode
[  185.173326][T14717] syzkaller0: entered allmulticast mode
[  185.194983][T14717] tipc: Resetting bearer <eth:syzkaller0>
[  185.217699][T14717] tipc: Resetting bearer <eth:syzkaller0>
[  185.229172][T14717] tipc: Disabling bearer <eth:syzkaller0>
[  185.387781][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  186.152351][T14766] hsr0 speed is unknown, defaulting to 1000
[  186.160514][T14766] lo speed is unknown, defaulting to 1000
[  186.300057][T14766] lo speed is unknown, defaulting to 1000
[  186.496576][T14794] gtp1: entered promiscuous mode
[  186.501686][T14794] gtp1: entered allmulticast mode
[  186.504830][T14794] team0: Port device gtp1 added
[  186.627533][T14801] syzkaller1: entered promiscuous mode
[  186.629385][T14801] syzkaller1: entered allmulticast mode
[  187.278315][T14861] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  187.390373][T14872] validate_nla: 7 callbacks suppressed
[  187.390382][T14872] netlink: 'syz.0.2540': attribute type 1 has an invalid length.
[  187.412037][T14872] 8021q: adding VLAN 0 to HW filter on device bond45
[  187.429668][T14872] __nla_validate_parse: 26 callbacks suppressed
[  187.429677][T14872] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2540'.
[  187.525529][T14885] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  187.528224][T14885] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  187.702463][T14900] netlink: 'syz.0.2542': attribute type 16 has an invalid length.
[  187.724532][T14900] netlink: 'syz.0.2542': attribute type 17 has an invalid length.
[  187.766349][T14900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.119956][T14930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2551'.
[  188.139060][T14932] bridge0: port 2(gretap0) entered blocking state
[  188.141307][T14932] bridge0: port 2(gretap0) entered disabled state
[  188.143437][T14932] gretap0: entered allmulticast mode
[  188.144630][T14930] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2551'.
[  188.147815][T14932] gretap0: entered promiscuous mode
[  188.150734][T14932] bridge0: port 2(gretap0) entered blocking state
[  188.152880][T14932] bridge0: port 2(gretap0) entered forwarding state
[  188.302412][T14945] smc: net device bond0 applied user defined pnetid SYZ2
[  188.305982][T14945] smc: net device bond0 erased user defined pnetid SYZ2
[  188.311541][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'.
[  188.318706][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'.
[  188.330622][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'.
[  188.335655][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'.
[  188.340583][T14948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'.
[  188.343585][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'.
[  188.416346][T14956] 8021q: adding VLAN 0 to HW filter on device bond42
[  188.418922][T14959] hsr0 speed is unknown, defaulting to 1000
[  188.422654][T14959] hsr0 speed is unknown, defaulting to 1000
[  188.446024][ T1024] bridge0: port 1(team0) entered disabled state
[  188.485707][T14969] xt_bpf: check failed: parse error
[  188.522068][T14971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2565'.
[  188.647249][T14987] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  188.672988][T14989] netlink: 'syz.2.2572': attribute type 1 has an invalid length.
[  188.753074][T15005] netlink: 'syz.0.2579': attribute type 1 has an invalid length.
[  188.796084][T15009] bridge0: entered promiscuous mode
[  188.798037][T15006] bridge0: left promiscuous mode
[  188.980191][T15008] netlink: 'syz.0.2581': attribute type 21 has an invalid length.
[  188.982766][T15008] netlink: 'syz.0.2581': attribute type 1 has an invalid length.
[  189.160962][T15060] netlink: 'syz.1.2594': attribute type 1 has an invalid length.
[  189.247440][T15072] IPv4: Oversized IP packet from 127.202.26.0
[  189.335490][T15080] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  189.390236][T15076] hsr0 speed is unknown, defaulting to 1000
[  189.397363][T15076] lo speed is unknown, defaulting to 1000
[  189.506505][T15076] lo speed is unknown, defaulting to 1000
[  190.154529][T15100] netlink: 'syz.0.2604': attribute type 1 has an invalid length.
[  190.194164][T15103] netlink: 'syz.0.2604': attribute type 1 has an invalid length.
