last executing test programs:

2.745988526s ago: executing program 1 (id=2596):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000e800c"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000067"], 0x28}, 0x1, 0x0, 0x0, 0x44844}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:'], 0x9)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x8, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001e40)=ANY=[@ANYBLOB="6000000010000304fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e4470600a04d060028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="9423000040100100080020002f00000008001f000400000008000a0064"], 0x60}, 0x1, 0xba01}, 0x0)

2.559200834s ago: executing program 1 (id=2598):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000001}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) (rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2300, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001040)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async)
r11 = socket(0x1, 0x803, 0x3)
getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r13 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="840100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e080000000008f30977f34a2f212227352c03ad25ad874e3031ca84cac5c194e56483da169496dfdd6537576dc55ca26c992ffaa0a6b449b620a5cdefbd78d0dc383520463a1af6f6c19dbcef51493917b7864dd60b468bc8e8100fc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r12], 0x54}}, 0x0) (async, rerun: 64)
r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@struct={0x2, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x1, 0x4, 0x8}, {0x8}]}, @float={0x3, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x2e]}}, &(0x7f0000000700)=""/140, 0x4b, 0x8c, 0x0, 0x2c42, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000300000018280000", @ANYRES32=r1, @ANYBLOB="00000000615b0000b7080000000000007b8af8ff00000000b708000000ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000400000018120000", @ANYRES32=r1, @ANYBLOB="00000000000000000600000000000000850000000c000000b70000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x80, 0x0, &(0x7f0000000200), 0x40f00, 0x8, '\x00', r5, 0x0, r14, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r1], &(0x7f0000000680)=[{0x3, 0x3, 0x6, 0x9}, {0x0, 0x5, 0x5, 0xb}], 0x10, 0x4}, 0x94)

2.558318808s ago: executing program 1 (id=2599):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xff, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6fd5, 0x1a05db2f, 0x1, 0x8, 0x1, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xf, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.48866028s ago: executing program 1 (id=2600):
r0 = socket(0x10, 0x80003, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095080000000000002f7e71b5618f1ee16af22a7508b5d9eaa029e273bfc7f2b2bab0ad8f84c88946ee24c18a521dcf22eeed227f18732444499c827bb71f9a8029951edeb471e9008e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
unshare(0x2a020400)
socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="344317b69d1dd9692598fa4194d5db52a7aa92f4c72af3406bee0758dca318427498f8499841042df5366f1566938c6c8b56", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000004}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@empty, 0x0, 0x4}}, 0xe8)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14)
socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x5, @private1, 0x2}}, 0x8, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x9, 0x4, 0x2, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x20000c04)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0x3, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0xffffffff, 0x0, 0x8}, 0x3, 0x0, 0x5, 0xffffffff, 0x9, 0x1, 0x12, 0x19, 0xfd, 0x87, {0x7, 0x7, 0x2, 0x0, 0xe9ac, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

1.699409902s ago: executing program 0 (id=2605):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
read(r1, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r3 = socket(0x1e, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
accept4$x25(r3, 0x0, 0x0, 0x0)
r4 = socket(0x8, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r4, 0x0, 0x0)
r5 = socket(0x8, 0x1, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x61f0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x2b, 0x29, 0xf0a, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0xd, 0x6}, {0x4, 0xa}}}, 0xd}, 0x1, 0x0, 0x0, 0x4840}, 0x4004881)
ioctl$SIOCX25SFACILITIES(r0, 0x891e, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
readv(r2, &(0x7f0000000540)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000480)=""/6, 0x6}, {&(0x7f00000004c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/21, 0x15}], 0x6)
unshare(0x400)

1.609807412s ago: executing program 1 (id=2607):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x2b61, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=@newlink={0x28, 0x10, 0x1, 0x4, 0xfffffffe, {0x0, 0x0, 0x0, r3, 0x14001}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6071, 0x0, 0xe7}}}}}}, 0x0)

1.540615534s ago: executing program 1 (id=2608):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e000000000000000000000000800000a5fc00", @ANYRES32], 0x50)
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff2e, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x41448000)
recvmmsg$unix(r4, &(0x7f0000003540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000300)=""/132, 0x84}, {&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000540)=""/150, 0x96}, {&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000780)=""/76, 0x4c}, {&(0x7f0000000080)=""/11, 0xb}], 0x7, &(0x7f0000000100)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000200)}, {&(0x7f0000000900)=""/67, 0x43}, {&(0x7f00000003c0)=""/5, 0x5}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/88, 0x58}, {&(0x7f0000001a00)=""/247, 0xf7}], 0x6, &(0x7f0000001b80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001c00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000001c80)=""/175, 0xaf}, {&(0x7f0000001d40)=""/142, 0x8e}, {&(0x7f0000001e00)=""/115, 0x73}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/145, 0x91}], 0x5, &(0x7f0000002fc0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003000), 0x6e, &(0x7f00000033c0)=[{&(0x7f0000003080)=""/93, 0x5d}, {&(0x7f0000003100)=""/153, 0x99}, {&(0x7f00000031c0)=""/179, 0xb3}, {&(0x7f0000003280)=""/50, 0x32}, {&(0x7f00000032c0)=""/203, 0xcb}], 0x5, &(0x7f0000003440)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x4, 0x4874272aaae473d7, &(0x7f0000003640)={0x0, 0x3938700})

1.538405807s ago: executing program 2 (id=2609):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
bind$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x3, @mcast2}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x7, 0x6, {{0x9, 0x4, 0x2, 0x5, 0x24, 0x67, 0x0, 0x62, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@end, @timestamp_prespec={0x44, 0xc, 0xee, 0x3, 0x1, [{@private=0xa010101, 0x80}]}]}}}}}) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000087fdad0073b222a6478a51eb070000006aef00ff000000000c00000000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x20, r5, 0x5, 0x3, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}}, 0x4000000) (async)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r12 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) (async)
sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553)

