last executing test programs:

666.967948ms ago: executing program 1 (id=1465):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x70bd25, 0x25dfcbfb, {0xa, 0x10, 0x20, 0x0, 0xff, 0x2, 0xfe, 0x1, 0x8ba1941754a13caa}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}, @RTA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20008010)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4048, 0x12428}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r3, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfa}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x900, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0)

609.658003ms ago: executing program 2 (id=1466):
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000))
r1 = socket$inet(0x2, 0x5, 0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0xe, @remote, 0x7}}, 0x6, 0x7, 0x4, 0x7, 0x0, 0x10, 0x8}, &(0x7f0000000100)=0x9c)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}, 0x1e) (async)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) (async)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x7, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x1}, @enum={0xa, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x80000001}, {0x7, 0x7f18}, {0xb, 0x9}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x54, 0x0, 0x69, 0x1}, @struct={0x9, 0x3, 0x0, 0x4, 0x0, 0xfffffff5, [{0xb, 0x4, 0x5}, {0xe, 0x4, 0xc304}, {0x9, 0x5, 0x6}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0x3, 0xfffffffa}]}]}, {0x0, [0x61, 0x2e, 0x30, 0x30, 0x5f]}}, &(0x7f0000000540)=""/13, 0xbb, 0xd, 0x1, 0xe8fe, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000640)=""/25, 0x19, <r6=>0x0, &(0x7f0000000680)=""/138, 0x8a}}, 0x10) (async)
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0x19, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x37e9a2cf3e39ee28, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xb3e}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0xa, 0xf, 0x2, 0x7, 0xa}, @generic={0xff, 0x0, 0x1, 0x7fff, 0x4601}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x80000000, 0x95, &(0x7f00000003c0)=""/149, 0xc2d00, 0x75, '\x00', 0x0, @fallback=0x38, r5, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x9, 0x2, 0x6f}, 0x10, r6, r7, 0x2, 0x0, &(0x7f0000000840)=[{0x4, 0x4, 0x3}, {0x3, 0x4, 0x10, 0x5}], 0x10, 0xc}, 0x94) (async)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000940)=@req={0x4, 0xfff, 0x8, 0x4}, 0x10) (async)
r8 = socket$netlink(0x10, 0x3, 0x7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r9)
pselect6(0x40, &(0x7f00000009c0)={0x9, 0x1, 0xa2, 0xc0, 0x8, 0x1, 0x4, 0x100}, &(0x7f0000000a00)={0x2, 0x2, 0x5, 0x7, 0x81, 0x1, 0x1000, 0x9}, &(0x7f0000000a40)={0x200, 0x3b6, 0xc, 0x3, 0xc, 0x2, 0x8001, 0x2f1}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0)={[0x9]}, 0x8})
r11 = openat$cgroup_int(r3, &(0x7f0000000b40)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async)
r12 = socket$netlink(0x10, 0x3, 0x6) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r12, &(0x7f0000000e40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x1ec, r10, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x1, 0x1d}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x70000, {0x6, 0x7, 0x3, 0x1ff}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4000, 0x3, 0x6, 0x0, {0x56, 0x9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x9, 0xd3}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x0, 0x1ff, 0xff, 0x4}}}, @NL80211_ATTR_IE={0x17c, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xa1, 0x8b}}, @measure_req={0x26, 0x8b, {0x3, 0x8, 0x9, "c05382feca7bb7fea73af9eb4a04a77ba6c2f4560897c7741e8fe2c8ad5907dcaed305ff82c232b32df7112b5617dcf7d5af82bd2ccfdef203f2377ac1247e8257d052ea6f3897bb960094d13c9e598fd124836dd30018698a17693643fa226663ea6a453f5247f6f3540c11dd0037ea541e66feb680c663f8d78f28dcc9c8eba38218a1c70b03c2"}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x5, 0x8}}, @mic={0x8c, 0x10, {0x6f6, "dd476e0a9c63", @short="d52f8353acf47a67"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0xb9, "b3e565b5b4b0ffeba55470cde6d751a47cc56d2cd3b2d5c7dbdfd0e4739cc7f6740041789584c25441105e9d81481ea915316ac66470e6c4b16474d3175b2b6188dc3b394e81b1b63acfc0256c1782f3bfea904db2d0f633645140087cde90c1a7df91b23308509d713831590de75084600a55ed266a655f0b54d84674061b813d97d8f28f3bc67360a7b02171301a73117baca989c74191be4c24b38b93ad2510b02d9299118189304f4ed88d3c28f636ec5f9b005fafbbaa"}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000840) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', r7}, 0x18) (async)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r10, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r15 = getgid()
ioctl$TUNSETGROUP(r14, 0x400454ce, r15) (async)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001040)) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@fallback=r11, 0x38, 0x0, 0x9, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000010c0)=[0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0], <r16=>0x0}, 0x40) (async)
r17 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000001200)='./file0/file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000011c0)={@fallback=r11, r3, 0x37, 0x10, 0x0, @void, @value=r17, @void, @void, r16}, 0x20)

609.180295ms ago: executing program 1 (id=1467):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000)
socket$packet(0x11, 0x0, 0x300)
unshare(0x26020480)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000240)={0x2, 0x4e1d, @broadcast}, 0x10, 0x0}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @empty, 0xffffffff}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4)

524.960269ms ago: executing program 0 (id=1468):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', <r5=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r6, 0x8b2a, &(0x7f0000000040))
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x63, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090528bd700000000400021f0d00", @ANYRES32=r5, @ANYBLOB="080001000000000008000400ac1414bb0d000200ac1414bb080001006401010208000a0001000000080009000c"], 0x48}}, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000240)=""/100, 0x7})
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0xff, 0xfffff004}, {0x6, 0x0, 0x2, 0x6}]}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r10 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000), 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080), 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4)
listen(r0, 0xfff)

523.968692ms ago: executing program 2 (id=1469):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x94}]}, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000011000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0x4001af84, 0x0)

427.435871ms ago: executing program 2 (id=1470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0)

426.750502ms ago: executing program 0 (id=1471):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x4}, @multicast2, @remote, 0x0, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r6}, 0x99)
connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @random="ca232057c0e5", 'veth0_to_bridge\x00'}}, 0x1e)

330.379898ms ago: executing program 2 (id=1472):
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', <r3=>0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=<r4=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x3b, r3, r4}, {0x4498a237, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8)
bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe)
connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x158, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0x54, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_LABELS_MASK={0x10, 0x17, [0xfffffeff, 0x401, 0x3]}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xdf}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}]}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000814)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8)
close(0x3)

329.774923ms ago: executing program 0 (id=1473):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='%e', 0x2}], 0x1}}], 0x2, 0x4000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000340)=0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8)
sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=@can_newroute={0x8c, 0x18, 0x2, 0x70bd2d, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8, 0xfffffffffffffff7, 0x5, 0x6}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "70d2e33a169edf4d"}, 0x2}}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0x5, 0xf7, 0xe2}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffe, 0x4, 0x80}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x1, 0x1}, 0x92, 0x0, 0x0, 0x0, "6c7cf2346f5b8a9a"}, 0x3}}, @CGW_MOD_UID={0x8, 0xe, r7}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x1, 0x0, 0x0, "9b209279017df261"}, 0x2}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x2, 0xfffffffffffffffa, 0x92}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r8, 0x0)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x8}, &(0x7f0000004500)=0x8)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)={0x8bc, 0x22, 0x400, 0x0, 0x0, "", [@nested={0x8aa, 0x0, 0x0, 0x1, [@nested={0x7b3, 0x57, 0x0, 0x1, [@typed={0xc, 0x97, 0x0, 0x0, @u64=0x6}, @nested={0x72c, 0x94, 0x0, 0x1, [@nested={0x1c, 0x3f, 0x0, 0x1, [@nested={0x4, 0xd2}, @nested={0x4, 0x13c}, @typed={0x8, 0xed, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x11e, 0x0, 0x0, @pid=r3}]}, @nested={0x1b3, 0xf4, 0x0, 0x1, [@generic="70f0945fbe5774130d2421b452b6bd33c7ffb19d57f2fe41582f7d92ed11ab5bafaf10a2353430e2150c443f35be3349b3dbdc85ed0239c10143375aa31c81f288688056ee17d295a55d3fc994d37627f5897d3d977f1b745b13014fd61e31eca343d1acc1", @nested={0x4, 0x3a}, @generic="3f7a9f98d6e70c9f534d9ce9f89324d3ebe5778e589dbf308ca031f8ba219a070f24d576a4546164eb2920f0016f644f0f1458c9c7eaa080b11f5fc155d6debc144eb0c01d579bd22a9e1be77b09ef65e60a9aeabe138a67e1e8077ee5d14008d7d9bfc244abedd79520b042066daff62c7758fbae33e78d6d88b0d7af398835eeb3c60442a90146338dfbe0fd5bad3849b5bdd16fe2ac5e20d7dbefbac859c30910d8c51c80eb99aa5e247666138c7452698db1a15fa5f03a3f8ea6d88d6d6d10af2d100c952d5f6883e3be362c21fb27f575d9af52cce033a93e7dfec1fd387f1522b91ca3d5c91099f372418b79", @typed={0x8, 0x87, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x151}, @nested={0x4, 0xf6}, @typed={0x8, 0x13d, 0x0, 0x0, @fd=r2}, @generic="2876b73ec2436ff22ff14ba03adb223517b29b3caa06bcdb2cfc3480439a641055348fc57fa00dfa0bd1e973c1d037c64925c5", @typed={0xc, 0x14c, 0x0, 0x0, @u64=0x2}]}, @nested={0xda, 0x141, 0x0, 0x1, [@generic="18fb5bdbcf4a48fb4a5924dda6127f6a87a20051bb86107c9cc40b1cd33c52ffcf25ecfe589184f4cb219c0eb45ca12d57a3bbd727197bc9390145dee4f7586db918e387623196643f16508e8dc717e7fb194513c696025275f2c5a327cd4156f90c8726ea71f2cf981a1b62c96ae27608cca6c63fcdebe846b0466c6f83f9cce75c3a58a5e59ddb7d9807be32b4089dc87f734a30974b5bb70be663911698bdff6c87ba302610684acaa16746e0111a2dc12857f4ff9c9157a9ea114fa7c464033fa8cdd6d3c4a3c605b33130de6dc1b4c6fae5fb9d"]}, @nested={0x22a, 0x47, 0x0, 0x1, [@generic="dbf310caa861efca1f683caa8c4f294d99c74ad7f834eeb9da793c9c233df2b4f4d45a53bce29ade1517e58f10351505079a01ab31018f083d343f114398cc907d57fb7720dee2fe709165d1f7c3ae46b62ce9f8bfec5bc3da743724edb745dfb7e908cf0751fc9904507406c2944dc43c23e6d5561103f8d4ed847bf8671dd0a42afd2b428e4f7a5794835b4fa77a39ad806f9f3bcbf6be8780dc7037eaa33e193de635850c26555ea51856fd62d2c9293b77a85d5cb52f79ef581ba52e73142ac9e3fb3f84302c6308b3e138dd135c84978a47af643cce402c077985f758210d8e09323794317504cc5e2316", @generic="4e97bbb54e6694ff00fa12310313239efad8e44f8b41e304e98c8093406e99532b0c93f3037320178da7e8f7e58a7c247546f97d006fec2d7c1de82fcb148893eecff78f6b6f7dd7891bd3c0bc0c6a9548a2fe110065915487de42391d158140524d8fc2c146a4bba521fdaf", @typed={0x8, 0x114, 0x0, 0x0, @str='.{:\x00'}, @nested={0x4, 0x4c}, @typed={0x8, 0x76, 0x0, 0x0, @fd=r0}, @generic="94b047d068958e1fa04393dbedd49b465b4a8e24fbddf94d6243580389b3b3dd3f5e1bcb2ddd79e06e412c7a8893c712df79c905707444b049bf031eb1a781e907ef6d0ac881da2939eb2f9d532aacac76a0fa54b291db459ae7f3474771df9ed253fa78b5316019d23f240309b376ff045555ee6a56045d7f734543c94e6edaa9e03b756524fee3707047b0ba51d6e31ecc73dad3148e4ed9b6ffddf7811cd3cd5f584924c4d4f06c24eabe0290b74e98a201276ed831329e"]}, @nested={0x2b, 0x58, 0x0, 0x1, [@nested={0x4, 0x48}, @generic="b010c324e2cc89fe14b38a90e0c921e1035d4731ad78bf4bfdb1afd7d13fdd59a79e3c"]}, @nested={0x221, 0x7f, 0x0, 0x1, [@typed={0xc, 0xf, 0x0, 0x0, @str='nl80211\x00'}, @generic="67ae4b93feb105158a9f9b1a527244434d1057a0d3c2996846bbcf926bc6472d231c29777e30e3", @nested={0x4, 0x149}, @nested={0x4, 0x150}, @typed={0xc, 0x7a, 0x0, 0x0, @u64=0x6000}, @generic="77572a31ebaff8dbb8898084dc86bfbeea962166db7ca03a7cfeb24a20857d4dd78fea713d6398a48cdc7af9965062ec24527f8ecdad5b7ba913233f10e3ce7be13085d44fa32962d6918fdd553ad8bcca48015a83fd05e654584f8d03d8312cb0b504e2810329b5df7de7bc41f2487750b6870e89092e69c8561bac44c89e6b0ddab1147a3828d18a5dc991ce30d9641add44d3d391a07fcf61aa4cd67e2758ff3bab49e4fb593930320c9820cb669702120397590eecafa152e9ad53073920aeb500f09064", @generic="f158f27d1010af5ea7734376d20957e7be39e3443e0cde5d2898fa9d6e7664375436f792fe06eddd0c3c0469890bd55bd4834527389b7651983352e114c0a4ba0a3b1319f6b3a61f7ae1dee5c8ef57f784b65dfdbcf500eb641eb52ded5c1904826e278ed0ce3d50f54191f2266b881297a5fbd4c08a4d1bc2a5aa3b7923fb76fdc5b41a567db66e2878f7b4ee757d5d4e47c03e6e0c17e1ce51b4", @nested={0x4, 0x6}, @generic="f37f53505cac0af154e30cba2462b8be0170d8e56c27fadda32a303a92a1556aead133304e058829d3818d65be9dfe4fd9e0d48b222a4280f6cf837d081dab59ce9a1079c2f58796ab90faf70b9c89dea202b89ab74250c7da7599be172b1bec38b314a41bf4900dbdd35c50c442be281e"]}]}, @generic="5be1e6368071cc0c5e37b7a245aba099cd0a0d2c8b429f9cb3c23bedda2095a0ec265e2f3f2ac492ed1302dea54e8902caa0f916bcf8743e62493f6d821be4f92dc4f540c319245670e246576b9ad30be34ab68924629a539ca40a887d4e7116fced6b033ed1d70602deb8983f5d48dfd6348c57b8835f"]}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x8bc}], 0x1}, 0x80)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r10], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r11, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x54}}, 0x0)