[  190.650842][T15147] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.665403][T15147] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.707098][T15153] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.709777][T15153] batadv0: entered promiscuous mode
[  190.711523][T15153] batadv0: entered allmulticast mode
[  190.733139][T15153] team0: Failed to send port change of device batadv0 via netlink (err -105)
[  190.745527][T15153] team0: Failed to send options change via netlink (err -105)
[  190.748257][T15153] team0: Port device batadv0 added
[  190.759470][T15147] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.765783][T15147] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.792738][   T40] bridge0: port 1(team0) entered blocking state
[  190.794943][   T40] bridge0: port 1(team0) entered forwarding state
[  190.832106][T15147] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.835615][T15147] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.880028][T15147] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.884828][T15147] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.967667][ T9544] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.970410][ T9544] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.981465][ T9544] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.986020][ T9544] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.993983][ T9544] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.997744][ T9544] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.007024][ T9544] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  191.012173][ T9544] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.016304][T15178] 8021q: VLANs not supported on lo
[  191.207983][ T9544] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  191.211055][ T9544] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  191.612231][T15233] openvswitch: netlink: Multiple metadata blocks provided
[  191.661737][T15235] veth44: entered promiscuous mode
[  191.668123][T15235] veth45: entered promiscuous mode
[  191.809928][T15255] hsr0 speed is unknown, defaulting to 1000
[  191.812656][T15255] lo speed is unknown, defaulting to 1000
[  191.930672][T15255] lo speed is unknown, defaulting to 1000
[  192.016689][T15266] hsr0 speed is unknown, defaulting to 1000
[  192.019531][T15266] lo speed is unknown, defaulting to 1000
[  192.124603][T15266] lo speed is unknown, defaulting to 1000
[  192.668706][T15294] validate_nla: 6 callbacks suppressed
[  192.668716][T15294] netlink: 'syz.0.2664': attribute type 1 has an invalid length.
[  192.674358][T15294] __nla_validate_parse: 28 callbacks suppressed
[  192.674364][T15294] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2664'.
[  192.682736][T15294] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2664'.
[  192.719741][T15296] netlink: 'syz.0.2665': attribute type 1 has an invalid length.
[  192.722406][T15296] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2665'.
[  192.732474][T15296] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2665'.
[  192.778003][T15301] macvlan0: entered allmulticast mode
[  192.780011][T15301] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2667'.
[  193.145379][   T55] Bluetooth: hci2: command 0x040f tx timeout
[  193.547248][T15330] netlink: 'syz.0.2679': attribute type 1 has an invalid length.
[  193.549982][T15331] netlink: 'syz.0.2679': attribute type 1 has an invalid length.
[  193.572460][T15331] bond46: (slave bridge15): making interface the new active one
[  193.579201][T15331] bond46: (slave bridge15): Enslaving as an active interface with an up link
[  193.592548][T15330] bond46: (slave bridge16): Enslaving as an active interface with a down link
[  193.705149][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  193.709489][ T1360] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  193.722237][T15339] netlink: 'syz.0.2682': attribute type 4 has an invalid length.
[  193.771358][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.773968][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.782884][T15356] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.788245][T15356] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.839009][T15356] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.842458][T15356] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.889374][T15356] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.892562][T15356] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.929042][T15356] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  193.932510][T15356] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.992648][ T8443] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  193.995613][ T8443] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.003283][ T8443] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  194.009057][ T8443] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.018005][ T8443] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  194.020672][ T8443] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.028680][ T8443] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  194.031428][ T8443] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.104256][T15361] netlink: 'syz.2.2688': attribute type 1 has an invalid length.
[  194.107514][T15362] netlink: 'syz.2.2688': attribute type 1 has an invalid length.
[  194.124960][T15361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2688'.
[  194.129729][T15361] 8021q: adding VLAN 0 to HW filter on device bond34
[  194.351920][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2694'.
[  194.354710][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2694'.
[  194.542115][T15403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2699'.
[  194.558587][T15407] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2700'.
[  194.562980][T15402] hsr0 speed is unknown, defaulting to 1000
[  194.568865][T15402] lo speed is unknown, defaulting to 1000
[  194.676144][T15402] lo speed is unknown, defaulting to 1000
[  194.971646][T15428] team0: Device is already in use.
[  195.123342][T15430] hsr0 speed is unknown, defaulting to 1000
[  195.128573][T15430] lo speed is unknown, defaulting to 1000
[  195.222901][T15430] lo speed is unknown, defaulting to 1000
[  195.413722][T15443] netlink: 'syz.1.2712': attribute type 10 has an invalid length.
[  195.427732][T15443] bridge0: port 3(dummy0) entered blocking state
[  195.429959][T15443] bridge0: port 3(dummy0) entered disabled state
[  195.432202][T15443] dummy0: entered allmulticast mode
[  195.438822][T15443] bridge0: port 3(dummy0) entered blocking state
[  195.440981][T15443] bridge0: port 3(dummy0) entered forwarding state
[  195.632605][T15460] hsr0 speed is unknown, defaulting to 1000
[  195.667052][T15463] xt_CT: You must specify a L4 protocol and not use inversions on it
[  195.669451][T15460] lo speed is unknown, defaulting to 1000
[  195.796593][T15460] lo speed is unknown, defaulting to 1000
[  195.984232][T15476] netlink: 'syz.0.2719': attribute type 1 has an invalid length.