1.480422314s ago: executing program 2 (id=2610):
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r3, &(0x7f0000008540)=[{{&(0x7f00000003c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)="f65dc06008d337ca6fd32a87b23b0ca6bdc47c2376b33da264e4f3b29a6f69e471ce8ce4915f96f45cd95d6d7bb25a5d1935311a22cb83a740933811571e33b9b12eb04e33857edd74046f37dad45aa05856f1258d8164077bbdaf9f9768c8d4527c20b152ca1eca5af8375e2bb69b4c12111578afd5e2d8fb76232243047f10c721d6ba7005e4cd404da032df95f8a7eeab95ed03fd9af6498db22cb911672bae0e39bfb06932d147d8b43a7cfdc1dfae9fcde4171ebac9c4afd0fd5ed9770e25436ac53bd76fade4df192d0c43d190d70142a51c331aca9493", 0xda}, {&(0x7f0000000500)="33ec018e56a7a77bf15e3505922de3cd9dde6edc4bf0dd8e213688043915ea3cc1d17c4f1c1d6f26282d3574cd75f0c404e9b908ed9d9a3821133abde4cd9cc088108de429a0e6c31b51405d92c31330d3fb2cd008081d73c34e057bce558ecd238d36b4e0d35bd8386a982dab9e1b8028d9923c24cce616fd6f3ca09e7dc11cc5d7e1b48640ef257c5ec4a7863467ced819e54fa728ad1aefa35ceff4c082e26df0c8e8d325a13d4576878e4f4de96a4d68b1953264afb998c70d6ce1", 0xbd}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000007c0)="0719e04580973538763c12dc18f7b6596b22664c023d6682605bd1df28ea6efac733c5d99e7974507ffd1671b0d32a23194a9022b6b3758f307ae2a925c92066fa5e707281a1946f16c1adbc675ecf2efa8aacd7634ababa18681f11ce89f326c69f455f039a86f54f8fc653fa2893d4fabd22a6ebed2cde81d573468736a549445a35c0c456fb22efb0f3d522010f5f1a4e5377e892783be31446f3e2", 0x9d}, {&(0x7f0000000880)="823f0a739f732953914b48ef43c38390024a706ac204da022813bbd421b65104311d8fdf55b485c594f8dd817cf0037e130bbd8c96bdf6cd8884c4dd67e6b80cb650be47176dd2f4a37c556cae68a1d3648d94bcf9ff7d5bb55fcd8bdb3060c1737fead174c67fd75a1a61b9e2e1cde130433eac2c9795a47417da8f9d35bd8d3a20a9a63b28b9c54607e10546f6c388df16daee86b86817ac6ef2d7f392411aec011db6c3f4f9eb17", 0xa9}, {&(0x7f0000000d40)}], 0x6, &(0x7f0000002d40)}}], 0x2, 0x40)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20)
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r6, 0x6, 0x4, 0x0, &(0x7f0000000240))
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000050030000090a030000000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d04001280080003400000011008000c400000edd8f802098060000280040001803c000180080001400000000108000140000001d0080001400000000008000140000000090800014000000009080901400000800008000140000000091c000180080001407fffffff0800014000009af7080081400000000708000140000003ff700002802c"], 0x398}}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000080)="bbb376b7bd831c7c00000000000000000000000000000000000000000000ef0b00000000000000", 0x27}, {&(0x7f00000000c0)="c7a26c6b1e38a32eff9d181ee85612ba049bc3593c8fc0ae8f1a079bae667206c90cc3c5342e80a962de9b78a4c5ee0aa6aeff35", 0x34}], 0x3}, 0x0)

1.280994123s ago: executing program 2 (id=2611):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0xb17b}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x3f00}, 0x0)

1.147698338s ago: executing program 2 (id=2612):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x408d4)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x437, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x437, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.056760863s ago: executing program 0 (id=2613):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r0=>0x0})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0xfffffffffffffd00}, 0xfffffffffffffded)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1)
close(r2)

987.899724ms ago: executing program 2 (id=2614):
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a05000000000000000000010000050900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb884700000000000000000000000000000000000000004904007f006700000206b0a0f4ecacacbae3c914bb00000081e000000200000004ffffffff0000092cac1414aa000000090044209b20ffff00080000000200000006000000c8000000070000000000000000000000000000000000080000004e2000004e2400"/165], 0xa5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040002, &(0x7f0000003700)={0x77359400})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', <r6=>0x0})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000006c0)=<r7=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e20, 0x0, 0x4e20, 0x5, 0xa, 0x120, 0xa0, 0x0, r6, r7}, {0x4498a236, 0x7, 0x1, 0x29085b9a, 0x3, 0x6, 0xe5, 0x6}, {0x7f, 0x8, 0xa3da, 0x6}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d3, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3507, 0x0, 0x0, 0xb2, 0x9ac, 0x80000001, 0x854}}, 0xe8)
bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe)
connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route(r8, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x5, 0xd, 0x9}, 0x8)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
close(0x3)

865.45315ms ago: executing program 0 (id=2615):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f00000000c0)=0x68) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0)

829.74427ms ago: executing program 0 (id=2616):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={<r1=>r0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000012c0)={<r7=>0x0, 0x1, 0x7, [0x7, 0x9, 0x3, 0xc, 0x9, 0x100, 0x4]}, &(0x7f0000001300)=0x16)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001340)={0x2, 0xd1, 0x30d, 0x8, 0x4, 0x2, 0x400, 0x4, r7}, &(0x7f0000001480)=0x20)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=r4], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
close(r8)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1908000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af0fff1000000b5090000000000007b9af0ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018260000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0], 0xec}}, 0x0)

150.285173ms ago: executing program 0 (id=2617):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64)
setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 64)
close(r7) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000018000100000000000080000002002000fc000009000c000008000400", @ANYRES32, @ANYBLOB="080010000800000008000b000500000006001d004e24000008001e001f"], 0x64}}, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xd769, 0x2, 0x49b, 0x7, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0x2, 0xb}, {0x5, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4010004) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

485.361µs ago: executing program 2 (id=2618):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETGROUP(r2, 0x400454ce, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', <r5=>0x0, 0x80, 0x40, 0x1, 0x80000000, {{0x9, 0x4, 0x1, 0x1f, 0x24, 0x64, 0x0, 0x1a, 0x29, 0x0, @private=0xa010101, @multicast1, {[@lsrr={0x83, 0xb, 0xec, [@multicast1, @remote]}, @generic={0x89, 0x5, "e48ea2"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000001c0)={'tunl0\x00', r5, 0x7, 0x7, 0x9, 0x4, {{0xe, 0x4, 0x1, 0x1, 0x38, 0x64, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ssrr={0x89, 0xb, 0x7e, [@broadcast, @broadcast]}, @end, @timestamp_addr={0x44, 0x14, 0xab, 0x1, 0x0, [{@local, 0x7}, {@multicast1, 0x8}]}, @ra={0x94, 0x4}]}}}}})
r6 = socket(0x10, 0x80003, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000f0f0000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