248.637287ms ago: executing program 0 (id=1474):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'veth1\x00', {0x3}, 0xb})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x220}], 0x1, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000001070104000000000000c42c993be575152d010073797a31000000000c0007800800014000e10000810c000240000000000f44f8"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x4, 0x2, 0x9, 0xefeb, 0x8, 0x6, 0x1, 0x9}}}}]}, 0x58}}, 0x0)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240), 0x14, &(0x7f0000000500)={&(0x7f0000000700)="780e025932f80d984ec451bdee30764fc4feeadc62c36cd928a7448efbed0569e01b9707e810fd7ef7d352b7c757ca8c063b0296e555f532efb66bcbdface465e09bfac0f15cc4fce8e4deb00dd423c6bd6cd03301552be1e58bd14e7371852cb64b4e8ab792784757b4695f7a108eed69dbd4c34ae0b51e21e3882a5d5a737789743c7d7534b1b81e942c732df5b2b4709e08c02d77c336862629ec5b67b5cd85df48f63072b86e966e8465f797b61fb9604f11384f8414a592f605db2dbd74dab57b11bcc79dc0a618e0a2b62409486851cd96ac1508d43b1496e8bf3c385d1b46bd1afbdf", 0xe6}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r7, 0x0, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0)
r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(r10, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r12, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4840)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

248.288388ms ago: executing program 1 (id=1475):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a01, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040))
r1 = socket$kcm(0x2, 0xa, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0)
r2 = accept(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000200)=0x80)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c00140660"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x25, r2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, 0x0, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={0x1, @bcast, @netrom={'nr', 0x0}, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @enum, @restrict]}}, 0x0, 0x46}, 0x28)
pipe(0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e00000010c00148008000140ac1414bb0c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

170.30996ms ago: executing program 1 (id=1476):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8)
connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000180))
r3 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @mcast1, 0x200005}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @mcast1, 0x200005}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f00000004c0)=0x9, 0x4) (async)
setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f00000004c0)=0x9, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000165d5a5e778d8258a000000000a54000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000000214"], 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"})

87.926281ms ago: executing program 1 (id=1477):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0xfffc, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x0, 0x3c}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x5680000000, 0x0, 0x0, 0x5}, {0x10, 0x9, 0x4000000}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x144}}, 0x0)

86.413895ms ago: executing program 2 (id=1478):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x3c, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x14, 0x2000, 0x0, 0x0, @str=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x10, 0x1, 0x0, 0x1, [@generic="fea2a042f5878ef205a06689"]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

77.162475ms ago: executing program 0 (id=1479):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009000300040000000000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000038000480240001800b00010072656a65637400001400028008000140000000000500020000000000100001800a000100726564697200000008000b40000000000900010073797a300000000014000000110001"], 0xe8}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002300000005000400010000000500030001000000"], 0x24}, 0x1, 0x0, 0x0, 0x88c4}, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'wlan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x80586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x29}]}}}]}, 0x40}}, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x4, @mcast1, 0x8}, 0x1c)
sendmmsg$inet6(r5, &(0x7f00000007c0)=[{{&(0x7f0000000540)={0xa, 0x4e20, 0x6, @mcast2}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000005c0)="908ec7bda8f672d99ab5900673e96c44e11d8c783a9ce774f1398d5748df494f40c833dc88324d3b68a59f94b050479f0385fb6688b612dab2bcf2798ccd08359e36a6106fbe682d985d79cb9073b4685a5132759fc5ee7523c7e9f7bc1c8f5da7d41cbd09bcd38690a90c68096c56c0f6ced8fd847d314e67b34613cd1941b59c1f9c2acea24796bd11af65438da6ce2c61ee21ac", 0x95}], 0x1, &(0x7f0000000700)=[@dstopts_2292={{0x18, 0x29, 0x4, {0xb5}}}, @dontfrag={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0xfc, 0xfff, [0x6570d193, 0x1]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0xa0}}], 0x1, 0x2)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r6, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8}]}]}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x12c, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xeb0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x343}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x79}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5fb5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18)

10.560643ms ago: executing program 1 (id=1480):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000000030000000000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r1], 0x44}}, 0x40)

10.355472ms ago: executing program 2 (id=1481):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x90)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r1, 0x3}, 0x12)
socket$packet(0x11, 0x2, 0x300)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1f}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
write(r3, &(0x7f0000000080)="06e512eed6be70cfbceee496fc2efda8cd27d9371b416b345ef0642c70204ea77aa295a4bbd9b35df565ee0298858c570f2b26cb258b958965816c03c36a8742b2bd8466226871303677ad809a01e9a9f61887c0a58231e515acee5d14df63dfb832c881f9f66123bd96df07c1ac9a2b23fba4862cd07052e3384f3e16e6e8233d9f5f026a666e5df55ffc3574af1bda98c7caf215fc8d81f033", 0x9a)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@expire={0x104, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {{{@in=@remote, @in6=@empty, 0x4e20, 0x0, 0x4e24, 0x6, 0x2, 0x80, 0x180, 0x73}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@remote, {0x9, 0x0, 0x800, 0x1000, 0x800, 0x0, 0x81}, {0x8, 0xa, 0xfffffffffffffffd, 0x3}, {0x4, 0xe415, 0x7}, 0x70bd2a, 0x0, 0xa, 0x0, 0xff}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x104}, 0x1, 0x0, 0x0, 0x24008010}, 0x200008cc)