[  196.019045][T15476] 8021q: adding VLAN 0 to HW filter on device bond47
[  196.052208][T15476] 8021q: adding VLAN 0 to HW filter on device bond47
[  196.054547][T15476] bond47: (slave vxcan3): The slave device specified does not support setting the MAC address
[  196.059374][T15476] bond47: (slave vxcan3): Error -95 calling set_mac_address
[  196.138832][T15486] veth35: entered promiscuous mode
[  196.142083][T15486] bond47: (slave veth35): Enslaving as an active interface with a down link
[  196.165373][T15476] erspan0: entered allmulticast mode
[  196.171031][T15476] bond47: (slave erspan0): making interface the new active one
[  196.173873][T15476] bond47: (slave erspan0): Enslaving as an active interface with an up link
[  196.238013][T15495] netlink: 'syz.0.2725': attribute type 1 has an invalid length.
[  196.262606][T15495] 8021q: adding VLAN 0 to HW filter on device bond48
[  196.273170][   T33] audit: type=1804 audit(1753327942.172:3): pid=15495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2725" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=4637 res=1 errno=0
[  196.283668][   T33] audit: type=1800 audit(1753327942.172:4): pid=15495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2725" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=4637 res=0 errno=0
[  196.336694][T15498] hsr0 speed is unknown, defaulting to 1000
[  196.339489][T15498] lo speed is unknown, defaulting to 1000
[  196.456948][T15498] lo speed is unknown, defaulting to 1000
[  196.552296][T15511] batadv_slave_1: entered promiscuous mode
[  196.852464][T15534] veth37: entered promiscuous mode
[  196.857451][T15534] bond50: (slave veth37): Enslaving as a backup interface with a down link
[  196.863190][T15534] 8021q: adding VLAN 0 to HW filter on device bond50
[  197.401535][T15556] 8021q: adding VLAN 0 to HW filter on device bond44
[  197.466442][T15556] 8021q: adding VLAN 0 to HW filter on device bond44
[  197.469025][T15556] bond44: (slave vxcan5): The slave device specified does not support setting the MAC address
[  197.473372][T15556] bond44: (slave vxcan5): Error -95 calling set_mac_address
[  198.076524][T15585] validate_nla: 2 callbacks suppressed
[  198.076534][T15585] netlink: 'syz.1.2753': attribute type 8 has an invalid length.
[  198.152162][T15595] netlink: 'syz.1.2756': attribute type 1 has an invalid length.
[  198.167171][T15595] 8021q: adding VLAN 0 to HW filter on device bond45
[  198.196015][T15595] bond45: (slave ip6gretap2): making interface the new active one
[  198.199606][T15595] bond45: (slave ip6gretap2): Enslaving as an active interface with an up link
[  198.214238][T15595] veth49: entered promiscuous mode
[  198.220235][T15595] bond45: (slave veth49): Enslaving as an active interface with a down link
[  198.239237][T15601] 8021q: adding VLAN 0 to HW filter on device bond51
[  198.241777][T15601] bridge0: port 1(bond51) entered blocking state
[  198.243963][T15601] bridge0: port 1(bond51) entered disabled state
[  198.246632][T15601] bond51: entered allmulticast mode
[  198.250815][T15595] erspan0: entered allmulticast mode
[  198.257149][T15595] bond45: (slave erspan0): Enslaving as an active interface with an up link
[  198.261002][T15601] __nla_validate_parse: 16 callbacks suppressed
[  198.261010][T15601] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2758'.
[  198.270450][T15601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2758'.
[  198.273978][T15601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2758'.