0s ago: executing program 0 (id=2619):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f00000002c0)=0x100000001, 0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0xb, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3}, {0x8, 0x8e, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240000c4}, 0xc000)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="d2235b328be20185497a5dfdd4767b782ad536ca0f63431c3eb4280103660a83dba7233aa6501a3807de0d5efb72afcff5a13cff69cd2e430d96dd32ab3a140bcc2e2f798d3bbb8483cd2cb4c4cc1d3777981d89362163a5ceeb79c1ada2d947eb4fa5e4da93c0fd7dda4f57712e82a00c58d1bdad7fc408b594eaff29742e0b801c559e44ddce9c13a4a81e48722d1df287efbefd499f1f72d3567024a8292004f0e88631cbf156128d59589f53c0183f6e176dee2e2a14", 0xb8}, {&(0x7f00000004c0)="37b9a993525203e79e9f581eee28225fadbd451e430e32d84c42128766a00ce71db41581dde8305c738c8509e93d67591820ce38c26e9213dc0756d40502ff2c3a1d365073a195bfa1cc366a5150778899e525ce0a29fec4bc4b63e40f4d47ff1f36f1b40c41712013ed159d5379ad3372dada160a2a667d37c0336f2e97100b05cf67619e413f00585823a37cc151c82349343caf9ad2f7056d04eb158ea7f22ea613f277650f0c71f4798f789f2945baa3abb6368062", 0xb7}, {&(0x7f0000000200)="1ba01a349c6b6d0e4bcd175aa89df8026d39ca7637586010e2254144271b27a55e710c185fcc53f565051d1577c6870ac8080d358240ce88b87b8c509726b60d35df5bf00189676fefa2bc34bb317e3937134aa9c9603638f7b0b7a836615519064908c41d6f623b906c5d87a37a5029", 0x70}, {&(0x7f0000000d40)="51b0a62af84c56e84d75789a6f4ad33fb7961e9ca1062684e6d9e6dfd63d7a0000c6c5862eace63ea6b549767d75392b8ecac830f601915d3e4fb68cdcdc57935f3cfb663b8864bad3040c8236d865e631dfdd142112f76467afbb9e830e64b6188012b4039fbfe26f5b428c6d27345198a30b74df5bec0ed2f50482e76e89348feca5c6a4218b1d4d9cd91cd43895ce2dc82b4820ae2f92dda39cc6b78a53a8f941fb66dfbd1bc3b996a807c530b147615469039b24edf17073a1a86261e2f4da44139120129d7db53201fda96e6dd7f9ae44ed70620066dbf67b0149ce325c364059fb95f290ae150579defefe40c8df94c88aaa660330d3fed5a533e8a25cad6c3bb7d468ad5fe477627799c9250ecba820cbd3216d5ad835fca96561a0e6cd10efbdef611f66f3fd46d40d0051bcc6b7fe7f30c1fe38428e54e8ce9b63624ded77857515449f90179cf99f6343f89f475ab07bbd654deb307799083fc2a34d8af8fde25ad466f67a8bc3f5571366b645bb2fea531261772ffd0fc2d87985c9213df199ae65160c97b14fe5cc7ed77b8f0bdbb7592ecc8e6db0c732728c0f7c603b052237b859f85bdb5cf927b8ebb80547cbce415c5c02b9ee012a69ac73982978b337d8d387c367780fad4d76719ccc73b9a4138a028dc1a3f67638e60d013f68e799279980c9fb5cec1ceae866f8a2ad6746630aea57b2fe7b4c38c9b7ff37f5d86ccfa84758ef257b03a4f5babb7ac0301dda85c3d7abff6c3fa2d65a910b76a9834eaebdf2ffeb09de44bc91e857775ead911e5322257c800c204afb8526ee3777e079a76fa3e46eee18a4277fbd50b315e272cc420a67c6ff3b5b95a9467252fcd2a5b2c263cae7e3dc7f79396c27990409dfbb3fdd5a61007058132d7bcbe9dcd192b916c0a57a84fc03074f915134f22b0ba466c3238e2c3d60de1477f547631c1402d19bf0e6a09758bdee59755c171a9b2009b4fa5e6a5dded16bcab94b6a8d23ccb845455c285fbb4517a49e580e24e6a67cc8ea607d3781065e419217db3030d89f66de782e0c0713d62c878995c8b9772465c113767092e1a8f4098c256227c381ffbac4acfd7f2a0c693b90fc59c118bbf99788dce699cfffcf0be143ba583bf5d8a9a8daad79d008d6f8e70b84b58ab46d0035d711a0f3d141520d513d4033599b037b7e4de829904eb0999e7a114da64549175691745194bb75241cc3415744a481018f244a263dc9114574692c7de8be0d2f4884c24c89282a16fa2370d2b985b16762522d1ecb2cfafbabdb09d4476ba97416e85e51f4c717c74937ca9cbb02bcc3f1703600266f277104c96900324834f826623aa648e65657b7ec80919b9477f0b67ec4941627faa49e7dee9bfbb5550834a1e5846654953706733af33d2e18d02dfc0ffd966a1d4a710afdbf454f2e10ebbb1b83741131aac04e22b1d2ffc2ba3b2f5c4ae6f0bfd7ce81be2a7c6f01e42d59711754841d7368d0e18580340945d55358369b7289b0f4cebce5fd99ce20e1c1bb7a0f71be910ea4047e85105a1d1fc07799957ea899715b2898e658164fb34804e86185271c6846c1693cccc04dbc4c4b30cc55eb92ffa28619034411c1a3667fdc31b473959422271e7dd3c8ec740516aaa30187d8a8197792f73605be88ad4eb344b96371dc258378782cd9988cba10de0e447b2ca9bc030da623c8bcff4d05df4698c12443a97b2c64fc3018d4a5dc741370805a6196a8bf6ef5f677600e91f210e110d6753036055ca02fda0438a93516b88888631218a1b661bc440e8ddb23758bb18166850cce5a3636cea744790adce96e49c45b6f2b65cd5e2d181900c715a03b2a64f14e766fc2cc2944e89f88bcf2dc2b974f765d4d6a95877c5759b6772e8a64e024a65c4bdb12fd2ce9d491a697fa545ac71b28e34624d08eb2a2208e9e0bcdfb981ea998a11cc34d327211529d1623762a5f7d63d4559c33561b4affd7362f4c57dd7cf1acedec6f1d3688b22a9c7e1949acdb8c7d08a0fd15f8e7ebf60ed816e94dd02dfbb1840b71d7de01f55201eced7229bdc1443029000ca599846997f0eb1348b2282458e04a7343a957de368d702763eb712c789d97f2659c3d877a7ed1696145205d59ca8d2c5c1e0bdcbcb17f057e71051446c263899efc2d7fd2bf2daed3a47325aeb5448d01939cfdb54ad0853e178f2f5c31e2ebc1f03340253545ed0bc0dcbd14abddad16ee0f45d9a7538c492cc5ca01cb296d05dd522ae39fd242b48b653bc2838b55ef209578fb6edee3ecab7aebfeb8476c49a2d841bba27c79ee28a6015f00eafc89104e75d94fbac29b199986491cbe4ac7956f107ff457afe0b16c192af08c8cb6bd88882afd093cda16c0cccfae2a9745f970bcaa231dc831ece69b286175af8d66948f80333e823