0s ago: executing program 0 (id=1482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0, 0xc00e}, 0x9}], 0x6, 0x40010020, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57912' (ED25519) to the list of known hosts.
syzkaller login: [   56.285448][ T5836] cgroup: Unknown subsys name 'net'
[   56.413698][ T5836] cgroup: Unknown subsys name 'cpuset'
[   56.419979][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.167310][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.498734][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.502590][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.506021][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.510027][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.514279][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.517397][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.520456][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.523908][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.526641][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.529766][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.614869][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.617985][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.620967][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.624508][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.627336][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.771818][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   62.895394][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.898546][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.901921][ T5851] bridge_slave_0: entered allmulticast mode
[   62.905174][ T5851] bridge_slave_0: entered promiscuous mode
[   62.910791][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.913486][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.916255][ T5851] bridge_slave_1: entered allmulticast mode
[   62.919254][ T5851] bridge_slave_1: entered promiscuous mode
[   62.976591][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.981797][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.078238][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   63.115386][ T5851] team0: Port device team_slave_0 added
[   63.135891][ T5851] team0: Port device team_slave_1 added
[   63.161174][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   63.206889][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.210871][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.221070][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.259946][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.262727][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.273660][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.278519][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.283394][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.286441][ T5855] bridge_slave_0: entered allmulticast mode
[   63.291682][ T5855] bridge_slave_0: entered promiscuous mode
[   63.302175][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.305133][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.308182][ T5855] bridge_slave_1: entered allmulticast mode
[   63.312536][ T5855] bridge_slave_1: entered promiscuous mode
[   63.407421][ T5851] hsr_slave_0: entered promiscuous mode
[   63.410817][ T5851] hsr_slave_1: entered promiscuous mode
[   63.443663][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.451634][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.455522][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.458435][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.461991][ T5861] bridge_slave_0: entered allmulticast mode
[   63.465945][ T5861] bridge_slave_0: entered promiscuous mode
[   63.496199][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.498793][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.501435][ T5861] bridge_slave_1: entered allmulticast mode
[   63.504786][ T5861] bridge_slave_1: entered promiscuous mode
[   63.539923][ T5855] team0: Port device team_slave_0 added
[   63.571473][ T5855] team0: Port device team_slave_1 added
[   63.576010][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.607853][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.612278][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.614504][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.622867][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.653402][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.655584][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.664769][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.703525][ T5861] team0: Port device team_slave_0 added
[   63.734780][ T5861] team0: Port device team_slave_1 added
[   63.753437][ T5855] hsr_slave_0: entered promiscuous mode
[   63.755882][ T5855] hsr_slave_1: entered promiscuous mode
[   63.758791][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   63.763357][ T5855] Cannot create hsr debugfs directory
[   63.821144][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.823441][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.833136][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.855944][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.860906][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.869765][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.878215][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.890322][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.910927][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.938142][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.958543][ T5861] hsr_slave_0: entered promiscuous mode
[   63.961886][ T5861] hsr_slave_1: entered promiscuous mode
[   63.964070][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   63.965917][ T5861] Cannot create hsr debugfs directory
[   64.139486][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.151414][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.167453][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.174409][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.203715][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.246959][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.261329][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   64.263853][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.271463][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.285956][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.288702][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.295049][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.316404][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.318910][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.431663][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.477779][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   64.494567][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.497540][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.517696][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.520663][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.536110][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.578150][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   64.602050][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.604749][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.608129][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.610431][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.621016][ T5857] Bluetooth: hci1: command tx timeout
[   64.622995][ T5857] Bluetooth: hci0: command tx timeout
[   64.626887][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.700236][   T54] Bluetooth: hci2: command tx timeout
[   64.715576][ T5851] veth0_vlan: entered promiscuous mode
[   64.721995][ T5851] veth1_vlan: entered promiscuous mode
[   64.754932][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.772956][ T5851] veth0_macvtap: entered promiscuous mode
[   64.785790][ T5851] veth1_macvtap: entered promiscuous mode
[   64.812379][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.833802][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.837990][ T5855] veth0_vlan: entered promiscuous mode
[   64.853660][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.857400][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.864628][ T5855] veth1_vlan: entered promiscuous mode
[   64.874867][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.888568][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.905872][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.961217][ T5855] veth0_macvtap: entered promiscuous mode
[   64.972769][ T5855] veth1_macvtap: entered promiscuous mode
[   64.988459][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.996101][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.003457][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.027673][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.031945][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.035262][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.063084][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.072415][ T5861] veth0_vlan: entered promiscuous mode
[   65.078335][ T5861] veth1_vlan: entered promiscuous mode
[   65.084853][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.087882][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.097089][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.107311][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.165789][ T5861] veth0_macvtap: entered promiscuous mode
[   65.190247][ T5861] veth1_macvtap: entered promiscuous mode
[   65.223843][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.230072][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.236867][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.257997][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.280983][   T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.283898][   T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.288816][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.293333][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.296771][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.303277][ T5921] netlink: 'syz.0.4': attribute type 1 has an invalid length.
[   65.306216][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.313535][ T5921] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   65.434402][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.457169][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.523387][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.526082][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.526431][ T5932] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6'.
[   65.533632][ T5932] block nbd0: not configured, cannot reconfigure
[   65.541946][ T5930] Zero length message leads to an empty skb
[   65.556299][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'.
[   65.654873][ T5941] netlink: 'syz.0.9': attribute type 7 has an invalid length.
[   65.658095][ T5941] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9'.
[   65.765293][ T5915] IPVS: starting estimator thread 0...
[   65.860407][ T5959] IPVS: using max 64 ests per chain, 153600 per kthread
[   65.860729][ T5963] bond_slave_0: entered promiscuous mode
[   65.864860][ T5963] bond_slave_1: entered promiscuous mode
[   65.871310][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8'.
[   65.912453][ T5960] bond_slave_0: left promiscuous mode
[   65.914729][ T5960] bond_slave_1: left promiscuous mode
[   66.377795][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'.
[   66.379836][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'.
[   66.383638][ T5976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'.
[   66.386662][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'.
[   66.518423][ T5984] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET)
[   66.669909][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'.
[   66.700179][ T5857] Bluetooth: hci1: command tx timeout
[   66.702100][   T54] Bluetooth: hci0: command tx timeout
[   66.725275][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'.
[   66.746768][ T5999] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   66.761934][ T5999] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   66.789378][   T54] Bluetooth: hci2: command tx timeout
[   66.838387][ T6004] netlink: 'syz.2.22': attribute type 21 has an invalid length.
[   66.897218][ T6008] netlink: 'syz.0.23': attribute type 2 has an invalid length.
[   66.965228][ T6011] netlink: 'syz.2.25': attribute type 27 has an invalid length.
[   67.007675][ T6013] syzkaller0: entered promiscuous mode
[   67.014860][ T6013] syzkaller0: entered allmulticast mode
[   67.214602][ T6021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.543688][ T6038] Bluetooth: MGMT ver 1.23
[   68.055629][ T6071] netlink: 'syz.1.46': attribute type 1 has an invalid length.
[   68.066747][ T6071] ipvlan2: entered allmulticast mode
[   68.068962][ T6071] veth1_to_bond: entered allmulticast mode
[   68.196388][ T6075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.280682][ T6078] tipc: Started in network mode
[   68.282332][ T6078] tipc: Node identity e2796499a3da, cluster identity 4711
[   68.285251][ T6078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.287834][ T6078] syzkaller0: entered promiscuous mode
[   68.289890][ T6078] syzkaller0: entered allmulticast mode
[   68.302630][ T6078] tipc: Resetting bearer <eth:syzkaller0>
[   68.306063][ T6077] tipc: Resetting bearer <eth:syzkaller0>
[   68.318435][ T6077] tipc: Disabling bearer <eth:syzkaller0>
[   68.392605][ T6086] IPVS: Scheduler module ip_vs_sip not found
[   68.470222][ T6086] nbd0: detected capacity change from 0 to 127
[   68.477452][   T55] block nbd0: Receive control failed (result -32)
[   68.480755][ T5859] block nbd0: Send control failed (result -32)
[   68.480950][ T5859] block nbd0: Request send failed, requeueing
[   68.498566][ T5859] block nbd0: Dead connection, failed to find a fallback
[   68.505301][   T25] block nbd0: Dead connection, failed to find a fallback
[   68.509704][   T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.510811][ T5859] block nbd0: shutting down sockets
[   68.514406][   T25] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.515762][ T5859] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.515848][ T5859] Buffer I/O error on dev nbd0, logical block 1, async page read
[   68.516070][ T5859] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.536578][ T5859] Buffer I/O error on dev nbd0, logical block 2, async page read
[   68.541386][ T5859] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.545822][ T5859] Buffer I/O error on dev nbd0, logical block 3, async page read
[   68.549868][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.553545][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.559575][ T5859] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.563194][ T5859] Buffer I/O error on dev nbd0, logical block 1, async page read
[   68.566183][ T5859] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.570749][ T5859] Buffer I/O error on dev nbd0, logical block 2, async page read
[   68.573822][ T5859] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.574087][ T5871] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.577278][ T5859] Buffer I/O error on dev nbd0, logical block 3, async page read
[   68.584676][ T5859] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.588263][ T5859] Buffer I/O error on dev nbd0, logical block 0, async page read
[   68.593014][ T5859] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.597134][ T5859] Buffer I/O error on dev nbd0, logical block 1, async page read
[   68.597308][ T5871] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.604320][ T5871] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.607905][ T5871] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.613351][ T5859] ldm_validate_partition_table(): Disk read failed.
[   68.616948][ T5859] Dev nbd0: unable to read RDB block 0
[   68.641724][ T5859]  nbd0: unable to read partition table
[   68.668554][ T5859] ldm_validate_partition_table(): Disk read failed.
[   68.683202][ T5859] Dev nbd0: unable to read RDB block 0
[   68.687276][ T5859]  nbd0: unable to read partition table
[   68.690369][ T6103] netlink: 'syz.0.60': attribute type 27 has an invalid length.
[   68.789155][   T54] Bluetooth: hci0: command tx timeout
[   68.789228][ T5857] Bluetooth: hci1: command tx timeout
[   68.795159][ T6110] netlink: 'syz.2.63': attribute type 3 has an invalid length.
[   68.798639][ T6110] netlink: 'syz.2.63': attribute type 3 has an invalid length.
[   68.820951][ T6112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.859726][ T5857] Bluetooth: hci2: command tx timeout
[   68.881576][ T6113] tipc: Disabling bearer <eth:syzkaller0>
[   68.966387][ T6123] netlink: 'syz.2.66': attribute type 1 has an invalid length.
[   68.973848][ T6126] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.107241][ T6131] pim6reg: entered allmulticast mode
[   69.110179][ T6131] pim6reg: left allmulticast mode
[   69.523790][ T6156] vlan2: entered allmulticast mode
[   69.525721][ T6156] veth1: entered allmulticast mode
[   69.548491][ T6158] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   69.951554][ T6177] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   70.139249][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   70.152953][ T6185] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   70.156277][ T6185] team0: Failed to send options change via netlink (err -105)
[   70.164452][ T6185] team0: Port device netdevsim0 added
[   70.485940][ T6206] validate_nla: 4 callbacks suppressed