[  198.309668][T15606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.324702][T15606] veth0_to_team: left promiscuous mode
[  198.330836][T15606] batadv_slave_1: left promiscuous mode
[  198.336352][T15606] vlan0: left promiscuous mode
[  198.339516][T15606] vlan2: left promiscuous mode
[  198.342887][T15606] veth7: left promiscuous mode
[  198.344644][T15606] bond5: left promiscuous mode
[  198.349669][T15606] veth11: left promiscuous mode
[  198.352970][T15606] vlan5: left promiscuous mode
[  198.354540][T15606] bond8: left promiscuous mode
[  198.359295][T15606] gretap4: left promiscuous mode
[  198.361316][T15606] bond16: left promiscuous mode
[  198.363950][T15606] veth29: left promiscuous mode
[  198.371218][T15606] bond28: left promiscuous mode
[  198.376142][T15606] veth39: left promiscuous mode
[  198.381065][T15606] veth44: left promiscuous mode
[  198.382680][T15606] veth45: left promiscuous mode
[  198.385363][T15606] veth49: left promiscuous mode
[  198.452981][T15615] gretap0: left allmulticast mode
[  198.454640][T15615] gretap0: left promiscuous mode
[  198.458127][T15615] bridge0: port 2(gretap0) entered disabled state
[  198.462831][T15615] bond45: (slave erspan0): Releasing active interface
[  198.465489][T15615] ip6gretap2: entered promiscuous mode
[  198.472407][T15615] team0: left allmulticast mode
[  198.474077][T15615] geneve0: left allmulticast mode
[  198.476698][T15615] batadv0: left allmulticast mode
[  198.478457][T15615] team0: left promiscuous mode
[  198.479983][T15615] geneve0: left promiscuous mode
[  198.481697][T15615] batadv0: left promiscuous mode
[  198.483533][T15615] bridge0: port 1(team0) entered disabled state
[  198.487823][T15615] dummy0: left allmulticast mode
[  198.489654][T15615] dummy0: left promiscuous mode
[  198.491543][T15615] bridge0: port 3(dummy0) entered disabled state
[  198.499796][T15615] team0: Port device geneve0 removed
[  198.510134][T15615] bond38: (slave veth39): Releasing backup interface
[  198.524021][T15615] bond41: (slave veth43): Releasing active interface
[  198.541070][T15615] team0: Port device batadv0 removed
[  198.543838][T15615] bond45: (slave ip6gretap2): Releasing active interface
[  198.547076][T15615] bond45: (slave ip6gretap2): the permanent HWaddr of slave - 8a:1d:92:b5:d3:46 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  198.552576][T15615] ip6gretap2: left promiscuous mode
[  198.558768][T15615] bond45: (slave veth49): Releasing active interface
[  198.963439][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'.
[  199.061314][T15667] netlink: 'syz.0.2780': attribute type 1 has an invalid length.
[  199.080994][T15667] 8021q: adding VLAN 0 to HW filter on device bond52
[  199.105899][T15667] 8021q: adding VLAN 0 to HW filter on device bond52
[  199.108299][T15667] bond52: (slave vxcan3): The slave device specified does not support setting the MAC address
[  199.112424][T15667] bond52: (slave vxcan3): Error -95 calling set_mac_address
[  199.145338][ T5830] Bluetooth: hci2: command 0x040f tx timeout
[  199.154073][T15669] veth39: entered promiscuous mode
[  199.158125][T15669] bond52: (slave veth39): Enslaving as an active interface with a down link
[  199.202029][T15667] netlink: 'syz.0.2780': attribute type 11 has an invalid length.
[  199.261533][T15679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2783'.
[  199.304644][T15679] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2783'.
[  199.631036][T15705] hsr0 speed is unknown, defaulting to 1000
[  199.633626][T15705] lo speed is unknown, defaulting to 1000
[  199.646620][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2790'.
[  199.649656][T15707] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  199.669238][T15709] netlink: 'syz.1.2791': attribute type 1 has an invalid length.
[  199.678586][T15707] veth41: entered promiscuous mode
[  199.703473][T15709] 8021q: adding VLAN 0 to HW filter on device bond46
[  199.729487][T15709] 8021q: adding VLAN 0 to HW filter on device bond46
[  199.731943][T15709] bond46: (slave vxcan5): The slave device specified does not support setting the MAC address
[  199.736890][T15709] bond46: (slave vxcan5): Error -95 calling set_mac_address
[  199.748542][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'.
[  199.757577][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2792'.
[  199.762900][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2792'.
[  199.767437][T15710] hsr0 speed is unknown, defaulting to 1000
[  199.771417][T15710] lo speed is unknown, defaulting to 1000
[  199.782198][T15715] macvlan4: entered promiscuous mode
[  199.783950][T15715] macvlan4: entered allmulticast mode
[  199.786904][T15715] bond46: entered promiscuous mode
[  199.789859][T15715] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  199.803408][T15715] bond46: left promiscuous mode
[  199.820420][T15705] lo speed is unknown, defaulting to 1000
[  199.851044][T15713] can: request_module (can-proto-3) failed.
[  200.018122][T15710] lo speed is unknown, defaulting to 1000
[  200.257074][T15740] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.260250][T15740] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.339875][T15740] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.343003][T15740] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.400404][T15740] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.405326][T15740] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.453519][T15740] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.456837][T15740] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.524374][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  200.530475][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.562767][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  200.575226][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.593008][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  200.605220][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.614466][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  200.621654][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.627894][T15744] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  200.631060][T15744] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.638929][T15758] netlink: 'syz.0.2802': attribute type 3 has an invalid length.