328444a64cc105a39632812bb48ae57aef67e0f017c7531d8fa851669397605178dc4eac7be6026a4f81ded7358b48fa437b45da17eb342956623162f94f56361974bdee60618407116817db8e135f87daa4a9ea100d34198e3785a298fc33b54f66c2f24fbba24d49a55c0405ec5fdea3b47a703020d56fe31708ea2bcde045c01b7541e233ccfbdf7ffe6ba0add59e8e95c9fcf39745e84be65da8df5b774f91648aa49505eafca7bd116df807bac3e22e1489342325149321121061612a8debb86d31a7800b212294c78dacb9d31325de5c3ca32bb4606b9729ba8ce6ab5fc4a47f39582494204e547ed694fa36688b529bef8b882bc3edcf4c416723f46ac7810b729da03953d2c72628b1852e71ad4450798973f21acd6794c88e6a72bbb824b1b435798c030b031b563c016f3f7c37ab159e5f4e8d9cf949b06bd05901b2240545bb6769b2e8b75fb2c19e1c6915c49cfea57ddf64266688369a6535fb53fee7bc8a10d78db1c4c0f4a15a30bed7d1bc5106e6efece2c788b4eb18629e85b68c0459bf472f33cb8eb0c73253f4a7d5e101eab4f99edc8d4bb983a105bcaeefea26232c3135bb23d3899bba48b186c3bf65f8ede604267798660af06b9c3cd513e79752df4427c7336574c041d69bb799b7ef72617a0226f26202e57e65df828e78ef39fc12359e3563a7b111f416286097721d83962995d425c47328f1103a027774024cb5e161eaf6793eb2e6e527970b714d78ca68ba14bb145dbee00b45a8e2456e106b71ce6f940e09587dc279b760bcfe34f7db9385cb26dfdf10ab78f495f847c3ae24a8b3ebf2485367c02bd69b5d0660401c21bf52f6a9c14efd6a7ad9cfab1165a6a7824cb17fd0255344eeff83dd3e6726033b549c11aba99b267e383709513f6eb19ebe303402a619cb9093ef8dd8ad91752e87f02d786d7955b441737ecc1af6e458d9dcd328d06158c9fa335735cf6d30c67c75cf6f982859c5ff21ab3b2fa9728b9e526acf1f50b75554086cc2c26b30b15f33551601e201097bebbc6e30ea0082a30fe8740d0ba98f7210352237f8933704bf2ef0a35890cd05ad6d0a2b533af3cc3d7f370b2f34b346aa9916efe703825c6793ccaeaf42593e9b8c6e9b6f2047c164e760e4ce67725c0e09de8bf2ab88fc7ab9592d2241b31f95411e734c4a6a1ab55d386a633768801e240bb17d70fa2b1ff6a31af8dbae743b966a3307324a60e8152b7e934dd3f44dc1c5eedd4b7010a7342b884a14f914790fe0397a415977660b4117d1363c1c878596fe28b871fa8e9935c4da1f114c0b5930b164f137e0261c868e32065469cf42e2f2718f1ae34f02ce8cdf4905541b1ad4f7942e3577c6b68e4769d4aacce611881de7222766b6b4f954c5ecbbaf135f9bf68df9f188918759bdd7d302f430e55b4ace35ca064415a522ecf5cfa2ae516add5bdc2cc2bef7e087770806b5f3836130a2eba0fecca91b73e0331c5a9989dd4ea71a78f72ca96a586638fa48b0fcf670c251925aa6e35d40674ce061960a1c141a380f20bd9cad7f4592d9352d18e7380910703e8dee5e589475bedc826ae9fd2368676359d2dd88328fd72fb1b460c2fd2bfd6ecea6f526b44c2029626e2d37bd4cdf7e2a0fa1fe020185a612adf7bbdcf00c8047451bfc90d5dc34545b23cb96ec946442e20105f0b0ba7e426b995ce324542e99e76b73e8ace02404d0b8899a03dbdc631f2821c1ce48992149720b0acf82c1897250196de81ce1d64740f6df75e067aab96b132066809b2cebfd3d6bbc71f1a609f4c3139c1476630cf0523f171f96e96cf6067bb6fff309d410c81e2258a2822e9008d13d0738512ea30aa32e8a03599bb87c3b359714c76c5c387f6879ac5c32bb5c597fb4e5f51f3de0714504a2332ae068e9e6cef0a6b83214b7414cce5fbe4ff6000298769237443a730cecadadc4e97d8d57bc6975a94ac0f0a5c4cf0726817cda9bce72bc105fcff344fd62562f8bc39e26a83e2340ea2fd336395a37832cd43fc5111af721213406371ab1ed7fbf8f23f955fa58600c913c8107b46ae5fcf9d19f34e604bcaea08f2d854c43b555feb1cca13de5cacf85c51a2483008ea77236bae2b1990182ec4c6436f8ccda8a315fa9f494677d3579af41707f00d07e453231a28bf46dad623ea39ca80e3c8826d967f5e3c945ff71e15a0a5ea9a7f9c54f810b0b1ddecba4f6439a1f591075f9ed8c09ed49e94c9a3cda9530c852e08e58e6d4aa746352ea2260e10b23a5f0932f6c63e5cb4069fc263b5b48b7d85ddd5eb9996d4201959df0d4140bc63035b6fe16c88c0a0367e71613fba956c948c9b099b255f342e7f1eb69ace178717ef7a5d4d47f6fa2811221859fa445a37fe3007e983e384f650467e266e6e6d4f2726718fa4e23de593a547665a8a03bc85404e2d5e855425d3009a3f46187387e2f79b8cee6aa657fabdc8c8c43e348ec1a4ae1e6139c13027cd2a4885e82b28cb983bc60f56f90cd5fec58e48e4de8c72b072bde58ef8b38cc5643b5b35101e66ef5ecbff4f79dba808692c2369f69b070d3b99c0ab481df9975bd267d6dd1c9bb83981a3c548fe9d66489151381a929e3d1fa6dd0249ae01c102d423fea236600e4d982019661a0ce96a45297052879042f33e2d6e2cb92991335d234b5addec9944ebc934162d9b3b04986a62a564916f3f54f29aaad1e0b05901755350f3573ff47be89b24f8b676a6506091423cdd8675abac99e9d9302672637c2df360c69d9df7f3ef67a541c55a4a0b69526cb02850f9f9c756808cc373124137d89b955abc14c4b91a0035dd5ce72fb8818b558bb482b7b06fa3572e0d9eed2736f0c8a40e32019548632e5a30bfebfd1bf86cc7ea4c7581680c4d396f71ac1fdfd67fb146d1636b8fc2c754d5df810a95dfbb80e2ac2b4a1a64e49ae1bdf15ebf568723d74e771d57417a4a3aa30270c1553f0766649b34de77c363aab71e1ee1bda798dd68ec55d5a048f5d80ac4310586898429765766f33d3df62335c50d39d4f427c2527bc2cd23d73e32d847becaf632e5aaf59ca721d07d0075a58dfb6a0402692fde29912f7375ae59ac0dfa8258d8e6ad3f222ed1529adc84b6039af04c6ed34cb408619f899b93db27eef9b2d136b13633cc1408c1844f069a066f6daedc9195d8b99afdd4f2ee032ea7adcb65369ff6e174f8e79a1feb782afeb7cf7005b2d9fb79b2d980c6708707e3485f3521d08d9215858b98aaac809f2d594c421fdd578e2fb267fcb295a0cafbb0dc6417cddfa557b79162c261941cf8f59278d7570cd116d2a21421ac63a5fb25ed80fa36423887384d7f0ea4", 0x1000}], 0x4, 0x4, 0x5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r7}, 0x10)
close(r0)