[   70.485963][ T6206] netlink: 'syz.2.91': attribute type 4 has an invalid length.
[   70.595276][ T6210] __nla_validate_parse: 24 callbacks suppressed
[   70.595291][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'.
[   70.768004][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'.
[   70.861059][ T5857] Bluetooth: hci0: command tx timeout
[   70.861080][   T54] Bluetooth: hci1: command tx timeout
[   70.942188][   T54] Bluetooth: hci2: command tx timeout
[   70.957740][ T6242] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.970045][ T6242] bond_slave_0: entered promiscuous mode
[   70.972507][ T6242] bond_slave_1: entered promiscuous mode
[   70.975399][ T6242] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   70.981304][ T6242] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[   71.002462][ T6242] bridge_slave_0: left allmulticast mode
[   71.004394][ T6242] bridge_slave_0: left promiscuous mode
[   71.007245][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.018885][ T6242] bridge_slave_1: left allmulticast mode
[   71.025010][ T6242] bridge_slave_1: left promiscuous mode
[   71.027281][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.045162][ T6242] bond0: (slave bond_slave_0): Releasing backup interface
[   71.051189][ T6242] bond_slave_0: left promiscuous mode
[   71.058463][ T6247] IPVS: length: 154 != 8
[   71.071196][ T6242] bond0: (slave bond_slave_1): Releasing backup interface
[   71.075813][ T6242] bond_slave_1: left promiscuous mode
[   71.084872][ T6242] team0: Port device team_slave_0 removed
[   71.092872][ T6242] team0: Port device team_slave_1 removed
[   71.095294][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.097798][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.106763][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.110786][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.111518][ T6242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.115812][ T6242] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.128410][ T6242] bond2: (slave macvlan2): Removing an active aggregator
[   71.132518][ T6242] bond2: (slave macvlan2): Releasing backup interface
[   71.228065][ T6254] netlink: 88 bytes leftover after parsing attributes in process `syz.0.109'.
[   71.870543][ T6272] netlink: 'syz.2.118': attribute type 7 has an invalid length.
[   71.873756][ T6272] netlink: 224 bytes leftover after parsing attributes in process `syz.2.118'.
[   72.118910][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   72.180811][ T6281] netlink: 212316 bytes leftover after parsing attributes in process `syz.1.122'.
[   72.347243][ T6298] netlink: 'syz.1.129': attribute type 7 has an invalid length.
[   72.351779][ T6298] netlink: 224 bytes leftover after parsing attributes in process `syz.1.129'.
[   72.464556][ T6304] bridge_slave_0: left allmulticast mode
[   72.466660][ T6304] bridge_slave_0: left promiscuous mode
[   72.472883][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.482198][ T6304] bridge_slave_1: left allmulticast mode
[   72.484449][ T6304] bridge_slave_1: left promiscuous mode
[   72.486733][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.491116][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'.
[   72.505215][ T6304] bond0: (slave bond_slave_0): Releasing backup interface
[   72.512317][ T6304] bond0: (slave bond_slave_1): Releasing backup interface
[   72.526671][ T6304] team0: Port device team_slave_0 removed
[   72.534135][ T6304] team0: Port device team_slave_1 removed
[   72.538436][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.542312][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.546919][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.550434][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.611982][ T6304] team0: Mode changed to "loadbalance"
[   72.669781][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   72.696952][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'.
[   72.718352][ T6319] batman_adv: batadv0: Adding interface: dummy0
[   72.721924][ T6319] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.735161][ T6319] batman_adv: batadv0: Interface activated: dummy0
[   72.748349][ T6319] batadv0: mtu less than device minimum
[   72.753095][ T6319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.758627][ T6319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.763102][ T6319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.767569][ T6319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.772649][ T6319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.777638][ T6319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.782697][ T6319] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   72.812163][ T6324] batman_adv: batadv0: Adding interface: ip6gretap1
[   72.815096][ T6324] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.828335][ T6324] batman_adv: batadv0: Interface activated: ip6gretap1
[   72.918883][ T6330] netlink: 'syz.2.141': attribute type 7 has an invalid length.
[   72.927178][ T6330] netlink: 224 bytes leftover after parsing attributes in process `syz.2.141'.
[   72.993220][ T6335] warning: `syz.2.142' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.283668][ T6355] netlink: 'syz.0.145': attribute type 1 has an invalid length.
[   73.310048][ T6355] gretap1: entered allmulticast mode
[   73.316404][ T6355] bond1: (slave gretap1): making interface the new active one
[   73.320722][ T6355] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   73.368509][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'.
[   73.425166][ T6364] netlink: 'syz.0.147': attribute type 2 has an invalid length.
[   73.811349][ T6401] netlink: 'syz.1.150': attribute type 4 has an invalid length.
[   74.203259][ T6437] netlink: 'syz.2.159': attribute type 4 has an invalid length.
[   74.563350][ T6460] netlink: 'syz.1.167': attribute type 7 has an invalid length.
[   74.900747][ T6480] netlink: 'syz.0.173': attribute type 27 has an invalid length.
[   75.303092][ T6495] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   75.617444][ T6509] __nla_validate_parse: 8 callbacks suppressed
[   75.617462][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'.
[   75.663426][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'.
[   75.667113][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'.
[   75.673491][ T6511] netlink: 'syz.1.187': attribute type 15 has an invalid length.
[   75.854347][ T6521] bridge0: port 1(syz_tun) entered blocking state
[   75.857664][ T6521] bridge0: port 1(syz_tun) entered disabled state
[   75.861179][ T6521] syz_tun: entered allmulticast mode
[   75.870906][ T6521] syz_tun: entered promiscuous mode
[   75.877050][ T6521] bridge0: port 1(syz_tun) entered blocking state
[   75.880169][ T6521] bridge0: port 1(syz_tun) entered forwarding state
[   75.887571][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.192'.
[   75.887953][ T6521] netlink: 'syz.1.191': attribute type 10 has an invalid length.
[   75.897838][ T6521] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.902939][ T6521] team0: Device bond0 failed to register rx_handler
[   76.062107][ T6525] netlink: 'syz.0.193': attribute type 13 has an invalid length.
[   76.065120][ T6525] netlink: 'syz.0.193': attribute type 17 has an invalid length.
[   76.096154][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'.
[   76.129007][ T6538] xfrm0: entered promiscuous mode
[   76.132696][ T6538] xfrm0: entered allmulticast mode
[   76.164937][ T6525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.213113][ T6545] netlink: 'syz.1.198': attribute type 1 has an invalid length.
[   76.215741][ T6545] netlink: 232 bytes leftover after parsing attributes in process `syz.1.198'.
[   76.224389][ T6525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.318304][ T6550] netlink: 44 bytes leftover after parsing attributes in process `syz.2.200'.
[   76.426107][ T6561] netlink: 5 bytes leftover after parsing attributes in process `syz.2.200'.
[   76.598255][ T6576] netlink: 36 bytes leftover after parsing attributes in process `syz.1.208'.
[   76.637476][ T6578] netlink: 64 bytes leftover after parsing attributes in process `syz.1.209'.
[   76.645148][ T6578] tipc: Started in network mode
[   76.646941][ T6578] tipc: Node identity be006509c993, cluster identity 4711
[   76.649595][ T6578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.652464][ T6578] syzkaller0: entered promiscuous mode
[   76.654267][ T6578] syzkaller0: entered allmulticast mode
[   76.666846][ T6577] tipc: Resetting bearer <eth:syzkaller0>
[   76.678288][ T6577] tipc: Disabling bearer <eth:syzkaller0>
[   76.787614][ T6581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.856454][ T6586] netlink: 'syz.0.213': attribute type 1 has an invalid length.
[   77.016678][ T6595] netlink: 'syz.0.216': attribute type 4 has an invalid length.
[   77.126557][ T6602] netlink: 'syz.0.218': attribute type 1 has an invalid length.
[   77.145881][ T6602] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.158241][ T6602] bond3: (slave gretap2): making interface the new active one
[   77.162124][ T6602] bond3: (slave gretap2): Enslaving as an active interface with an up link
[   77.179778][ T6602] syz.0.218 (6602) used greatest stack depth: 19816 bytes left
[   77.307287][ T6611] team0: Device gtp0 is up. Set it down before adding it as a team port
[   77.427825][ T6618] netlink: 'syz.0.223': attribute type 1 has an invalid length.
[   77.458295][ T6618] bond4 (unregistering): Released all slaves
[   77.464128][ T6624] netlink: 'syz.1.224': attribute type 13 has an invalid length.
[   77.514314][ T6624] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.521083][ T6624] net_ratelimit: 34 callbacks suppressed
[   77.521100][ T6624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.140212][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.985185][ T6733] bridge0: port 1(syz_tun) entered disabled state
[   78.995890][ T6733] bridge0: port 1(syz_tun) entered blocking state
[   78.998205][ T6733] bridge0: port 1(syz_tun) entered forwarding state
[   79.004126][ T6733] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   79.732917][ T6771] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   79.767133][ T6767] 8021q: adding VLAN 0 to HW filter on device bond4
[   79.817852][ T6773] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   79.998633][ T6786] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   80.443150][ T6817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.537602][ T6824] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   80.543321][ T6824] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   80.584657][ T6817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.596601][ T6826] ip6tnl1: entered allmulticast mode
[   81.011506][ T6830] __nla_validate_parse: 11 callbacks suppressed
[   81.011521][ T6830] netlink: 191 bytes leftover after parsing attributes in process `syz.0.278'.
[   81.445233][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'.
[   81.454615][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'.
[   81.576663][ T6841] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   81.597959][ T6841] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   81.629890][ T6845] bond0: option arp_validate: invalid value (18446744073491447809)
[   81.777820][ T6852] validate_nla: 5 callbacks suppressed
[   81.777832][ T6852] netlink: 'syz.0.287': attribute type 1 has an invalid length.
[   81.862812][ T6855] bond5: (slave geneve2): making interface the new active one
[   81.874062][ T6855] bond5: (slave geneve2): Enslaving as an active interface with an up link
[   81.876843][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   81.880278][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   81.883117][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   81.885975][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   81.927820][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'.
[   81.940398][ T6863] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   82.066939][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'.
[   82.085753][ T6855] syz.0.287 (6855) used greatest stack depth: 18776 bytes left
[   82.122149][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'.
[   82.145059][ T6875] IPv6: NLM_F_CREATE should be specified when creating new route
[   82.182246][ T6874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.186407][ T6874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.205722][ T6874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   82.284621][ T6874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.288259][ T6874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.296134][ T6874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   82.316355][ T6888] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   82.323852][ T6891] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   82.333339][ T6884] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   82.416589][ T6874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.424752][ T6874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.428532][ T6874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   82.505743][ T6874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.515909][ T6874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.522617][ T6874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   82.606485][ T6903] netlink: 'syz.1.299': attribute type 13 has an invalid length.
[   82.614629][ T6903] netlink: 'syz.1.299': attribute type 17 has an invalid length.
[   82.634002][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.636768][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   82.641471][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   82.648128][ T6903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.663198][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.666306][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   82.670297][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   82.685137][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.687743][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   82.691197][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   82.701596][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.704499][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   82.707308][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   82.786158][ T6918] IPv6: Can't replace route, no match found
[   82.795731][ T6919] netlink: 'syz.2.301': attribute type 4 has an invalid length.
[   82.800034][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'.
[   82.821092][ T6919] netlink: 'syz.2.301': attribute type 4 has an invalid length.
[   82.873098][ T6916] bond6: entered promiscuous mode
[   82.875528][ T6916] 8021q: adding VLAN 0 to HW filter on device bond6
[   83.020870][ T6929] netlink: 'syz.0.309': attribute type 7 has an invalid length.
[   83.024105][ T6929] netlink: 224 bytes leftover after parsing attributes in process `syz.0.309'.
[   83.083784][ T6934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.329771][ T6937] IPVS: Error connecting to the multicast addr
[   83.491594][ T6942] netlink: 'syz.2.311': attribute type 5 has an invalid length.
[   83.492105][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.311'.
[   83.510665][   T24] IPVS: starting estimator thread 0...
[   83.527715][ T6942] netlink: 676 bytes leftover after parsing attributes in process `syz.2.311'.
[   83.599534][ T6944] IPVS: using max 48 ests per chain, 115200 per kthread
[   83.618254][ T6946] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   83.623045][ T6946] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   83.766881][ T6952] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   83.771846][ T6952] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   83.832637][ T6955] netlink: 'syz.1.316': attribute type 7 has an invalid length.
[   84.030679][ T6968] sctp: [Deprecated]: syz.1.321 (pid 6968) Use of int in max_burst socket option.
[   84.030679][ T6968] Use struct sctp_assoc_value instead
[   84.127047][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   84.132971][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   84.151742][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   84.220874][ T6984] netlink: 'syz.1.328': attribute type 1 has an invalid length.
[   84.238510][ T6984] 8021q: adding VLAN 0 to HW filter on device bond4
[   84.270919][ T6984] bond4: (slave gretap1): making interface the new active one
[   84.276293][ T6984] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   84.320643][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   84.360679][ T6996] netlink: 'syz.0.332': attribute type 10 has an invalid length.
[   84.364932][ T6996] syz_tun: entered promiscuous mode
[   84.372139][ T6996] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   84.379322][ T5916] bond0: (slave syz_tun): interface is now down
[   84.384134][ T5916] bond0: now running without any active interface!
[   84.442608][ T7002] veth0_vlan: left promiscuous mode
[   84.446164][ T7002] veth0_vlan: entered promiscuous mode
[   84.457736][ T7002] team0: Device veth0_vlan failed to register rx_handler
[   84.856019][ T7023] erspan0: entered promiscuous mode
[   84.858270][ T7023] macvtap1: entered promiscuous mode
[   84.861900][ T7023] macvtap1: entered allmulticast mode
[   84.864253][ T7023] erspan0: entered allmulticast mode
[   84.939587][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   85.305645][ T7048] tipc: Started in network mode
[   85.307619][ T7048] tipc: Node identity 4, cluster identity 4711
[   85.319214][ T7048] tipc: Node number set to 4