[  200.644277][   T12] ==================================================================
[  200.646802][   T12] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80
[  200.649119][   T12] Read of size 8 at addr ffff88811248e2b0 by task kworker/u8:0/12
[  200.651992][   T12] 
[  200.653047][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  200.653057][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.653062][   T12] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  200.653073][   T12] Call Trace:
[  200.653077][   T12]  <TASK>
[  200.653080][   T12]  dump_stack_lvl+0x189/0x250
[  200.653089][   T12]  ? __kasan_check_byte+0x12/0x40
[  200.653100][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.653108][   T12]  ? lock_release+0x4b/0x3e0
[  200.653116][   T12]  ? __virt_addr_valid+0x4a5/0x5c0
[  200.653125][   T12]  print_report+0xca/0x230
[  200.653131][   T12]  ? __mutex_lock+0x144/0xe80
[  200.653138][   T12]  kasan_report+0x118/0x150
[  200.653146][   T12]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  200.653156][   T12]  ? __mutex_lock+0x144/0xe80
[  200.653164][   T12]  __mutex_lock+0x144/0xe80
[  200.653171][   T12]  ? __mutex_lock+0x51b/0xe80
[  200.653178][   T12]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  200.653185][   T12]  ? __pfx___mutex_lock+0x10/0x10
[  200.653193][   T12]  ? __lock_acquire+0xab9/0xd20
[  200.653201][   T12]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  200.653209][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  200.653217][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  200.653224][   T12]  process_scheduled_works+0xae1/0x17b0
[  200.653236][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  200.653246][   T12]  worker_thread+0x8a0/0xda0
[  200.653258][   T12]  kthread+0x711/0x8a0
[  200.653267][   T12]  ? __pfx_worker_thread+0x10/0x10
[  200.653274][   T12]  ? __pfx_kthread+0x10/0x10
[  200.653283][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  200.653292][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.653298][   T12]  ? __pfx_kthread+0x10/0x10
[  200.653307][   T12]  ret_from_fork+0x3fc/0x770
[  200.653314][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  200.653322][   T12]  ? __switch_to_asm+0x39/0x70
[  200.653329][   T12]  ? __switch_to_asm+0x33/0x70
[  200.653337][   T12]  ? __pfx_kthread+0x10/0x10
[  200.653346][   T12]  ret_from_fork_asm+0x1a/0x30
[  200.653357][   T12]  </TASK>
[  200.653359][   T12] 
[  200.718176][   T12] Allocated by task 15740:
[  200.719592][   T12]  kasan_save_track+0x3e/0x80
[  200.721067][   T12]  __kasan_kmalloc+0x93/0xb0
[  200.722522][   T12]  __kmalloc_noprof+0x27a/0x4f0
[  200.724082][   T12]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  200.726034][   T12]  notifier_call_chain+0x1b6/0x3e0
[  200.727641][   T12]  register_netdevice+0x1608/0x1ae0
[  200.729312][   T12]  nsim_create+0xae8/0xf10
[  200.730757][   T12]  __nsim_dev_port_add+0x6b6/0xb10
[  200.732377][   T12]  nsim_dev_port_add_all+0x37/0xf0
[  200.733983][   T12]  nsim_dev_reload_up+0x451/0x780
[  200.735585][   T12]  devlink_reload+0x4ec/0x8d0
[  200.737148][   T12]  devlink_nl_reload_doit+0xb35/0xd50
[  200.738912][   T12]  genl_family_rcv_msg_doit+0x215/0x300
[  200.740711][   T12]  genl_rcv_msg+0x60e/0x790
[  200.742143][   T12]  netlink_rcv_skb+0x208/0x470
[  200.743665][   T12]  genl_rcv+0x28/0x40
[  200.744999][   T12]  netlink_unicast+0x82f/0x9e0
[  200.746525][   T12]  netlink_sendmsg+0x805/0xb30
[  200.748015][   T12]  __sock_sendmsg+0x21c/0x270
[  200.749578][   T12]  ____sys_sendmsg+0x505/0x830
[  200.751162][   T12]  ___sys_sendmsg+0x21f/0x2a0
[  200.752636][   T12]  __x64_sys_sendmsg+0x19b/0x260
[  200.754198][   T12]  do_syscall_64+0xfa/0x3b0
[  200.755611][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.757066][T15758] netlink: 'syz.0.2802': attribute type 4 has an invalid length.