kernel console output (not intermixed with test programs):

32764][T11932] sctp: [Deprecated]: syz.2.1461 (pid 11932) Use of struct sctp_assoc_value in delayed_ack socket option.
[  185.132764][T11932] Use struct sctp_sack_info instead
[  185.279526][T11946] netlink: 'syz.2.1461': attribute type 4 has an invalid length.
[  185.302740][T11945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.332948][T11947] bond29 (unregistering): Released all slaves
[  185.343979][T11945] syzkaller0: entered promiscuous mode
[  185.345935][T11945] syzkaller0: entered allmulticast mode
[  185.374602][T11945] tipc: Resetting bearer <eth:syzkaller0>
[  185.564395][T11937] tipc: Resetting bearer <eth:syzkaller0>
[  185.577719][T11937] tipc: Disabling bearer <eth:syzkaller0>
[  185.707598][T11973] bond29: (slave geneve4): Releasing active interface
[  185.733033][ T5914] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.736404][ T5914] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.739617][ T5914] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.749629][ T5914] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  185.792677][T11979] bond30: Removing last ns target with arp_interval on
[  185.813554][T11987] netlink: 'syz.2.1471': attribute type 10 has an invalid length.
[  185.823821][T11987] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  185.826842][T11987] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.945600][T11990] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  185.955575][T12000] __nla_validate_parse: 25 callbacks suppressed
[  185.955591][T12000] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1476'.
[  185.972298][T12000] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1476'.
[  185.987718][    T9] IPVS: starting estimator thread 0...
[  186.068533][T12009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.077864][T12009] tipc: Resetting bearer <eth:syzkaller0>
[  186.081559][T12003] IPVS: using max 64 ests per chain, 153600 per kthread
[  186.147492][T12019] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1479'.
[  186.215652][T12024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1480'.
[  186.268655][T12030] netlink: 'syz.0.1481': attribute type 1 has an invalid length.
[  186.286685][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'.
[  186.305502][T12030] 8021q: adding VLAN 0 to HW filter on device bond29
[  186.342262][T12030] bond29: (slave veth23): Enslaving as an active interface with a down link
[  186.357679][T12030] macvlan0: entered promiscuous mode
[  186.359491][T12030] macvlan0: entered allmulticast mode
[  186.362206][T12030] bond29: entered promiscuous mode
[  186.364292][T12030] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  186.366919][T12030] bond29: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  186.372750][T12030] bond29: left promiscuous mode
[  186.463459][T12042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.524916][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'.
[  186.571298][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'.
[  186.596295][T12051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.613354][T12051] syzkaller0: entered promiscuous mode
[  186.615428][T12051] syzkaller0: entered allmulticast mode
[  186.621596][T12051] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  186.630366][T12055] openvswitch: netlink: Flow key attribute not present in set flow.
[  186.642299][T12051] tipc: Resetting bearer <eth:syzkaller0>
[  186.650155][T12050] tipc: Resetting bearer <eth:syzkaller0>
[  186.681059][T12050] tipc: Disabling bearer <eth:syzkaller0>
[  186.683337][T12057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1490'.
[  186.932340][T12077] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1496'.
[  186.979455][T12082] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  187.061808][ T2317] tipc: Node number set to 4286840842
[  187.099473][T12091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1498'.
[  187.453650][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.461818][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.467870][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.478153][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.650427][T12116] netlink: 'syz.1.1504': attribute type 1 has an invalid length.
[  187.655113][T12116] netlink: 'syz.1.1504': attribute type 10 has an invalid length.
[  187.661597][T12116] team0: Port device dummy0 added
[  187.664155][T12116] netlink: 'syz.1.1504': attribute type 10 has an invalid length.
[  187.676177][T12116] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  187.687572][T12116] team0: Failed to send options change via netlink (err -105)
[  187.690946][T12116] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  187.694884][T12116] team0: Port device dummy0 removed
[  187.743902][T12124] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.772686][T12123] delete_channel: no stack
[  187.803745][T12134] gtp2: entered promiscuous mode
[  187.805884][T12134] gtp2: entered allmulticast mode
[  187.818786][T12133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.822904][T12133] syzkaller0: entered promiscuous mode
[  187.825159][T12133] syzkaller0: entered allmulticast mode
[  187.908323][T12131] tipc: Resetting bearer <eth:syzkaller0>
[  187.928668][T12131] tipc: Disabling bearer <eth:syzkaller0>
[  187.935769][T12141] bridge0: failed insert local address into bridge forwarding table
[  187.938431][T12142] netlink: 'syz.0.1511': attribute type 1 has an invalid length.
[  188.138384][T12152] bond31: entered promiscuous mode
[  188.143832][T12152] 8021q: adding VLAN 0 to HW filter on device bond31
[  188.276275][T12163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.295824][T12163] syzkaller0: entered promiscuous mode
[  188.297575][T12163] syzkaller0: entered allmulticast mode
[  188.342930][T12163] tipc: Resetting bearer <eth:syzkaller0>
[  188.359141][T12162] tipc: Resetting bearer <eth:syzkaller0>
[  188.387934][T12162] tipc: Disabling bearer <eth:syzkaller0>
[  188.729661][T12211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.733098][T12210] syzkaller0: entered promiscuous mode
[  188.734997][T12210] syzkaller0: entered allmulticast mode
[  188.738647][T12213] nbd: must specify a size in bytes for the device
[  188.744104][T12211] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  188.759534][T12210] tipc: Resetting bearer <eth:syzkaller0>
[  188.768196][T12208] tipc: Resetting bearer <eth:syzkaller0>
[  188.789394][T12208] tipc: Disabling bearer <eth:syzkaller0>
[  189.142792][T12234] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  189.212446][T12241] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  189.249400][T12242] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.266646][T12250] bridge0: entered allmulticast mode
[  189.319218][T12242] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.394697][T12242] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.456798][T12242] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.470124][T12267] netlink: 'syz.2.1541': attribute type 1 has an invalid length.
[  189.493552][T12267] netlink: 'syz.2.1541': attribute type 4 has an invalid length.
[  189.548264][ T5880] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  189.565736][ T5880] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  189.584710][ T5880] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  189.596181][ T5880] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  189.797856][T12283] 8021q: adding VLAN 0 to HW filter on device bond32
[  189.801907][T12283] bridge0: port 2(bond32) entered blocking state
[  189.804984][T12283] bridge0: port 2(bond32) entered disabled state
[  189.807821][T12283] bond32: entered allmulticast mode
[  189.813092][T12283] bond32: entered promiscuous mode
[  189.815206][T12283] bond29: entered promiscuous mode
[  189.817479][T12283] bridge0: port 2(bond32) entered blocking state
[  189.819571][T12283] bridge0: port 2(bond32) entered forwarding state
[  189.827843][   T27] bridge0: port 2(bond32) entered disabled state
[  189.833955][T12288] dummy0: entered promiscuous mode
[  189.836979][T12288] team0: entered promiscuous mode
[  189.839346][T12288] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  189.842813][T12288] hsr0: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  189.847326][T12288] bridge0: port 3(hsr0) entered blocking state
[  189.849366][T12288] bridge0: port 3(hsr0) entered disabled state
[  189.851816][T12288] hsr0: entered allmulticast mode
[  189.853518][T12288] dummy0: entered allmulticast mode
[  189.855268][T12288] team0: entered allmulticast mode
[  189.858427][T12288] hsr0: entered promiscuous mode
[  190.268540][T12309] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002
[  190.356971][ T5239] Bluetooth: hci2: link tx timeout
[  190.358742][ T5239] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  190.362575][ T5239] Bluetooth: hci2: link tx timeout
[  190.364712][ T5239] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  190.424718][T12316] netlink: 'syz.2.1552': attribute type 2 has an invalid length.
[  191.060649][ T5239] Bluetooth: hci0: command 0x0406 tx timeout