[   85.457616][ T7056] syzkaller1: entered promiscuous mode
[   85.464934][ T7056] syzkaller1: entered allmulticast mode
[   85.622673][ T7069] geneve2: entered promiscuous mode
[   85.624823][ T7069] geneve2: entered allmulticast mode
[   86.470328][   T52] cfg80211: failed to load regulatory.db
[   86.730590][ T7120] veth0: entered promiscuous mode
[   86.741657][ T7120] veth0: left promiscuous mode
[   86.744654][ T7120] __nla_validate_parse: 91 callbacks suppressed
[   86.744664][ T7120] netlink: 236 bytes leftover after parsing attributes in process `syz.2.374'.
[   86.756606][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'.
[   86.825731][ T7125] validate_nla: 3 callbacks suppressed
[   86.825741][ T7125] netlink: 'syz.0.377': attribute type 10 has an invalid length.
[   86.831403][ T7125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.377'.
[   86.922891][ T7120] team0 (unregistering): Port device team_slave_0 removed
[   86.926575][ T7133] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   86.932533][ T7133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'.
[   86.935392][ T7120] team0 (unregistering): Port device team_slave_1 removed
[   86.943634][ T7120] team0 (unregistering): Port device netdevsim0 removed
[   86.967544][ T7125] team0: Failed to send options change via netlink (err -105)
[   86.971350][ T7125] team0: Port device geneve0 added
[   87.022541][ T7137] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   87.037693][ T7137] bond7: entered promiscuous mode
[   87.040913][ T7137] bond7: entered allmulticast mode
[   87.043047][ T7137] 8021q: adding VLAN 0 to HW filter on device bond7
[   87.116682][ T7145] can: request_module (can-proto-0) failed.
[   87.121460][ T7145] openvswitch: netlink: IP tunnel dst address not specified
[   87.191792][ T7153] openvswitch: netlink: IPv4 tun info is not correct
[   87.205754][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.2.388'.
[   87.246591][ T5295] udevd[5295]: worker [5859] terminated by signal 33 (Unknown signal 33)
[   87.250697][ T5295] udevd[5295]: worker [5859] failed while handling '/devices/virtual/block/loop0'
[   87.281131][ T7161] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   87.284419][ T7161] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   87.330004][ T7167] netlink: 92 bytes leftover after parsing attributes in process `syz.0.393'.
[   87.344911][ T7166] netlink: 64 bytes leftover after parsing attributes in process `syz.0.393'.
[   87.428665][ T7175] netlink: 92 bytes leftover after parsing attributes in process `syz.0.395'.
[   87.508481][ T7185] vxcan2: entered promiscuous mode
[   87.518129][ T7184] vxcan2: entered promiscuous mode
[   87.649692][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'.
[   87.733194][ T7198] netlink: 'syz.0.404': attribute type 3 has an invalid length.
[   87.943779][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'.
[   88.302204][ T7227] netlink: 'syz.1.412': attribute type 2 has an invalid length.
[   88.459242][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   88.638008][ T7231] netlink: 'syz.2.414': attribute type 1 has an invalid length.
[   88.678643][ T7231] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   88.685360][ T7231] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   88.694868][ T7231] bond1: (slave vcan1): making interface the new active one
[   88.698493][ T7231] bond1: (slave vcan1): Enslaving as an active interface with an up link
[   88.712502][ T7231] bond1: (slave vcan2): The slave device specified does not support setting the MAC address
[   88.720094][ T7231] bond1: (slave vcan2): Enslaving as a backup interface with an up link
[   88.728645][ T7231] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.886287][ T7241] bridge0: port 3(erspan0) entered blocking state
[   88.892661][ T7241] bridge0: port 3(erspan0) entered disabled state
[   88.946884][ T7243] IPVS: length: 209 != 304294099320
[   89.029344][ T7252] syzkaller0: entered promiscuous mode
[   89.031524][ T7252] syzkaller0: entered allmulticast mode
[   89.217238][ T7264] syzkaller1: entered promiscuous mode
[   89.222211][ T7264] syzkaller1: entered allmulticast mode
[   89.232286][ T7266] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   89.236152][ T7266] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   89.495088][ T5916] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.508347][ T5916] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.512908][ T5916] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.516734][ T5916] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.543127][ T7288] netlink: 'syz.1.438': attribute type 1 has an invalid length.
[   89.726544][ T7313] netlink: 'syz.1.446': attribute type 21 has an invalid length.
[   89.782662][ T7320] x9: renamed from bridge_slave_0 (while UP)
[   90.065254][ T7341] netlink: 'syz.0.459': attribute type 10 has an invalid length.
[   90.073487][ T7341] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   90.081081][ T7339] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   90.962178][ T7392] netlink: 'syz.1.476': attribute type 7 has an invalid length.
[   91.028809][ T7394] syz_tun: left allmulticast mode
[   91.033560][ T7394] syz_tun: left promiscuous mode
[   91.035365][ T7394] bridge0: port 1(syz_tun) entered disabled state
[   91.050484][ T7394] bond0: (slave bridge0): Releasing backup interface
[   91.183428][ T7402] netlink: 'syz.1.481': attribute type 30 has an invalid length.
[   91.790477][ T7433] __nla_validate_parse: 28 callbacks suppressed
[   91.790488][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[   91.798201][ T7433] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   91.814799][ T7433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.885628][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[   91.888951][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'.
[   91.914892][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'.
[   92.015627][ T7445] netlink: 'syz.0.493': attribute type 12 has an invalid length.
[   92.021225][ T7446] netlink: 'syz.0.493': attribute type 12 has an invalid length.
[   92.138939][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'.
[   92.241343][ T7463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.500'.
[   92.343097][ T7473] netlink: 140 bytes leftover after parsing attributes in process `syz.0.503'.
[   92.375043][ T7471] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.502'.
[   92.380336][ T7471] tap0: tun_chr_ioctl cmd 1074025677
[   92.382307][ T7471] tap0: linktype set to 804
[   92.391161][ T7471] gre3: entered allmulticast mode
[   92.428546][ T7477] tipc: New replicast peer: 0.0.0.0
[   92.431506][ T7477] tipc: Enabled bearer <udp:syz2>, priority 10
[   92.434856][ T7477] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   92.448590][ T7477] netlink: 'syz.0.505': attribute type 1 has an invalid length.
[   92.453675][ T7477] netlink: 224 bytes leftover after parsing attributes in process `syz.0.505'.
[   92.481902][ T7481] netlink: 'syz.2.506': attribute type 4 has an invalid length.
[   92.707568][ T7501] netlink: 'syz.2.513': attribute type 4 has an invalid length.
[   92.711938][ T7501] netlink: 17 bytes leftover after parsing attributes in process `syz.2.513'.
[   92.738614][ T7505] netlink: 'syz.0.515': attribute type 7 has an invalid length.
[   92.742707][ T7505] netlink: 'syz.0.515': attribute type 8 has an invalid length.
[   92.944377][ T7523] IPv6: sit1: Disabled Multicast RS
[   93.145515][ T7543] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.148919][ T7543] syzkaller0: entered promiscuous mode
[   93.153263][ T7543] syzkaller0: entered allmulticast mode
[   93.167259][ T7543] tipc: Resetting bearer <eth:syzkaller0>
[   93.173914][ T7541] tipc: Resetting bearer <eth:syzkaller0>
[   93.194749][ T7541] tipc: Disabling bearer <eth:syzkaller0>
[   93.401702][ T7566] netlink: 'syz.0.529': attribute type 4 has an invalid length.
[   93.415706][ T7566] netlink: 'syz.0.529': attribute type 4 has an invalid length.
[   93.430230][   T24] tipc: Node number set to 1101227161
[   93.496195][ T7575] delete_channel: no stack
[   93.557509][ T7583] syzkaller0: entered promiscuous mode
[   93.560710][ T7583] syzkaller0: entered allmulticast mode
[   93.564302][ T7578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.572465][ T7581] raw_sendmsg: syz.1.536 forgot to set AF_INET. Fix it!
[   93.592928][ T7578] tipc: Resetting bearer <eth:syzkaller0>
[   93.611261][ T7578] tipc: Disabling bearer <eth:syzkaller0>
[   93.643235][ T7588] IPv6: NLM_F_REPLACE set, but no existing node found!
[   93.917669][ T7612] 8021q: VLANs not supported on wg1
[   94.067682][ T7619] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.076060][ T7624] netlink: 'syz.2.550': attribute type 27 has an invalid length.
[   94.084710][ T7619] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.140280][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   94.188187][ T7619] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.193896][ T7619] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.257075][ T7627] syzkaller0: entered promiscuous mode
[   94.260853][ T7627] syzkaller0: entered allmulticast mode
[   94.300461][ T7619] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.304635][ T7619] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.387643][ T7619] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   94.392374][ T7619] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.712859][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.716228][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.734674][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.737550][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.747885][ T5871] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.752009][ T5871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.788501][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.792669][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.749799][ T7678] xt_l2tp: invalid flags combination: 0
[   96.855621][ T7680] __nla_validate_parse: 15 callbacks suppressed
[   96.855637][ T7680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.568'.
[   97.033801][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'.
[   97.041270][ T7682] netlink: 'syz.2.569': attribute type 2 has an invalid length.
[   97.183432][ T7697] netlink: 'syz.1.574': attribute type 1 has an invalid length.
[   97.229991][ T7704] netlink: 'syz.2.575': attribute type 10 has an invalid length.
[   97.233073][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.575'.
[   97.237262][ T7704] dummy0: entered promiscuous mode
[   97.253650][ T7704] batman_adv: batadv0: Interface deactivated: dummy0
[   97.256299][ T7704] batman_adv: batadv0: Removing interface: dummy0
[   97.263659][ T7704] bridge0: port 3(dummy0) entered blocking state
[   97.266385][ T7704] bridge0: port 3(dummy0) entered disabled state
[   97.268954][ T7704] dummy0: entered allmulticast mode
[   97.273809][ T7704] bridge0: port 3(dummy0) entered blocking state
[   97.276629][ T7704] bridge0: port 3(dummy0) entered forwarding state
[   97.339171][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   97.371395][ T7714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.579'.
[   97.504476][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.581'.
[   97.569737][ T7727] netlink: 'syz.1.581': attribute type 10 has an invalid length.
[   97.746160][ T7740] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   97.868254][ T7752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.590'.
[   97.987383][ T7759] netlink: 152 bytes leftover after parsing attributes in process `syz.1.593'.
[   98.148383][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.597'.
[   98.174761][ T7770] netlink: 'syz.0.595': attribute type 1 has an invalid length.
[   98.182562][ T7770] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.595'.
[   98.363434][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'.
[   98.767521][ T7781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.774102][ T7782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.076450][ T7799] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.082767][ T7799] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.196261][ T7805] netlink: 'syz.0.609': attribute type 7 has an invalid length.
[   99.847136][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.851798][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[   99.855291][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   99.859970][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.863222][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[   99.866986][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   99.878164][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.886543][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[   99.894416][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   99.909255][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.911940][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[   99.916458][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   99.937022][ T7825] netlink: 'syz.1.616': attribute type 32 has an invalid length.
[   99.941441][ T7830] netlink: 'syz.2.618': attribute type 1 has an invalid length.
[   99.963045][ T7830] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.967807][ T7826] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   99.968613][ T7830] netlink: 'syz.2.618': attribute type 1 has an invalid length.
[  100.005233][ T7830] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.074602][ T7842] netlink: 'syz.2.621': attribute type 7 has an invalid length.
[  100.276512][ T7857] xt_policy: neither incoming nor outgoing policy selected
[  100.337972][ T7859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.483013][ T7869] bond6: entered promiscuous mode
[  100.485684][ T7869] 8021q: adding VLAN 0 to HW filter on device bond6
[  100.726653][ T7881] 8021q: VLANs not supported on ipvlan1
[  100.736934][ T7882] macsec2: entered promiscuous mode
[  100.738628][ T7882] macsec2: entered allmulticast mode
[  101.600619][ T7924] 8021q: adding VLAN 0 to HW filter on device bond7
[  101.615547][ T7924] gretap2: entered promiscuous mode
[  101.621528][ T7924] bond7: (slave gretap2): making interface the new active one
[  101.625701][ T7924] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  101.951425][ T7949] __nla_validate_parse: 20 callbacks suppressed
[  101.951440][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.655'.
[  101.961655][ T7949] netlink: 120 bytes leftover after parsing attributes in process `syz.2.655'.
[  102.103910][ T7960] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  102.180524][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.661'.
[  102.195689][ T7966] validate_nla: 6 callbacks suppressed
[  102.195705][ T7966] netlink: 'syz.0.662': attribute type 7 has an invalid length.
[  102.203222][ T7966] netlink: 224 bytes leftover after parsing attributes in process `syz.0.662'.
[  102.207139][ T7962] netlink: 152 bytes leftover after parsing attributes in process `syz.1.660'.
[  102.344760][ T7973] netlink: 1 bytes leftover after parsing attributes in process `syz.0.665'.
[  102.407798][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.667'.
[  102.495053][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.669'.
[  102.567633][ T7984] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.669'.
[  102.866101][ T8015] netlink: 'syz.0.677': attribute type 7 has an invalid length.
[  102.868869][ T8015] netlink: 224 bytes leftover after parsing attributes in process `syz.0.677'.
[  103.296076][ T8051] netlink: 'syz.1.687': attribute type 6 has an invalid length.
[  103.303582][ T8050] netlink: 'syz.2.688': attribute type 27 has an invalid length.
[  103.447879][ T8066] netlink: 'syz.1.692': attribute type 7 has an invalid length.
[  103.565152][ T8077] netlink: 'syz.1.697': attribute type 27 has an invalid length.
[  103.643867][ T8084] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  103.646786][ T8084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.758544][ T8093] netlink: 'syz.1.701': attribute type 1 has an invalid length.
[  103.778701][ T8093] 8021q: adding VLAN 0 to HW filter on device bond8
[  103.793740][ T8093] vlan2: entered promiscuous mode
[  103.795503][ T8093] bond8: entered promiscuous mode
[  103.797277][ T8093] vlan2: entered allmulticast mode
[  103.802089][ T8093] bond8: entered allmulticast mode
[  104.537706][ T8124] dummy0: left allmulticast mode
[  104.543592][ T8124] bridge0: port 3(dummy0) entered disabled state
[  104.548829][ T8124] bridge_slave_1: left allmulticast mode
[  104.551978][ T8124] bridge_slave_1: left promiscuous mode
[  104.554067][ T8124] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.585841][ T8124] x9: left allmulticast mode
[  104.587806][ T8124] x9: left promiscuous mode
[  104.599355][ T8124] bridge0: port 1(1x9) entered disabled state
[  104.758387][ T8133] netlink: 'syz.1.712': attribute type 33 has an invalid length.
[  105.132066][ T8168] netlink: 'syz.1.724': attribute type 9 has an invalid length.
[  105.259399][ T8184] bond0: (slave syz_tun): Releasing backup interface
[  105.275087][ T8184] team0: Port device geneve0 removed
[  105.278424][ T8184] bond1: (slave gretap1): Releasing active interface
[  105.286218][ T8184] bond3: (slave gretap2): Releasing active interface
[  105.293672][ T8184] bond5: (slave geneve2): Releasing active interface
[  105.323579][ T8194] netlink: 'syz.0.732': attribute type 21 has an invalid length.