[  200.757448][   T12] 
[  200.757451][   T12] Freed by task 15744:
[  200.761913][   T12]  kasan_save_track+0x3e/0x80
[  200.763388][   T12]  kasan_save_free_info+0x46/0x50
[  200.764948][   T12]  __kasan_slab_free+0x62/0x70
[  200.766438][   T12]  kfree+0x18e/0x440
[  200.767714][   T12]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  200.769660][   T12]  notifier_call_chain+0x1b6/0x3e0
[  200.771279][   T12]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  200.773296][   T12]  unregister_netdevice_queue+0x33c/0x380
[  200.775058][   T12]  nsim_destroy+0x217/0x6a0
[  200.776546][   T12]  __nsim_dev_port_del+0x14d/0x1b0
[  200.778179][   T12]  nsim_dev_reload_destroy+0x288/0x490
[  200.779891][   T12]  nsim_dev_reload_down+0x8a/0xc0
[  200.781454][   T12]  devlink_reload+0x1b6/0x8d0
[  200.782939][   T12]  devlink_nl_reload_doit+0xb35/0xd50
[  200.784609][   T12]  genl_family_rcv_msg_doit+0x215/0x300
[  200.786351][   T12]  genl_rcv_msg+0x60e/0x790
[  200.787837][   T12]  netlink_rcv_skb+0x208/0x470
[  200.789328][   T12]  genl_rcv+0x28/0x40
[  200.790574][   T12]  netlink_unicast+0x82f/0x9e0
[  200.792074][   T12]  netlink_sendmsg+0x805/0xb30
[  200.793564][   T12]  __sock_sendmsg+0x21c/0x270
[  200.795051][   T12]  ____sys_sendmsg+0x505/0x830
[  200.796573][   T12]  ___sys_sendmsg+0x21f/0x2a0
[  200.798049][   T12]  __x64_sys_sendmsg+0x19b/0x260
[  200.799580][   T12]  do_syscall_64+0xfa/0x3b0
[  200.801007][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.802840][   T12] 
[  200.803605][   T12] Last potentially related work creation:
[  200.805370][   T12]  kasan_save_stack+0x3e/0x60
[  200.806867][   T12]  kasan_record_aux_stack+0xbd/0xd0
[  200.808525][   T12]  insert_work+0x3d/0x330
[  200.809894][   T12]  __queue_work+0xbd9/0xfe0
[  200.811312][   T12]  queue_work_on+0x181/0x270
[  200.812772][   T12]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  200.814521][   T12]  udp_tunnel_push_rx_port+0x180/0x200
[  200.816234][   T12]  geneve_offload_rx_ports+0xd7/0x160
[  200.817925][   T12]  geneve_netdevice_event+0x6a/0x80
[  200.819562][   T12]  notifier_call_chain+0x1b6/0x3e0
[  200.821183][   T12]  call_netdevice_notifiers+0x88/0xc0
[  200.822882][   T12]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  200.824839][   T12]  notifier_call_chain+0x1b6/0x3e0
[  200.826416][   T12]  register_netdevice+0x1608/0x1ae0
[  200.828308][   T12]  nsim_create+0xae8/0xf10
[  200.829759][   T12]  __nsim_dev_port_add+0x6b6/0xb10
[  200.831348][   T12]  nsim_dev_port_add_all+0x37/0xf0
[  200.832983][   T12]  nsim_dev_reload_up+0x451/0x780
[  200.834602][   T12]  devlink_reload+0x4ec/0x8d0
[  200.836116][   T12]  devlink_nl_reload_doit+0xb35/0xd50
[  200.837850][   T12]  genl_family_rcv_msg_doit+0x215/0x300
[  200.839587][   T12]  genl_rcv_msg+0x60e/0x790
[  200.841044][   T12]  netlink_rcv_skb+0x208/0x470
[  200.842560][   T12]  genl_rcv+0x28/0x40
[  200.843845][   T12]  netlink_unicast+0x82f/0x9e0
[  200.845349][   T12]  netlink_sendmsg+0x805/0xb30
[  200.846865][   T12]  __sock_sendmsg+0x21c/0x270
[  200.848342][   T12]  ____sys_sendmsg+0x505/0x830
[  200.849866][   T12]  ___sys_sendmsg+0x21f/0x2a0
[  200.851310][   T12]  __x64_sys_sendmsg+0x19b/0x260
[  200.852869][   T12]  do_syscall_64+0xfa/0x3b0
[  200.854288][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.856101][   T12] 
[  200.856873][   T12] Second to last potentially related work creation:
[  200.858897][   T12]  kasan_save_stack+0x3e/0x60
[  200.860362][   T12]  kasan_record_aux_stack+0xbd/0xd0
[  200.861998][   T12]  insert_work+0x3d/0x330
[  200.863355][   T12]  __queue_work+0xcfc/0xfe0
[  200.864789][   T12]  queue_work_on+0x181/0x270
[  200.866244][   T12]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  200.868005][   T12]  udp_tunnel_push_rx_port+0x180/0x200
[  200.869674][   T12]  vxlan_offload_rx_ports+0x139/0x200
[  200.871409][   T12]  vxlan_netdevice_event+0x111/0x470
[  200.873059][   T12]  notifier_call_chain+0x1b6/0x3e0
[  200.874630][   T12]  call_netdevice_notifiers+0x88/0xc0
[  200.876306][   T12]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  200.878225][   T12]  notifier_call_chain+0x1b6/0x3e0
[  200.879868][   T12]  register_netdevice+0x1608/0x1ae0
[  200.881510][   T12]  nsim_create+0xae8/0xf10