[  191.070118][ T5854] Bluetooth: hci1: command 0x0406 tx timeout
[  191.311781][T12332] __nla_validate_parse: 49 callbacks suppressed
[  191.311798][T12332] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1556'.
[  191.319480][T12329] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.334661][T12329] tipc: Resetting bearer <eth:syzkaller0>
[  191.413572][T12337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.840647][T12340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1559'.
[  192.065739][T12346] netlink: 'syz.0.1561': attribute type 7 has an invalid length.
[  192.073582][T12346] : entered promiscuous mode
[  192.154149][T12356] dvmrp0: left allmulticast mode
[  192.422733][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[  192.732381][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'.
[  192.987672][T12393] netlink: 'syz.2.1573': attribute type 1 has an invalid length.
[  193.006471][T12394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.017214][T12393] bond30: (slave geneve5): making interface the new active one
[  193.021697][T12393] bond30: (slave geneve5): Enslaving as an active interface with an up link
[  193.024784][T12394] syzkaller0: entered promiscuous mode
[  193.025984][T12393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1573'.
[  193.026568][T12394] syzkaller0: entered allmulticast mode
[  193.027485][ T5880] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  193.036884][T12393] 8021q: adding VLAN 0 to HW filter on device bond30
[  193.039331][T12394] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  193.048591][ T5880] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  193.051824][ T5880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  193.055296][ T5880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  193.061746][T12394] tipc: Resetting bearer <eth:syzkaller0>
[  193.066385][T12392] tipc: Resetting bearer <eth:syzkaller0>
[  193.081717][T12392] tipc: Disabling bearer <eth:syzkaller0>
[  193.211965][T12407] netlink: 'syz.0.1579': attribute type 1 has an invalid length.
[  193.238545][T12407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1579'.
[  193.244070][T12407] 8021q: adding VLAN 0 to HW filter on device bond30
[  193.329926][T12418] netlink: 'syz.0.1580': attribute type 1 has an invalid length.
[  193.353889][T12418] 8021q: adding VLAN 0 to HW filter on device bond31
[  193.389136][T12425] netlink: 'syz.1.1581': attribute type 1 has an invalid length.
[  193.393812][T12425] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1581'.
[  193.554709][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1583'.
[  193.560023][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1583'.
[  193.743444][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'.
[  193.816165][T12444] hsr0: left allmulticast mode
[  193.818323][T12444] dummy0: left allmulticast mode
[  193.820664][T12444] team0: left allmulticast mode
[  193.822789][T12444] hsr0: left promiscuous mode
[  193.824903][T12444] bridge0: port 3(hsr0) entered disabled state
[  193.830670][T12444] bond32: left allmulticast mode
[  193.832843][T12444] bond32: left promiscuous mode
[  193.835043][T12444] bridge0: port 2(bond32) entered disabled state
[  193.838623][T12444] bond29: left promiscuous mode
[  193.843260][T12444] bond29: left allmulticast mode
[  193.845776][T12444] bridge0: port 1(bond29) entered disabled state
[  224.018532][T12465] netlink: 'syz.0.1586': attribute type 1 has an invalid length.
[  224.024680][T12465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.033039][T12469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1587'.
[  224.036491][T12469] netlink: 'syz.1.1587': attribute type 21 has an invalid length.
[  224.101434][T12473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.104764][T12473] syzkaller0: entered promiscuous mode
[  224.107156][T12473] syzkaller0: entered allmulticast mode
[  224.165643][T12488] netlink: 'syz.2.1593': attribute type 39 has an invalid length.
[  224.169372][T12488] netlink: 'syz.2.1593': attribute type 39 has an invalid length.
[  224.174377][T12488] netlink: 'syz.2.1593': attribute type 39 has an invalid length.
[  224.178443][T12488] netlink: 'syz.2.1593': attribute type 39 has an invalid length.
[  224.183177][T12488] netlink: 'syz.2.1593': attribute type 39 has an invalid length.
[  224.196103][T12488] netlink: 'syz.2.1593': attribute type 39 has an invalid length.
[  224.199133][T12488] netlink: 'syz.2.1593': attribute type 39 has an invalid length.
[  224.202618][T12488] netlink: 'syz.2.1593': attribute type 39 has an invalid length.
[  224.252569][T12496] tipc: Resetting bearer <eth:syzkaller0>
[  224.934846][T12472] tipc: Resetting bearer <eth:syzkaller0>
[  224.953987][T12472] tipc: Disabling bearer <eth:syzkaller0>
[  225.027172][T12506] batadv_slave_1: entered promiscuous mode
[  225.108719][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'.
[  225.202666][T12505] batadv_slave_1: left promiscuous mode
[  225.312580][T12526] syz_tun: refused to change device tx_queue_len
[  225.314871][T12526] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  225.322904][T12520] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1601'.
[  225.364272][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'.
[  225.402080][T12531] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1603'.
[  225.406405][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'.
[  225.431353][T12536] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1604'.
[  225.436786][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'.
[  225.443055][T12531] dummy0: left promiscuous mode
[  225.450542][T12531] team0: left promiscuous mode
[  225.535511][T12548] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1607'.
[  225.656241][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.658784][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.745101][T12560] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1611'.
[  226.002156][T12580] batadv0: entered promiscuous mode
[  226.003822][T12580] batadv0: entered allmulticast mode
[  226.034578][T12588] syzkaller1: entered promiscuous mode
[  226.036320][T12588] syzkaller1: entered allmulticast mode
[  226.477775][T12625] macvtap1: entered promiscuous mode
[  226.485977][T12625] erspan0: entered promiscuous mode
[  226.490875][T12625] macvtap1: entered allmulticast mode
[  226.493111][T12625] erspan0: entered allmulticast mode
[  226.598649][T12626] erspan0: left allmulticast mode
[  226.604972][T12626] erspan0: left promiscuous mode
[  226.791081][T12641] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.844362][T12645] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  226.846787][T12645] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  226.853373][T12645] tipc: Resetting bearer <eth:syzkaller0>
[  226.991298][T12643] bond33: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  226.996052][T12643] bond33 (unregistering): Released all slaves
[  227.014341][T12655] geneve7: entered promiscuous mode
[  227.016335][T12655] geneve7: entered allmulticast mode
[  227.023663][ T5914] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.026673][ T5914] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.035002][ T5914] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.038282][ T5914] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.738621][ T5862] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  227.741824][ T5862] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  227.744561][ T5862] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  227.747271][ T5862] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  227.796400][T12680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.803160][T12680] syzkaller0: entered promiscuous mode
[  227.807826][T12680] syzkaller0: entered allmulticast mode
[  227.829550][T12680] tipc: Resetting bearer <eth:syzkaller0>
[  227.834653][T12679] tipc: Resetting bearer <eth:syzkaller0>
[  227.844823][T12679] tipc: Disabling bearer <eth:syzkaller0>
[  228.013799][T12694] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.016821][T12694] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  228.019510][T12694] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  228.023333][T12694] tipc: Resetting bearer <eth:syzkaller0>
[  228.075710][T12701] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  228.298046][T12724] batadv0: entered promiscuous mode
[  228.302068][T12724] batadv0: entered allmulticast mode
[  228.428761][T12726] IPVS: persistence engine module ip_vs_pe_ not found
[  228.488363][T12729] 8021q: adding VLAN 0 to HW filter on device bond31
[  228.514911][T12730] 8021q: adding VLAN 0 to HW filter on device bond31
[  228.517673][T12730] bond31: (slave vxcan5): The slave device specified does not support setting the MAC address
[  228.525677][T12730] bond31: (slave vxcan5): Error -95 calling set_mac_address
[  228.570109][T12735] geneve0: entered promiscuous mode
[  228.572147][T12735] geneve0: entered allmulticast mode