[  105.423787][ T8200] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.468873][ T8200] bond9: (slave veth5): Enslaving as an active interface with a down link
[  105.494337][ T8200] 8021q: adding VLAN 0 to HW filter on device batadv1
[  105.503037][ T8200] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  105.580607][ T8209] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  106.110441][ T8234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.114783][ T8234] syzkaller0: entered promiscuous mode
[  106.116981][ T8234] syzkaller0: entered allmulticast mode
[  106.154134][ T8234] tipc: Resetting bearer <eth:syzkaller0>
[  106.166431][ T8234] tipc: Resetting bearer <eth:syzkaller0>
[  106.181806][ T8234] tipc: Disabling bearer <eth:syzkaller0>
[  107.166180][ T8255] __nla_validate_parse: 19 callbacks suppressed
[  107.166195][ T8255] netlink: 36 bytes leftover after parsing attributes in process `syz.1.755'.
[  107.258321][ T8259] validate_nla: 4 callbacks suppressed
[  107.258332][ T8259] netlink: 'syz.1.756': attribute type 7 has an invalid length.
[  107.263971][ T8259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.756'.
[  107.350390][ T8261] netlink: 'syz.0.757': attribute type 1 has an invalid length.
[  107.417864][ T8261] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  107.431561][ T8261] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  107.493213][ T8265] gretap3: entered promiscuous mode
[  107.496581][ T8265] bond10: (slave gretap3): making interface the new active one
[  107.509461][ T8265] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  107.527708][ T8270] netlink: 'syz.1.760': attribute type 21 has an invalid length.
[  107.531392][ T8270] netlink: 156 bytes leftover after parsing attributes in process `syz.1.760'.
[  107.601800][ T8273] netlink: 'syz.1.761': attribute type 27 has an invalid length.
[  107.756868][ T8285] netlink: 152 bytes leftover after parsing attributes in process `syz.0.765'.
[  107.928013][ T8292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.768'.
[  107.994195][ T8291] netlink: 'syz.1.767': attribute type 13 has an invalid length.
[  107.998702][ T8291] netlink: 'syz.1.767': attribute type 17 has an invalid length.
[  108.012674][ T8291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.122160][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'.
[  108.201699][ T8300] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  108.215300][ T8300] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  108.241977][ T8196] Set syz1 is full, maxelem 65536 reached
[  108.336320][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'.
[  108.340833][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'.
[  108.344438][ T8308] netlink: 'syz.0.773': attribute type 20 has an invalid length.
[  108.356542][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.360677][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'.
[  108.364157][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'.
[  108.367855][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.373762][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.377046][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.381189][ T8308] netlink: 'syz.0.773': attribute type 20 has an invalid length.
[  108.505284][ T8316] netlink: 'syz.2.776': attribute type 4 has an invalid length.
[  108.788627][ T8348] IPv6: NLM_F_CREATE should be specified when creating new route
[  108.892405][ T8361] netlink: 'syz.2.786': attribute type 13 has an invalid length.
[  108.945765][ T8361] dummy0: left promiscuous mode
[  108.950660][ T8361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.983465][ T8363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.996954][ T8363] syzkaller0: entered promiscuous mode
[  108.999364][ T8363] syzkaller0: entered allmulticast mode
[  109.029581][ T8361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.036485][ T8362] tipc: Resetting bearer <eth:syzkaller0>
[  109.058393][ T8362] tipc: Disabling bearer <eth:syzkaller0>
[  109.102136][ T8361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.898830][ T8384] 8021q: adding VLAN 0 to HW filter on device bond11
[  110.052844][ T8386] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  110.952489][ T8428] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  110.956756][ T8428] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  111.113138][ T8444] xt_socket: unknown flags 0xfc
[  111.295689][ T8456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.393775][ T8463] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  111.440969][ T8469] unknown channel width for channel at 909000KHz?
[  112.222894][ T8501] __nla_validate_parse: 13 callbacks suppressed
[  112.222909][ T8501] netlink: 212196 bytes leftover after parsing attributes in process `syz.1.833'.
[  112.315200][ T8505] validate_nla: 4 callbacks suppressed
[  112.315215][ T8505] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[  112.372053][ T8505] 8021q: adding VLAN 0 to HW filter on device bond4
[  112.386211][ T8509] bond4: (slave gretap2): making interface the new active one
[  112.390304][ T8509] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  112.417180][ T8509] syz.2.835 (8509) used greatest stack depth: 17496 bytes left
[  112.432696][ T8511] netlink: 'syz.1.837': attribute type 27 has an invalid length.
[  112.728739][ T8533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.845'.
[  112.778452][ T8539] netlink: 64 bytes leftover after parsing attributes in process `syz.0.846'.
[  112.784378][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.846'.
[  112.788018][ T8539] netlink: 64 bytes leftover after parsing attributes in process `syz.0.846'.
[  112.856362][ T8541] IPVS: length: 91191230 != 8
[  112.916252][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'.
[  113.318449][ T8545] netlink: 244 bytes leftover after parsing attributes in process `syz.2.847'.
[  113.660503][ T8558] syzkaller0: entered promiscuous mode
[  113.662681][ T8558] syzkaller0: entered allmulticast mode
[  114.988787][ T8579] netlink: 'syz.1.856': attribute type 7 has an invalid length.
[  114.997038][ T8579] netlink: 224 bytes leftover after parsing attributes in process `syz.1.856'.
[  115.095862][ T8590] xfrm0: left promiscuous mode
[  115.097520][ T8590] xfrm0: left allmulticast mode
[  115.105814][ T8594] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.861'.
[  115.135810][ T8596] netlink: 'syz.1.863': attribute type 1 has an invalid length.
[  115.151834][ T8596] 8021q: adding VLAN 0 to HW filter on device bond2
[  115.154653][ T8596] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  115.162038][ T8596] bond2: (slave vcan1): Error -95 calling set_mac_address
[  115.282983][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.288381][ T8602] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.292080][ T8602] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.354348][ T8602] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.360298][ T8602] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.385118][ T8605] netlink: 'syz.2.867': attribute type 10 has an invalid length.
[  115.403039][ T8605] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  115.444932][ T8602] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.448724][ T8602] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.507436][ T8608] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  115.561036][ T8602] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.567474][ T8602] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.683716][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.686422][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.697874][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.700895][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.723120][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.728480][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.744510][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.747268][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.765018][ T8612] netlink: 14 bytes leftover after parsing attributes in process `syz.2.869'.
[  115.994728][ T8612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.057649][ T8612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.067278][ T8612] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  116.076298][ T8612] bond0 (unregistering): Released all slaves
[  116.231012][ T8622] netlink: 'syz.1.872': attribute type 4 has an invalid length.
[  117.227828][ T8583] Set syz1 is full, maxelem 65536 reached
[  117.255008][ T8637] netlink: 'syz.0.878': attribute type 1 has an invalid length.
[  117.257486][ T8637] netlink: 'syz.0.878': attribute type 1 has an invalid length.
[  117.342932][ T8643] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.347262][ T8643] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  118.089937][ T8652] netlink: 'syz.0.884': attribute type 1 has an invalid length.
[  118.115595][ T8652] 8021q: adding VLAN 0 to HW filter on device bond12
[  118.126863][ T8652] bond12: (slave wlan0): Enslaving as an active interface with a down link
[  118.334570][ T8660] __nla_validate_parse: 1 callbacks suppressed
[  118.334585][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'.
[  118.357778][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'.
[  119.011509][ T8667] netlink: 'syz.0.889': attribute type 4 has an invalid length.
[  119.014834][ T8667] netlink: 17 bytes leftover after parsing attributes in process `syz.0.889'.
[  119.053510][ T8669] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  119.056677][ T8669] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[  119.215827][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'.
[  119.219001][ T8678] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.224911][ T8678] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.278077][ T8687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.307075][ T8687] syzkaller0: entered promiscuous mode
[  119.308858][ T8687] syzkaller0: entered allmulticast mode
[  119.312247][ T8687] tipc: Resetting bearer <eth:syzkaller0>
[  119.321540][ T8688] trusted_key: syz.0.893 sent an empty control message without MSG_MORE.
[  119.392894][ T8686] tipc: Resetting bearer <eth:syzkaller0>
[  119.631786][ T8691] netlink: 'syz.1.896': attribute type 4 has an invalid length.
[  119.634252][ T8691] netlink: 17 bytes leftover after parsing attributes in process `syz.1.896'.
[  120.362348][ T8686] tipc: Disabling bearer <eth:syzkaller0>
[  120.400344][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[  120.441522][ T8702] netlink: 'syz.2.899': attribute type 27 has an invalid length.
[  120.467971][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.900'.
[  120.487346][ T8707] netlink: 'syz.2.901': attribute type 10 has an invalid length.
[  120.490718][ T8709] netlink: 'syz.2.901': attribute type 10 has an invalid length.
[  120.495128][ T8706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'.
[  120.513876][ T8712] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  120.518190][ T8712] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  120.523820][ T8706] netlink: 'syz.2.901': attribute type 10 has an invalid length.
[  120.568091][ T8717] veth2: entered allmulticast mode
[  120.604528][ T8714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.904'.
[  120.826160][ T8733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.911'.
[  120.896210][ T8741] netlink: 'syz.1.914': attribute type 27 has an invalid length.
[  120.940578][ T8746] ..0: renamed from hsr0 (while UP)
[  120.956922][ T8746] ..0: entered allmulticast mode
[  120.958988][ T8746] hsr_slave_0: entered allmulticast mode
[  120.963362][ T8746] hsr_slave_1: entered allmulticast mode
[  120.966096][ T8746] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  121.034206][ T8757] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  121.037886][ T8757] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  121.042294][ T8753] tc_dump_action: action bad kind
[  121.115827][ T8768] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  121.157873][ T8769] syzkaller0: entered promiscuous mode
[  121.161981][ T8769] syzkaller0: entered allmulticast mode
[  121.250765][ T8782] unsupported nla_type 52263
[  121.313029][ T8788] blkio.reset_stats is deprecated
[  121.322663][ T8790] netlink: 'syz.0.931': attribute type 27 has an invalid length.
[  121.708584][ T8805] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  121.934679][ T8814] netlink: 'syz.2.940': attribute type 27 has an invalid length.
[  123.590807][ T8796] Set syz1 is full, maxelem 65536 reached
[  124.098995][ T8858] netlink: 'syz.1.952': attribute type 6 has an invalid length.
[  124.113673][ T8858] netlink: 'syz.1.952': attribute type 12 has an invalid length.
[  124.121544][ T8858] __nla_validate_parse: 4 callbacks suppressed
[  124.121554][ T8858] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.952'.
[  124.216946][ T8861] netlink: 'syz.1.953': attribute type 7 has an invalid length.
[  124.229123][ T8861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.953'.
[  124.486411][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.956'.
[  124.882847][ T8873] netlink: 'syz.0.957': attribute type 12 has an invalid length.
[  125.052517][ T8882] netlink: 152 bytes leftover after parsing attributes in process `syz.0.961'.
[  125.137573][ T8886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.963'.
[  125.594964][ T8907] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  125.598338][ T8907] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  125.656305][ T8909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.972'.
[  125.662814][ T8909] tipc: Invalid UDP bearer configuration
[  125.662842][ T8909] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  125.668682][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'.
[  125.695065][ T8909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.972'.
[  126.140121][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.200670][ T8912] openvswitch: netlink: IP tunnel TTL not specified.
[  126.995683][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'.
[  127.063961][ T8924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.066660][ T8924] syzkaller0: entered promiscuous mode
[  127.068522][ T8924] syzkaller0: entered allmulticast mode
[  127.104663][ T8924] netlink: 2 bytes leftover after parsing attributes in process `syz.0.977'.
[  127.114513][ T8924] tipc: Resetting bearer <eth:syzkaller0>
[  127.131352][ T8923] tipc: Resetting bearer <eth:syzkaller0>
[  127.145525][ T8923] tipc: Disabling bearer <eth:syzkaller0>
[  127.305521][ T8943] netlink: 'syz.2.983': attribute type 7 has an invalid length.
[  127.406020][ T8951] netlink: 'syz.2.985': attribute type 27 has an invalid length.
[  127.712862][ T8972] sctp: [Deprecated]: syz.1.991 (pid 8972) Use of int in max_burst socket option.
[  127.712862][ T8972] Use struct sctp_assoc_value instead
[  127.979453][ T8986] bridge5: port 1(veth9) entered blocking state
[  127.981883][ T8986] bridge5: port 1(veth9) entered disabled state
[  127.984575][ T8986] veth9: entered allmulticast mode
[  127.987806][ T8986] veth9: entered promiscuous mode
[  127.998470][ T8986] bridge5: port 2(veth0_to_bond) entered blocking state
[  128.002831][ T8986] bridge5: port 2(veth0_to_bond) entered disabled state
[  128.009611][ T8986] veth0_to_bond: entered allmulticast mode
[  128.012943][ T8986] veth0_to_bond: entered promiscuous mode
[  128.027902][ T8988] netlink: 'syz.2.996': attribute type 4 has an invalid length.
[  128.654542][ T9035] openvswitch: netlink: Unknown nsh attribute 0
[  128.657214][ T9035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.663351][ T9035] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  128.782291][ T9044] netlink: 'syz.1.1013': attribute type 27 has an invalid length.
[  129.014976][ T9067] netlink: 'syz.0.1021': attribute type 1 has an invalid length.
[  129.087745][ T5888] IPVS: starting estimator thread 0...
[  129.209729][ T9081] IPVS: using max 64 ests per chain, 153600 per kthread
[  129.215501][ T9089] syzkaller1: entered promiscuous mode
[  129.218569][ T9089] syzkaller1: entered allmulticast mode
[  129.275336][ T9093] __nla_validate_parse: 12 callbacks suppressed
[  129.275347][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  129.571120][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'.
[  129.952488][ T9111] netlink: 'syz.1.1034': attribute type 7 has an invalid length.
[  129.955667][ T9111] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1034'.
[  130.197299][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'.
[  130.206380][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'.
[  130.210298][ T9130] netlink: 'syz.1.1042': attribute type 15 has an invalid length.
[  130.285203][ T9141] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  130.290587][ T9141] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  130.417589][ T9148] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  130.483185][ T9148] batadv_slave_0: entered promiscuous mode
[  130.492632][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'.
[  130.498994][ T9148] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1050'.
[  130.502885][ T9148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1050'.
[  130.801278][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'.
[  131.068376][ T9175] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  131.081173][ T9175] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  131.281490][ T9196] netlink: 'syz.1.1064': attribute type 16 has an invalid length.
[  131.284625][ T9196] netlink: 'syz.1.1064': attribute type 3 has an invalid length.