[  200.882956][   T12]  __nsim_dev_port_add+0x6b6/0xb10
[  200.884531][   T12]  nsim_dev_port_add_all+0x37/0xf0
[  200.886116][   T12]  nsim_dev_reload_up+0x451/0x780
[  200.887716][   T12]  devlink_reload+0x4ec/0x8d0
[  200.889192][   T12]  devlink_nl_reload_doit+0xb35/0xd50
[  200.890922][   T12]  genl_family_rcv_msg_doit+0x215/0x300
[  200.892644][   T12]  genl_rcv_msg+0x60e/0x790
[  200.894074][   T12]  netlink_rcv_skb+0x208/0x470
[  200.895547][   T12]  genl_rcv+0x28/0x40
[  200.896797][   T12]  netlink_unicast+0x82f/0x9e0
[  200.898285][   T12]  netlink_sendmsg+0x805/0xb30
[  200.899819][   T12]  __sock_sendmsg+0x21c/0x270
[  200.901313][   T12]  ____sys_sendmsg+0x505/0x830
[  200.902816][   T12]  ___sys_sendmsg+0x21f/0x2a0
[  200.904294][   T12]  __x64_sys_sendmsg+0x19b/0x260
[  200.905849][   T12]  do_syscall_64+0xfa/0x3b0
[  200.907291][   T12]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.909116][   T12] 
[  200.909895][   T12] The buggy address belongs to the object at ffff88811248e200
[  200.909895][   T12]  which belongs to the cache kmalloc-256 of size 256
[  200.914228][   T12] The buggy address is located 176 bytes inside of
[  200.914228][   T12]  freed 256-byte region [ffff88811248e200, ffff88811248e300)
[  200.918397][   T12] 
[  200.919243][   T12] The buggy address belongs to the physical page:
[  200.921195][   T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11248e
[  200.923892][   T12] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  200.926443][   T12] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  200.928872][   T12] page_type: f5(slab)
[  200.930212][   T12] raw: 057ff00000000040 ffff88801a441b40 ffffea00041cb480 dead000000000002
[  200.932892][   T12] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  200.935506][   T12] head: 057ff00000000040 ffff88801a441b40 ffffea00041cb480 dead000000000002
[  200.938258][   T12] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  200.941012][   T12] head: 057ff00000000001 ffffea0004492381 00000000ffffffff 00000000ffffffff
[  200.943682][   T12] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  200.946532][   T12] page dumped because: kasan: bad access detected
[  200.948562][   T12] page_owner tracks the page as allocated
[  200.950348][   T12] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9812, tgid 9811 (syz.1.1075), ts 112166370419, free_ts 103207807753
[  200.956226][   T12]  post_alloc_hook+0x240/0x2a0
[  200.957754][   T12]  get_page_from_freelist+0x21e4/0x22c0
[  200.959471][   T12]  __alloc_frozen_pages_noprof+0x181/0x370
[  200.961297][   T12]  alloc_pages_mpol+0x232/0x4a0
[  200.962822][   T12]  allocate_slab+0x8a/0x3b0
[  200.964230][   T12]  ___slab_alloc+0xbfc/0x1480
[  200.965735][   T12]  __kmalloc_noprof+0x305/0x4f0
[  200.967272][   T12]  hash_ip4_resize+0xa88/0x1990
[  200.968793][   T12]  call_ad+0x44e/0xb00
[  200.970113][   T12]  ip_set_ad+0x791/0x930
[  200.971457][   T12]  nfnetlink_rcv_msg+0xb4d/0x1130
[  200.973027][   T12]  netlink_rcv_skb+0x208/0x470
[  200.974534][   T12]  nfnetlink_rcv+0x26a/0x2520
[  200.976031][   T12]  netlink_unicast+0x82f/0x9e0
[  200.977552][   T12]  netlink_sendmsg+0x805/0xb30
[  200.979061][   T12]  __sock_sendmsg+0x21c/0x270
[  200.980533][   T12] page last free pid 5577 tgid 5577 stack trace:
[  200.982483][   T12]  __free_frozen_pages+0xc71/0xe70
[  200.984080][   T12]  vfree+0x25a/0x400
[  200.985307][   T12]  delayed_vfree_work+0x55/0x80
[  200.986840][   T12]  process_scheduled_works+0xae1/0x17b0
[  200.988554][   T12]  worker_thread+0x8a0/0xda0
[  200.990032][   T12]  kthread+0x711/0x8a0
[  200.991318][   T12]  ret_from_fork+0x3fc/0x770
[  200.992790][   T12]  ret_from_fork_asm+0x1a/0x30
[  200.994281][   T12] 
[  200.995057][   T12] Memory state around the buggy address:
[  200.996794][   T12]  ffff88811248e180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  200.999264][   T12]  ffff88811248e200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.001714][   T12] >ffff88811248e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.004173][   T12]                                      ^
[  201.005914][   T12]  ffff88811248e300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  201.008405][   T12]  ffff88811248e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  201.010923][   T12] ==================================================================