[  228.575410][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  228.578711][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  228.591475][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  228.598125][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  228.658285][T12737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.663288][T12738] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.668062][T12737] syzkaller0: entered promiscuous mode
[  228.673633][T12737] syzkaller0: entered allmulticast mode
[  228.698620][T12738] tipc: Resetting bearer <eth:syzkaller0>
[  228.727593][T12736] tipc: Resetting bearer <eth:syzkaller0>
[  228.747118][T12736] tipc: Disabling bearer <eth:syzkaller0>
[  228.782250][T12746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.786276][T12746] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  228.789381][T12746] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  228.793339][T12746] tipc: Resetting bearer <eth:syzkaller0>
[  228.924827][T12756] geneve4: entered promiscuous mode
[  228.928079][T12756] geneve4: entered allmulticast mode
[  228.974987][T12760] : entered promiscuous mode
[  229.161701][T12772] __nla_validate_parse: 21 callbacks suppressed
[  229.161713][T12772] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1668'.
[  229.174274][T12772] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.177639][T12772] syzkaller0: entered promiscuous mode
[  229.180523][T12772] syzkaller0: entered allmulticast mode
[  229.197672][T12772] tipc: Resetting bearer <eth:syzkaller0>
[  229.202411][T12771] tipc: Resetting bearer <eth:syzkaller0>
[  229.215698][T12771] tipc: Disabling bearer <eth:syzkaller0>
[  229.290730][T12775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1669'.
[  229.373711][T12779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1670'.
[  229.418197][T12783] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1671'.
[  229.434126][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'.
[  229.437856][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'.
[  229.446715][T12783] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  229.462033][   T84] tipc: Resetting bearer <eth:syzkaller0>
[  229.571449][T12792] validate_nla: 35 callbacks suppressed
[  229.571471][T12792] netlink: 'syz.1.1673': attribute type 1 has an invalid length.
[  229.615555][T12792] bond34: (slave vxcan7): The slave device specified does not support setting the MAC address
[  229.622270][T12792] bond34: (slave vxcan7): Error -95 calling set_mac_address
[  229.686730][T12799] macvlan0: entered promiscuous mode
[  229.689573][T12799] macvlan0: entered allmulticast mode
[  229.693497][T12799] bond34: entered promiscuous mode
[  229.697972][T12799] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  229.714867][T12799] bond34: left promiscuous mode
[  229.859557][T12810] netlink: 'syz.0.1678': attribute type 39 has an invalid length.
[  229.910446][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'.
[  229.994945][T12812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1679'.
[  229.999102][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1679'.
[  230.002734][T12812] netlink: 'syz.2.1679': attribute type 19 has an invalid length.
[  230.008409][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'.
[  230.013660][T12812] netlink: 'syz.2.1679': attribute type 19 has an invalid length.
[  230.101505][ T5857] Bluetooth: hci0: command 0x0406 tx timeout
[  230.104648][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  230.192029][T12836] bond32 (unregistering): Released all slaves
[  230.492324][T12860] netlink: 'syz.0.1688': attribute type 1 has an invalid length.
[  230.526180][T12860] bond32: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  230.533425][T12860] bond32: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  230.569220][T12863] netlink: 'syz.2.1689': attribute type 2 has an invalid length.
[  230.817555][T12880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.932321][T12887] bond26: left allmulticast mode
[  230.933991][T12887] bond26: left promiscuous mode
[  230.935601][T12887] bridge0: port 1(bond26) entered disabled state
[  230.939605][T12887] batadv1: left allmulticast mode
[  230.941554][T12887] batadv1: left promiscuous mode
[  230.943208][T12887] bridge0: port 2(batadv1) entered disabled state
[  230.952344][T12887] tipc: Resetting bearer <eth:syzkaller0>
[  230.970602][T12887] bond29: (slave veth23): Releasing active interface
[  230.978603][T12886] netlink: 'syz.0.1696': attribute type 10 has an invalid length.
[  230.982986][T12887] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  230.986392][T12887] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  231.002269][T12877] syzkaller1: entered promiscuous mode
[  231.004184][T12877] syzkaller1: entered allmulticast mode
[  231.477162][T12897] netlink: 'syz.2.1698': attribute type 1 has an invalid length.
[  231.505627][T12897] netlink: 'syz.2.1698': attribute type 10 has an invalid length.
[  231.633432][T12905] netlink: 'syz.2.1700': attribute type 1 has an invalid length.
[  231.677281][T12905] bond34: entered promiscuous mode
[  231.679197][T12905] bond34: entered allmulticast mode
[  231.683084][T12905] 8021q: adding VLAN 0 to HW filter on device bond34
[  232.400616][T12954] openvswitch: netlink: Flow actions attr not present in new flow.
[  232.404933][T12950] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[  232.407816][T12950] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode
[  232.552080][T12958] veth0: entered promiscuous mode
[  232.571599][T12958] veth0 (unregistering): left promiscuous mode
[  232.707117][T12973] veth0: entered promiscuous mode
[  232.726871][T12973] veth0 (unregistering): left promiscuous mode
[  232.819527][T12978] geneve8: entered promiscuous mode
[  232.823815][T12978] geneve8: entered allmulticast mode
[  232.863793][T12982] 8021q: adding VLAN 0 to HW filter on device bond27
[  232.867806][T12982] bond27: (slave vcan0): The slave device specified does not support setting the MAC address
[  232.878130][T12982] bond27: (slave vcan0): Error -95 calling set_mac_address
[  232.908192][T12987] bond27: (slave vcan0): The slave device specified does not support setting the MAC address
[  232.912491][T12987] bond27: (slave vcan0): Error -95 calling set_mac_address
[  232.968368][T12988] tipc: Resetting bearer <eth:syzkaller0>
[  233.038614][T12992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.049479][T12989] tipc: Disabling bearer <eth:syzkaller0>
[  233.085776][T12996] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  233.170757][T13000] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  233.256117][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.259030][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.331349][T13021] IPv6: sit6: Disabled Multicast RS
[  233.386146][T13025] bond36: Removing last arp target with arp_interval on
[  233.393256][T13025] bond36: entered promiscuous mode
[  233.394893][T13025] bond36: entered allmulticast mode
[  233.397965][T13025] 8021q: adding VLAN 0 to HW filter on device bond36
[  233.453975][T13037] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  233.464845][T13037] tipc: Resetting bearer <eth:syzkaller0>
[  233.529990][T13045] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  233.986058][T13094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.988652][T13094] syzkaller0: entered promiscuous mode
[  233.990503][T13094] syzkaller0: entered allmulticast mode
[  233.995835][T13094] tipc: Resetting bearer <eth:syzkaller0>
[  233.998484][T13093] tipc: Resetting bearer <eth:syzkaller0>
[  234.011089][T13093] tipc: Disabling bearer <eth:syzkaller0>
[  234.157387][T13105] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  234.162819][T13099] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  234.193969][T13109] __nla_validate_parse: 28 callbacks suppressed
[  234.193980][T13109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1754'.
[  234.217124][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1753'.
[  234.236370][T13099] bridge13: entered promiscuous mode
[  234.238110][T13099] bridge13: entered allmulticast mode
[  234.370838][T13116] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.374026][T13116] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  234.422265][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'.
[  234.474442][T13116] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.478451][T13116] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  234.514075][T13116] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.517410][T13116] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  234.607191][T13116] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  234.611243][T13116] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  234.673646][ T5862] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  234.676416][ T5862] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  234.676448][T13127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1760'.
[  234.698605][ T5862] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  234.702318][ T5862] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  234.706772][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1760'.