[  131.287591][ T9196] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1064'.
[  131.295349][ T9198] netlink: 'syz.0.1065': attribute type 27 has an invalid length.
[  131.314369][ T9200] netlink: 'syz.1.1064': attribute type 16 has an invalid length.
[  131.324363][ T9200] netlink: 'syz.1.1064': attribute type 3 has an invalid length.
[  131.402457][ T9209] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.406295][ T9209] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.475671][ T9209] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.481860][ T9209] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.543293][ T9222] openvswitch: netlink: Flow key attr not present in new flow.
[  131.567622][ T9209] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.571724][ T9209] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.636812][ T9209] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.643573][ T9209] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.699755][ T5916] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.703770][ T5916] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.715606][ T5916] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.718660][ T5916] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.730617][ T5675] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.733616][ T5675] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.745371][ T5675] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.748447][ T5675] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.856142][ T9240] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  131.968381][ T9248] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  132.039978][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.044129][ T9256] netlink: 'syz.2.1082': attribute type 1 has an invalid length.
[  132.046961][ T9256] netlink: 'syz.2.1082': attribute type 1 has an invalid length.
[  132.326042][ T9282] netlink: 'syz.1.1086': attribute type 7 has an invalid length.
[  132.372297][ T9286] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  132.376669][ T9286] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  132.433544][ T9289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.440327][ T9288] smc: net device bond0 applied user defined pnetid SYZ2
[  132.543355][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.546660][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.649671][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.907850][ T9316] batadv0: entered promiscuous mode
[  132.909994][ T9316] batadv0: entered allmulticast mode
[  132.911970][ T9316] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  133.303191][ T9331] IPv6: NLM_F_CREATE should be specified when creating new route
[  133.543067][ T9356] ieee802154 phy0 wpan0: encryption failed: -22
[  133.562458][ T9356] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  133.568622][ T9360] ieee802154 phy0 wpan0: encryption failed: -22
[  133.570594][ T9356] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  133.794754][ T9379] bond12: (slave wlan0): Releasing active interface
[  133.806295][ T9379] bond9: (slave veth5): Releasing active interface
[  133.828749][ T9379] bond10: (slave gretap3): Releasing active interface
[  133.978809][ T9388] nft_compat: unsupported protocol 0
[  134.613166][ T9435] __nla_validate_parse: 15 callbacks suppressed
[  134.613181][ T9435] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1141'.
[  134.807713][ T9445] batadv_slave_1: entered promiscuous mode
[  134.824219][ T9444] batadv_slave_1: left promiscuous mode
[  134.870228][ T9443] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1145'.
[  134.874090][ T9443] openvswitch: netlink: Flow key attr not present in new flow.
[  134.874895][ T9449] syzkaller0: entered promiscuous mode
[  134.881922][ T9449] syzkaller0: entered allmulticast mode
[  134.916007][ T9447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.933881][ T9448] tipc: Resetting bearer <eth:syzkaller0>
[  134.951271][ T9448] tipc: Disabling bearer <eth:syzkaller0>
[  135.233548][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'.
[  135.248635][ T9472] validate_nla: 6 callbacks suppressed
[  135.248645][ T9472] netlink: 'syz.0.1155': attribute type 4 has an invalid length.
[  135.255010][ T9472] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1155'.
[  135.298880][ T9475] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1156'.
[  135.351523][ T9477] netlink: 'syz.2.1157': attribute type 13 has an invalid length.
[  135.357511][ T9477] netlink: 'syz.2.1157': attribute type 17 has an invalid length.
[  135.368429][ T9477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.377590][ T9476] xfrm0: entered promiscuous mode
[  135.381755][ T9476] xfrm0: entered allmulticast mode
[  135.428004][ T9484] tun0: tun_chr_ioctl cmd 2147767520
[  135.526122][ T9490] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1161'.
[  135.528979][ T9490] openvswitch: netlink: Flow key attr not present in new flow.
[  135.703980][ T9500] wg1: entered promiscuous mode
[  135.706284][ T9500] wg1: entered allmulticast mode
[  135.712158][ T9504] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1166'.
[  135.855998][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'.
[  135.914637][ T5871] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  136.452216][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'.
[  136.505731][ T9520] bridge4: the hash_elasticity option has been deprecated and is always 16
[  136.508854][ T9520] bridge4: entered allmulticast mode
[  136.702955][ T9530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1175'.
[  136.711480][ T9533] netlink: 'syz.2.1176': attribute type 27 has an invalid length.
[  137.102098][ T9569] netlink: 'syz.2.1188': attribute type 7 has an invalid length.
[  137.872065][ T9626] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  137.915421][ T9633] netlink: 'syz.1.1206': attribute type 7 has an invalid length.
[  137.972541][ T9637] openvswitch: netlink: Flow key attr not present in new flow.
[  138.046202][ T9641] openvswitch: netlink: Flow key attr not present in new flow.
[  138.078378][ T9643] vlan3: entered promiscuous mode
[  138.080929][ T9643] vlan3: entered allmulticast mode
[  138.083302][ T9643] hsr_slave_1: entered allmulticast mode
[  138.415176][ T9660] netlink: 'syz.0.1218': attribute type 27 has an invalid length.
[  138.537055][ T9667] syz_tun: left promiscuous mode
[  138.553370][ T9667] gretap1: left allmulticast mode
[  138.557502][ T9667] bond6: left promiscuous mode
[  138.560627][ T9667] bond7: left promiscuous mode
[  138.562721][ T9667] bond7: left allmulticast mode
[  138.582361][ T9667] gretap3: left promiscuous mode
[  138.627795][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.632401][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.636156][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.641211][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.071868][ T9688] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  139.395554][ T9697] netlink: 'syz.0.1230': attribute type 10 has an invalid length.
[  139.406494][ T9697] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  139.426347][ T9697] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  139.614370][ T9708] netlink: 'syz.0.1234': attribute type 1 has an invalid length.
[  139.634168][ T9708] 8021q: adding VLAN 0 to HW filter on device bond13
[  139.646226][ T9708] __nla_validate_parse: 16 callbacks suppressed
[  139.646244][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'.
[  139.652826][ T9708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'.
[  139.672567][ T9708] bond13: (slave gretap5): making interface the new active one
[  139.675994][ T9711] IPv6: NLM_F_CREATE should be specified when creating new route
[  139.676587][ T9708] bond13: (slave gretap5): Enslaving as an active interface with an up link
[  139.794347][ T9718] netlink: 'syz.0.1238': attribute type 10 has an invalid length.
[  139.994000][ T9729] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1243'.
[  140.291138][ T9749] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  140.295522][ T9749] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  140.316473][ T9751] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1251'.
[  140.389205][ T9755] tipc: Bearer <udp:syz>: already 2 bearers with priority 10
[  140.395443][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'.
[  140.398983][ T9755] tipc: Bearer <udp:syz>: trying with adjusted priority
[  140.405797][ T9755] tipc: Enabled bearer <udp:syz>, priority 9
[  140.454736][ T9758] bridge5: port 1(veth3) entered blocking state
[  140.457353][ T9758] bridge5: port 1(veth3) entered disabled state
[  140.463447][ T9758] veth3: entered allmulticast mode
[  140.467144][ T9758] veth3: entered promiscuous mode
[  140.481954][ T9763] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1254'.
[  140.511243][ T9764] netlink: 'syz.0.1256': attribute type 27 has an invalid length.
[  140.536978][ T9768] netem: change failed
[  140.551595][ T9768] netlink: 'syz.0.1258': attribute type 10 has an invalid length.
[  140.557995][ T5916] bond0: (slave wlan1): interface is now down
[  140.563039][ T9768] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.567607][ T9768] team0: Port device bond0 added
[  140.581385][ T5916] bond0: (slave wlan1): interface is now down
[  140.584531][ T5916] bond0: now running without any active interface!
[  140.665588][ T9779] netlink: 'syz.1.1257': attribute type 10 has an invalid length.
[  140.683388][ T9779] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  140.805594][ T9789] IPv6: NLM_F_CREATE should be specified when creating new route
[  141.006192][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'.
[  141.059998][ T9803] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1267'.
[  141.362981][ T9813] openvswitch: netlink: Missing key (keys=40, expected=80)
[  141.376372][ T9813] openvswitch: netlink: Missing key (keys=40, expected=80)
[  141.388699][ T9816] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1271'.
[  141.395501][ T9816] openvswitch: netlink: Flow key attr not present in new flow.
[  141.453852][ T9820] IPv6: NLM_F_CREATE should be specified when creating new route
[  141.507134][ T9823] netlink: 'syz.2.1274': attribute type 4 has an invalid length.
[  141.516416][ T9823] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1274'.
[  141.558278][ T9825] _Z`Ԁ@S: entered promiscuous mode
[  141.566210][ T9825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.600711][ T9829] openvswitch: netlink: Flow key attr not present in new flow.
[  141.652031][ T9833] netlink: 'syz.2.1279': attribute type 8 has an invalid length.
[  141.726806][ T9839] netlink: 'syz.1.1282': attribute type 4 has an invalid length.
[  141.913299][ T9856] IPVS: length: 180 != 24
[  141.916801][ T9856] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.994218][ T9859] netlink: 'syz.1.1290': attribute type 10 has an invalid length.
[  141.997406][ T9859] team0: entered promiscuous mode
[  142.118017][ T9874] netlink: 'syz.1.1297': attribute type 4 has an invalid length.
[  142.273799][ T9877] netlink: 'syz.2.1298': attribute type 12 has an invalid length.
[  142.374218][ T9884] delete_channel: no stack
[  142.385339][ T9884] delete_channel: no stack
[  142.458149][ T9909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.472956][ T9911] netlink: 'syz.2.1306': attribute type 3 has an invalid length.
[  142.487297][ T9911] macsec1: entered promiscuous mode
[  142.494864][ T9911] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  142.499802][ T9911] macsec1: entered allmulticast mode
[  142.502325][ T9911] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  142.679443][ T5952] tipc: Node number set to 2006148361
[  143.457116][ T9940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.507695][ T9949] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  143.515212][ T9949] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  143.584846][ T9948] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  144.603121][T10015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  144.683689][T10037] tap0: tun_chr_ioctl cmd 1074025677
[  144.685884][T10037] tap0: linktype set to 0
[  144.885971][T10055] __nla_validate_parse: 14 callbacks suppressed
[  144.885987][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'.
[  144.893451][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'.
[  145.082749][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'.
[  145.086165][T10069] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1350'.
[  145.091492][T10070] batadv_slave_1: entered promiscuous mode
[  145.107322][T10067] batadv_slave_1: left promiscuous mode
[  145.298885][T10099] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  145.303314][T10097] IPVS: stopping backup sync thread 10099 ...
[  145.365392][T10104] sctp: [Deprecated]: syz.0.1359 (pid 10104) Use of int in max_burst socket option deprecated.
[  145.365392][T10104] Use struct sctp_assoc_value instead
[  145.385003][T10104] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1359'.
[  145.496150][T10111] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  145.551675][   T54] Bluetooth: hci2: link tx timeout
[  145.554063][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  145.558137][   T54] Bluetooth: hci2: link tx timeout
[  145.561624][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  145.655955][T10110] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  145.916721][T10133] validate_nla: 4 callbacks suppressed
[  145.916735][T10133] netlink: 'syz.2.1371': attribute type 33 has an invalid length.
[  145.922910][T10133] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1371'.
[  146.130579][T10150] netlink: 'syz.0.1372': attribute type 10 has an invalid length.
[  146.293234][T10150] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.298706][T10150] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  146.302595][ T5916] bond0: (slave batadv0): interface is now down
[  146.320115][ T5916] bond0: (slave batadv0): interface is now down
[  146.339329][   T12] bond0: (slave batadv0): interface is now down
[  146.341943][   T12] bond0: now running without any active interface!
[  146.343619][T10152] netlink: 'syz.2.1375': attribute type 7 has an invalid length.
[  146.347658][T10152] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1375'.
[  146.408909][T10154] netlink: 'syz.1.1376': attribute type 1 has an invalid length.
[  146.425998][T10157] netlink: 'syz.2.1377': attribute type 27 has an invalid length.
[  146.432811][T10154] 8021q: adding VLAN 0 to HW filter on device bond11
[  146.481646][T10162] netem: unknown loss type 0
[  146.483846][T10162] netem: change failed
[  146.502501][T10163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.536661][T10154] bond11: (slave geneve2): making interface the new active one
[  146.541405][T10154] bond11: (slave geneve2): Enslaving as an active interface with an up link
[  146.665846][T10175] netlink: 'syz.1.1384': attribute type 7 has an invalid length.
[  146.677941][T10175] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1384'.
[  146.782615][T10190] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  146.793536][T10190] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  146.796600][T10190] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  146.804077][T10190] netlink: 'syz.0.1390': attribute type 10 has an invalid length.
[  146.904540][ T5871] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  146.917467][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'.
[  146.932075][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'.
[  147.171260][T10208] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.179748][T10208] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  147.182783][T10208] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  147.195889][T10208] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  147.204691][T10208] tipc: Resetting bearer <eth:syzkaller0>
[  147.347894][T10224] netlink: 'syz.2.1400': attribute type 27 has an invalid length.
[  147.502477][T10237] netlink: 'syz.1.1404': attribute type 2 has an invalid length.
[  147.517202][T10237] k*]: entered promiscuous mode
[  147.545619][T10241] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.579960][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  147.595082][T10237] team0: left promiscuous mode
[  147.602253][T10237] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  147.639474][T10237] veth0_to_team: entered promiscuous mode
[  147.641773][T10237] veth0_to_team: entered allmulticast mode
[  147.658500][T10237] Illegal XDP return value 16128 on prog  (id 312) dev syz_tun, expect packet loss!
[  147.725687][T10255] netlink: 'syz.2.1412': attribute type 7 has an invalid length.
[  147.902327][T10271] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.117176][T10279] 8021q: adding VLAN 0 to HW filter on device bond12
[  148.670223][T10322] ieee802154 phy0 wpan0: encryption failed: -22
[  148.836456][T10335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.844523][T10335] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.189751][T10353] ..1: renamed from ..0 (while UP)
[  149.194032][T10353] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  149.614865][T10369] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  149.620053][T10369] bond2: (slave vcan1): Error -95 calling set_mac_address
[  149.660354][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  149.686213][T10369] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  149.691459][T10369] bond2: (slave vcan1): Error -95 calling set_mac_address