[  201.037559][   T12] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  201.039872][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  201.043670][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.047054][   T12] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  201.049401][   T12] Call Trace:
[  201.050460][   T12]  <TASK>
[  201.051412][   T12]  dump_stack_lvl+0x99/0x250
[  201.052900][   T12]  ? __asan_memcpy+0x40/0x70
[  201.054351][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.055997][   T12]  ? __pfx__printk+0x10/0x10
[  201.057462][   T12]  panic+0x2db/0x790
[  201.058885][   T12]  ? __pfx_panic+0x10/0x10
[  201.060349][   T12]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  201.062259][   T12]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.064260][   T12]  ? print_memory_metadata+0x314/0x400
[  201.065983][   T12]  ? __mutex_lock+0x144/0xe80
[  201.067465][   T12]  check_panic_on_warn+0x89/0xb0
[  201.069029][   T12]  ? __mutex_lock+0x144/0xe80
[  201.070541][   T12]  end_report+0x78/0x160
[  201.071893][   T12]  kasan_report+0x129/0x150
[  201.073309][   T12]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  201.075148][   T12]  ? __mutex_lock+0x144/0xe80
[  201.076609][   T12]  __mutex_lock+0x144/0xe80
[  201.078073][   T12]  ? __mutex_lock+0x51b/0xe80
[  201.079535][   T12]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  201.081467][   T12]  ? __pfx___mutex_lock+0x10/0x10
[  201.083063][   T12]  ? __lock_acquire+0xab9/0xd20
[  201.084601][   T12]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  201.086459][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  201.088230][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  201.089994][   T12]  process_scheduled_works+0xae1/0x17b0
[  201.091734][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  201.093615][   T12]  worker_thread+0x8a0/0xda0
[  201.095098][   T12]  kthread+0x711/0x8a0
[  201.096393][   T12]  ? __pfx_worker_thread+0x10/0x10
[  201.098023][   T12]  ? __pfx_kthread+0x10/0x10
[  201.099471][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  201.101105][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.102708][   T12]  ? __pfx_kthread+0x10/0x10
[  201.104168][   T12]  ret_from_fork+0x3fc/0x770
[  201.105610][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  201.107217][   T12]  ? __switch_to_asm+0x39/0x70
[  201.108773][   T12]  ? __switch_to_asm+0x33/0x70
[  201.110306][   T12]  ? __pfx_kthread+0x10/0x10
[  201.111777][   T12]  ret_from_fork_asm+0x1a/0x30
[  201.113279][   T12]  </TASK>
[  201.114924][   T12] Kernel Offset: disabled
[  201.116276][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:32:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff888020895640 RCX=cc49b2d5cbf2a100 RDX=0000000000000006
RSI=ffffffff8db8d60f RDI=ffffffff8b72b645 RBP=ffffc90004297550 RSP=ffffc90004297490
R8 =ffffffff8fa22df7 R9 =1ffffffff1f445be R10=dffffc0000000000 R11=fffffbfff1f445bf
R12=dffffc0000000000 R13=1ffff92000852ebc R14=ffffffff99cef4c8 R15=1ffff92000852e98
RIP=ffffffff8b7029d4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2683f9 CR3=00000001060ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=066d086e0aff4751 053c3132b55c65bc
XMM02=1aeaaccb7c93a518 f9b1de36a08d0a16 XMM03=5b4d5109f4c90d5d 36d4a71e18a89ee5
XMM04=39f97cc296ae4700 a089eb060d7781b7 XMM05=426c0680589f26bb a91db4338ac36515
XMM06=9ee47f2ff4b67734 e675beb75a495b4d XMM07=5109f4c90d5d36d4 a71e18a89ee51aea
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f74ff411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7150
R8 =ffff888021858237 R9 =1ffff1100430b046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff884 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f75000e7d60 CR3=0000000042bf0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=04000000000000d9 3a5251a6880ae046
XMM02=00000008000003b7 fffffffa00000207 XMM03=0000000300000085 00000000000004b7
XMM04=9500000003000000 8500000000000004 XMM05=b700000008000003 b7fffffffa000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b00000000000008 b700000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f188d811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