[  149.741007][T10369] 8021q: adding VLAN 0 to HW filter on device bond2
[  149.819444][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  149.911007][T10390] __nla_validate_parse: 19 callbacks suppressed
[  149.911024][T10390] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1455'.
[  149.973268][T10396] netlink: 15538 bytes leftover after parsing attributes in process `syz.2.1459'.
[  150.031218][T10400] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  150.105243][T10405] batadv1: entered promiscuous mode
[  150.118625][T10403] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1462'.
[  150.227017][T10408] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  150.325154][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'.
[  150.443452][T10429] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1471'.
[  150.522519][T10434] sctp: [Deprecated]: syz.0.1473 (pid 10434) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.522519][T10434] Use struct sctp_sack_info instead
[  150.699392][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  150.702880][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  150.777220][T10454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1478'.
[  150.788249][T10454] openvswitch: netlink: Flow key attr not present in new flow.
[  150.815335][T10457] IPv6: sit2: Disabled Multicast RS
[  150.821824][T10459] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  150.825924][T10459] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  150.868184][T10463] ==================================================================
[  150.871390][T10463] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  150.874287][T10463] Read of size 2 at addr ffff88801c70c142 by task syz.2.1481/10463
[  150.877450][T10463] 
[  150.878732][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.2.1481 Not tainted syzkaller #0 PREEMPT(full) 
[  150.878750][T10463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.878760][T10463] Call Trace:
[  150.878767][T10463]  <TASK>
[  150.878774][T10463]  dump_stack_lvl+0x189/0x250
[  150.878802][T10463]  ? __kasan_check_byte+0x12/0x40
[  150.878815][T10463]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.878824][T10463]  ? lock_release+0x4b/0x3e0
[  150.878867][T10463]  ? __virt_addr_valid+0x4a5/0x5c0
[  150.878880][T10463]  print_report+0xca/0x240
[  150.878888][T10463]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  150.878898][T10463]  kasan_report+0x118/0x150
[  150.878910][T10463]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  150.878922][T10463]  __xfrm_state_lookup+0x6ad/0x8d0
[  150.878933][T10463]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  150.878945][T10463]  ? xfrm_state_lookup+0x45/0x1e0
[  150.878955][T10463]  xfrm_state_lookup+0x11e/0x1e0
[  150.878967][T10463]  xfrm_add_sa_expire+0x19c/0x4b0
[  150.878980][T10463]  ? __pfx_xfrm_add_sa_expire+0x10/0x10
[  150.878992][T10463]  ? __nla_parse+0x40/0x60
[  150.879000][T10463]  xfrm_user_rcv_msg+0x7a3/0xab0
[  150.879012][T10463]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  150.879030][T10463]  ? __pfx___mutex_trylock_common+0x10/0x10
[  150.879039][T10463]  ? rcu_is_watching+0x15/0xb0
[  150.879047][T10463]  ? trace_contention_end+0x39/0x120
[  150.879055][T10463]  ? __mutex_lock+0x335/0x1350
[  150.879065][T10463]  netlink_rcv_skb+0x208/0x470
[  150.879075][T10463]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  150.879087][T10463]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  150.879099][T10463]  ? netlink_deliver_tap+0x2e/0x1b0
[  150.879109][T10463]  xfrm_netlink_rcv+0x79/0x90
[  150.879125][T10463]  netlink_unicast+0x82f/0x9e0
[  150.879135][T10463]  ? __pfx_netlink_unicast+0x10/0x10
[  150.879143][T10463]  ? netlink_sendmsg+0x642/0xb30
[  150.879151][T10463]  ? skb_put+0x11b/0x210
[  150.879161][T10463]  netlink_sendmsg+0x805/0xb30
[  150.879173][T10463]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.879182][T10463]  ? aa_sock_msg_perm+0xf1/0x1d0
[  150.879190][T10463]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.879199][T10463]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.879207][T10463]  __sock_sendmsg+0x21c/0x270
[  150.879220][T10463]  ____sys_sendmsg+0x505/0x830
[  150.879230][T10463]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.879242][T10463]  ? import_iovec+0x74/0xa0
[  150.879252][T10463]  ___sys_sendmsg+0x21f/0x2a0
[  150.879263][T10463]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.879279][T10463]  ? __fget_files+0x2a/0x420
[  150.879286][T10463]  ? __fget_files+0x3a0/0x420
[  150.879294][T10463]  __x64_sys_sendmsg+0x19b/0x260
[  150.879304][T10463]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.879315][T10463]  ? rcu_is_watching+0x15/0xb0
[  150.879324][T10463]  ? do_syscall_64+0xbe/0x3b0
[  150.879334][T10463]  do_syscall_64+0xfa/0x3b0
[  150.879342][T10463]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.879350][T10463]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.879358][T10463]  ? exc_page_fault+0x9f/0xf0
[  150.879366][T10463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.879374][T10463] RIP: 0033:0x7f2240b8ebe9
[  150.879384][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.879391][T10463] RSP: 002b:00007f22419fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.879400][T10463] RAX: ffffffffffffffda RBX: 00007f2240dc5fa0 RCX: 00007f2240b8ebe9
[  150.879406][T10463] RDX: 00000000200008cc RSI: 0000200000000240 RDI: 0000000000000004
[  150.879411][T10463] RBP: 00007f2240c11e19 R08: 0000000000000000 R09: 0000000000000000
[  150.879416][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.879421][T10463] R13: 00007f2240dc6038 R14: 00007f2240dc5fa0 R15: 00007ffd77fc76f8
[  150.879431][T10463]  </TASK>
[  150.879434][T10463] 
[  150.889702][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1483'.
[  150.891380][T10463] Allocated by task 6021:
[  150.907509][T10465] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1483'.
[  150.908175][T10463]  kasan_save_track+0x3e/0x80
[  150.910326][T10465] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1483'.
[  150.912235][T10463]  __kasan_slab_alloc+0x6c/0x80
[  150.912261][T10463]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  150.912280][T10463]  xfrm_state_alloc+0x24/0x2f0
[  150.912292][T10463]  __find_acq_core+0x8a7/0x1c00
[  150.912309][T10463]  xfrm_find_acq+0x78/0xa0
[  151.044967][T10463]  xfrm_alloc_userspi+0x6b3/0xc90
[  151.046886][T10463]  xfrm_user_rcv_msg+0x7a3/0xab0
[  151.048869][T10463]  netlink_rcv_skb+0x208/0x470
[  151.050735][T10463]  xfrm_netlink_rcv+0x79/0x90
[  151.052618][T10463]  netlink_unicast+0x82f/0x9e0
[  151.054500][T10463]  netlink_sendmsg+0x805/0xb30
[  151.056401][T10463]  __sock_sendmsg+0x21c/0x270
[  151.058310][T10463]  ____sys_sendmsg+0x505/0x830
[  151.060193][T10463]  ___sys_sendmsg+0x21f/0x2a0
[  151.062056][T10463]  __x64_sys_sendmsg+0x19b/0x260
[  151.064064][T10463]  do_syscall_64+0xfa/0x3b0
[  151.065929][T10463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.068377][T10463] 
[  151.069365][T10463] Freed by task 9:
[  151.070908][T10463]  kasan_save_track+0x3e/0x80
[  151.072841][T10463]  kasan_save_free_info+0x46/0x50
[  151.074869][T10463]  __kasan_slab_free+0x5b/0x80
[  151.076842][T10463]  kmem_cache_free+0x18f/0x400
[  151.078784][T10463]  xfrm_state_gc_task+0x52d/0x6b0
[  151.080837][T10463]  process_scheduled_works+0xae1/0x17b0
[  151.083081][T10463]  worker_thread+0x8a0/0xda0
[  151.084882][T10463]  kthread+0x711/0x8a0
[  151.086511][T10463]  ret_from_fork+0x3fc/0x770
[  151.088401][T10463]  ret_from_fork_asm+0x1a/0x30
[  151.090341][T10463] 
[  151.091325][T10463] The buggy address belongs to the object at ffff88801c70c000
[  151.091325][T10463]  which belongs to the cache xfrm_state of size 928
[  151.096730][T10463] The buggy address is located 322 bytes inside of
[  151.096730][T10463]  freed 928-byte region [ffff88801c70c000, ffff88801c70c3a0)
[  151.102160][T10463] 
[  151.103176][T10463] The buggy address belongs to the physical page:
[  151.105722][T10463] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801c70d680 pfn:0x1c70c
[  151.109871][T10463] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  151.112994][T10463] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  151.115591][T10463] page_type: f5(slab)
[  151.116939][T10463] raw: 00fff00000000040 ffff888104c34c80 dead000000000122 0000000000000000
[  151.120310][T10463] raw: ffff88801c70d680 00000000800e000d 00000000f5000000 0000000000000000
[  151.123765][T10463] head: 00fff00000000040 ffff888104c34c80 dead000000000122 0000000000000000
[  151.127119][T10463] head: ffff88801c70d680 00000000800e000d 00000000f5000000 0000000000000000
[  151.130549][T10463] head: 00fff00000000002 ffffea000071c301 00000000ffffffff 00000000ffffffff
[  151.133850][T10463] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  151.137217][T10463] page dumped because: kasan: bad access detected
[  151.139367][T10463] page_owner tracks the page as allocated
[  151.141218][T10463] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6021, tgid 6020 (syz.2.28), ts 67213004231, free_ts 67192526327
[  151.146999][T10463]  post_alloc_hook+0x240/0x2a0
[  151.148492][T10463]  get_page_from_freelist+0x21e4/0x22c0
[  151.150491][T10463]  __alloc_frozen_pages_noprof+0x181/0x370
[  151.152770][T10463]  alloc_pages_mpol+0x232/0x4a0
[  151.154680][T10463]  allocate_slab+0x8a/0x370
[  151.156497][T10463]  ___slab_alloc+0xbeb/0x1420
[  151.158334][T10463]  kmem_cache_alloc_noprof+0x283/0x3c0
[  151.160382][T10463]  xfrm_state_alloc+0x24/0x2f0
[  151.161993][T10463]  __find_acq_core+0x8a7/0x1c00
[  151.163736][T10463]  xfrm_find_acq+0x78/0xa0
[  151.165137][T10463]  xfrm_alloc_userspi+0x6b3/0xc90
[  151.166676][T10463]  xfrm_user_rcv_msg+0x7a3/0xab0
[  151.168241][T10463]  netlink_rcv_skb+0x208/0x470
[  151.169890][T10463]  xfrm_netlink_rcv+0x79/0x90
[  151.171795][T10463]  netlink_unicast+0x82f/0x9e0
[  151.173502][T10463]  netlink_sendmsg+0x805/0xb30
[  151.175309][T10463] page last free pid 5861 tgid 5861 stack trace:
[  151.177867][T10463]  __free_frozen_pages+0xbc4/0xd30
[  151.179947][T10463]  __slab_free+0x303/0x3c0
[  151.181334][T10463]  qlist_free_all+0x97/0x140
[  151.182726][T10463]  kasan_quarantine_reduce+0x148/0x160
[  151.184385][T10463]  __kasan_slab_alloc+0x22/0x80
[  151.185854][T10463]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  151.187587][T10463]  getname_flags+0xb8/0x540
[  151.189454][T10463]  user_path_at+0x24/0x60
[  151.190966][T10463]  __x64_sys_umount+0xee/0x160
[  151.192598][T10463]  do_syscall_64+0xfa/0x3b0
[  151.194453][T10463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.196470][T10463] 
[  151.197470][T10463] Memory state around the buggy address:
[  151.199444][T10463]  ffff88801c70c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  151.202513][T10463]  ffff88801c70c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  151.205434][T10463] >ffff88801c70c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  151.208252][T10463]                                            ^
[  151.210709][T10463]  ffff88801c70c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  151.213576][T10463]  ffff88801c70c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  151.216412][T10463] ==================================================================
[  151.232951][T10463] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  151.235388][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.2.1481 Not tainted syzkaller #0 PREEMPT(full) 
[  151.238417][T10463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.242119][T10463] Call Trace:
[  151.243259][T10463]  <TASK>
[  151.244417][T10463]  dump_stack_lvl+0x99/0x250
[  151.246241][T10463]  ? __asan_memcpy+0x40/0x70
[  151.247940][T10463]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.249669][T10463]  ? __pfx__printk+0x10/0x10
[  151.251528][T10463]  vpanic+0x281/0x750
[  151.253055][T10463]  ? preempt_schedule+0xae/0xc0
[  151.255025][T10463]  ? __pfx_vpanic+0x10/0x10
[  151.256670][T10463]  ? preempt_schedule_common+0x83/0xd0
[  151.258426][T10463]  ? preempt_schedule+0xae/0xc0
[  151.259979][T10463]  ? __pfx_preempt_schedule+0x10/0x10
[  151.261665][T10463]  panic+0xb9/0xc0
[  151.263022][T10463]  ? __pfx_panic+0x10/0x10
[  151.264499][T10463]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  151.266628][T10463]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  151.268678][T10463]  check_panic_on_warn+0x89/0xb0
[  151.270614][T10463]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  151.272615][T10463]  end_report+0x78/0x160
[  151.274143][T10463]  kasan_report+0x129/0x150
[  151.275856][T10463]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  151.278028][T10463]  __xfrm_state_lookup+0x6ad/0x8d0
[  151.280125][T10463]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  151.282106][T10463]  ? xfrm_state_lookup+0x45/0x1e0
[  151.283785][T10463]  xfrm_state_lookup+0x11e/0x1e0
[  151.285514][T10463]  xfrm_add_sa_expire+0x19c/0x4b0
[  151.287268][T10463]  ? __pfx_xfrm_add_sa_expire+0x10/0x10
[  151.289484][T10463]  ? __nla_parse+0x40/0x60
[  151.291283][T10463]  xfrm_user_rcv_msg+0x7a3/0xab0
[  151.293305][T10463]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  151.295520][T10463]  ? __pfx___mutex_trylock_common+0x10/0x10
[  151.297937][T10463]  ? rcu_is_watching+0x15/0xb0
[  151.299999][T10463]  ? trace_contention_end+0x39/0x120
[  151.302150][T10463]  ? __mutex_lock+0x335/0x1350
[  151.304060][T10463]  netlink_rcv_skb+0x208/0x470
[  151.305986][T10463]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  151.308243][T10463]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  151.310420][T10463]  ? netlink_deliver_tap+0x2e/0x1b0
[  151.312549][T10463]  xfrm_netlink_rcv+0x79/0x90
[  151.314511][T10463]  netlink_unicast+0x82f/0x9e0
[  151.316617][T10463]  ? __pfx_netlink_unicast+0x10/0x10
[  151.318776][T10463]  ? netlink_sendmsg+0x642/0xb30
[  151.320774][T10463]  ? skb_put+0x11b/0x210
[  151.322479][T10463]  netlink_sendmsg+0x805/0xb30
[  151.324403][T10463]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.326503][T10463]  ? aa_sock_msg_perm+0xf1/0x1d0
[  151.328628][T10463]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  151.330741][T10463]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.332839][T10463]  __sock_sendmsg+0x21c/0x270
[  151.334643][T10463]  ____sys_sendmsg+0x505/0x830
[  151.336604][T10463]  ? __pfx_____sys_sendmsg+0x10/0x10
[  151.338776][T10463]  ? import_iovec+0x74/0xa0
[  151.340641][T10463]  ___sys_sendmsg+0x21f/0x2a0
[  151.342576][T10463]  ? __pfx____sys_sendmsg+0x10/0x10
[  151.344450][T10463]  ? __fget_files+0x2a/0x420
[  151.345977][T10463]  ? __fget_files+0x3a0/0x420
[  151.347559][T10463]  __x64_sys_sendmsg+0x19b/0x260
[  151.349262][T10463]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  151.351445][T10463]  ? rcu_is_watching+0x15/0xb0
[  151.353377][T10463]  ? do_syscall_64+0xbe/0x3b0
[  151.355140][T10463]  do_syscall_64+0xfa/0x3b0
[  151.356907][T10463]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.358699][T10463]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.360933][T10463]  ? exc_page_fault+0x9f/0xf0
[  151.362838][T10463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.364883][T10463] RIP: 0033:0x7f2240b8ebe9
[  151.366300][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.373286][T10463] RSP: 002b:00007f22419fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  151.376283][T10463] RAX: ffffffffffffffda RBX: 00007f2240dc5fa0 RCX: 00007f2240b8ebe9
[  151.379232][T10463] RDX: 00000000200008cc RSI: 0000200000000240 RDI: 0000000000000004
[  151.382451][T10463] RBP: 00007f2240c11e19 R08: 0000000000000000 R09: 0000000000000000
[  151.385579][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  151.388929][T10463] R13: 00007f2240dc6038 R14: 00007f2240dc5fa0 R15: 00007ffd77fc76f8
[  151.392226][T10463]  </TASK>
[  151.394240][T10463] Kernel Offset: disabled
[  151.396037][T10463] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:23:32  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000124f RDI=0000000000001250 RBP=00000000000003f8 RSP=ffffc90006856a30
R8 =ffff8880210c0237 R9 =1ffff11004218046 R10=dffffc0000000000 R11=ffffffff854f5590
R12=dffffc0000000000 R13=ffffffff99b02910 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f560c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f22419fa6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c289838 CR3=000000010ec86000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2240d97498 00007f2240d97470 XMM03=00007f2240d974a8 00007f2240d974a0
XMM04=00007f22418fd100 00007f2240d97460 XMM05=00007f2240d97478 00007f2240d974c0
XMM06=00007f2240d974b8 00007f2240d974b0 XMM07=00007f2240d974a8 00007f2240d974a0
XMM08=0000000000000000 00007f2240c12ee7 XMM09=0000000000000000 00007f2240c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff822e3ec6 RBX=0000000000034d91 RCX=ffff8881060a9cc0 RDX=0000000080000002
RSI=ffffffff8be33860 RDI=0000000000034d91 RBP=0000000000034d91 RSP=ffffc90003b87308
R8 =0000000000000000 R9 =ffffffff822e5b4d R10=dffffc0000000000 R11=fffff940001a6c89
R12=ffffffff822e5b4d R13=0000000000000000 R14=0000000000034d91 R15=0000000000000001
RIP=ffffffff81bfae68 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555571dfb500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f68b14f56c0 CR3=0000000020e6c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f68b0812e53
XMM06=0000000000000000 00007f68b0812e4d XMM07=0000000000000000 00007f68b0812e61
XMM08=0000000000000000 00007f68b0812ee7 XMM09=0000000000000000 00007f68b0812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