[  234.721922][ T5862] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  234.725142][ T5862] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  234.734367][ T5862] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  234.737280][ T5862] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  234.854741][T13136] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  234.860244][T13136] validate_nla: 10 callbacks suppressed
[  234.860254][T13136] netlink: 'syz.0.1762': attribute type 4 has an invalid length.
[  234.874640][T13136] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002
[  234.891239][T13129] netlink: 'syz.1.1761': attribute type 16 has an invalid length.
[  234.894403][T13129] netlink: 'syz.1.1761': attribute type 17 has an invalid length.
[  234.926238][T13129] 8021q: adding VLAN 0 to HW filter on device 
[  234.932707][T13129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  234.980768][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  234.984855][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  235.010267][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  235.100078][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  235.196241][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'.
[  235.206944][T13143] tipc: Resetting bearer <eth:syzkaller0>
[  235.209035][T13143] tipc: Resetting bearer <eth:syzkaller0>
[  235.260009][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  235.657687][T13151] bond0: (slave rose0): Error: Device can not be enslaved while up
[  235.842897][T13161] netlink: 'syz.0.1769': attribute type 1 has an invalid length.
[  235.884218][T13163] netlink: 'syz.1.1770': attribute type 1 has an invalid length.
[  235.904739][T13163] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1770'.
[  235.948253][T13161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1769'.
[  236.008860][T13175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'.
[  236.120625][T13179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.336864][T13187] tipc: Resetting bearer <eth:syzkaller0>
[  236.394961][T13193] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.395128][T13198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.693355][T13221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1782'.
[  236.873032][T13234] bond30: (slave geneve5): Releasing active interface
[  236.937105][T13234] netlink: 'syz.2.1785': attribute type 10 has an invalid length.
[  236.985515][T13234] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  236.989563][T13234] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  237.028321][T13232] infiniband syz2: set down
[  237.031384][T13232] infiniband syz2: added bond0
[  237.054988][T13232] RDS/IB: syz2: added
[  237.059607][T13232] smc: adding ib device syz2 with port count 1
[  237.062645][T13232] smc:    ib device syz2 port 1 has pnetid 
[  237.497698][T13253] netlink: 'syz.0.1789': attribute type 1 has an invalid length.
[  237.530226][T13255] 8021q: adding VLAN 0 to HW filter on device bond27
[  237.549386][T13255] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  237.563542][T13255] bond27: (slave macvlan0): Enslaving as a backup interface with a down link
[  237.583561][T13255] bond26: (slave bridge9): Releasing backup interface
[  237.605851][T13255] bond27: (slave macvlan0): Releasing backup interface
[  237.644934][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  237.863990][T13280] netlink: 'syz.0.1798': attribute type 1 has an invalid length.
[  237.866448][T13280] netlink: 'syz.0.1798': attribute type 2 has an invalid length.
[  237.871154][T13280] netlink: 'syz.0.1798': attribute type 6 has an invalid length.
[  237.973801][T13290] tipc: Resetting bearer <eth:syzkaller0>
[  238.137619][T13290] bridge14: left promiscuous mode
[  238.144925][T13290] bond28: left promiscuous mode
[  238.147650][T13290] tipc: Resetting bearer <eth:syzkaller0>
[  238.165431][T13290] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  238.176562][T13290] macvtap1: left promiscuous mode
[  238.184626][T13290] geneve7: left promiscuous mode
[  238.206371][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.227992][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.230978][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.233584][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  238.332387][T13302] can: request_module (can-proto-0) failed.
[  238.421043][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  238.664945][T13317] 8021q: adding VLAN 0 to HW filter on device bond35
[  238.677182][T13317] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  238.683738][T13317] bond35: (slave macvlan0): Enslaving as a backup interface with a down link
[  238.700854][T13317] bond35: (slave macvlan0): Releasing backup interface
[  238.900101][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  239.086733][T13342] 8021q: adding VLAN 0 to HW filter on device bond38
[  239.124226][T13342] bond0: (slave bond38): Enslaving as an active interface with a down link
[  239.365603][T13362] __nla_validate_parse: 11 callbacks suppressed
[  239.365618][T13362] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1817'.
[  239.778645][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'.
[  239.846235][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'.
[  239.856967][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1825'.
[  239.883204][T13389] 8021q: adding VLAN 0 to HW filter on device bond33
[  239.907774][T13389] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1826'.
[  239.913587][T13389] validate_nla: 3 callbacks suppressed
[  239.913638][T13389] netlink: 'syz.0.1826': attribute type 1 has an invalid length.
[  239.923077][T13389] workqueue: Failed to create a rescuer kthread for wq "bond34": -EINTR
[  239.975748][T13400] sctp: [Deprecated]: syz.0.1827 (pid 13400) Use of int in max_burst socket option.
[  239.975748][T13400] Use struct sctp_assoc_value instead
[  239.985804][T13399] sctp: [Deprecated]: syz.0.1827 (pid 13399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  239.985804][T13399] Use struct sctp_sack_info instead
[  240.046348][T13404] 8021q: adding VLAN 0 to HW filter on device bond3
[  240.112663][T13405] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  240.117925][   T12] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:283d:e7ff:fefe:8fd0 error=-28
[  240.123311][T13405] bond3: (slave macvlan0): Enslaving as a backup interface with a down link
[  240.186488][T13409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1830'.
[  240.254542][T13416] pim6reg1: entered promiscuous mode
[  240.256437][T13416] pim6reg1: entered allmulticast mode
[  240.262032][T13418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1833'.
[  240.386579][T13421] netlink: 'syz.2.1834': attribute type 10 has an invalid length.
[  240.426051][T13421] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  240.429600][T13421] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  240.457861][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1835'.
[  240.469541][T13423] bridge16: entered promiscuous mode
[  240.472083][T13423] bridge16: entered allmulticast mode
[  240.785926][T13437] netlink: 'syz.1.1838': attribute type 13 has an invalid length.
[  240.788744][T13437] netlink: 'syz.1.1838': attribute type 17 has an invalid length.
[  240.801948][T13437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.883223][T13436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.264961][T13442] netlink: 'syz.2.1839': attribute type 10 has an invalid length.
[  241.316169][T13442] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  241.319380][T13442] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  241.322947][T13442] tipc: Resetting bearer <eth:syzkaller0>
[  241.363213][T13446] netlink: 'syz.2.1840': attribute type 1 has an invalid length.
[  241.373196][T13446] 8021q: adding VLAN 0 to HW filter on device bond35
[  241.375750][T13446] bond35: (slave vcan0): The slave device specified does not support setting the MAC address
[  241.380467][T13446] bond35: (slave vcan0): Error -95 calling set_mac_address
[  241.620569][T13455] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.638971][T13464] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  241.650693][T13464] tipc: Resetting bearer <eth:syzkaller0>
[  241.717449][T13465] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.735729][T13465] syzkaller0: entered promiscuous mode
[  241.737885][T13465] syzkaller0: entered allmulticast mode
[  241.870274][T13465] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  241.973909][T13490] netlink: 'syz.2.1848': attribute type 9 has an invalid length.
[  242.095366][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1849'.
[  242.105304][T13491] tipc: Resetting bearer <eth:syzkaller0>
[  244.584161][T13460] tipc: Resetting bearer <eth:syzkaller0>
[  244.612412][T13460] tipc: Disabling bearer <eth:syzkaller0>
[  244.635831][T13502] netlink: 'syz.2.1851': attribute type 1 has an invalid length.
[  244.664542][T13502] 8021q: adding VLAN 0 to HW filter on device bond36
[  244.684231][T13502] bond36: (slave veth23): Enslaving as an active interface with a down link
[  244.699339][T13502] macvlan1: entered promiscuous mode
[  244.701175][T13502] macvlan1: entered allmulticast mode
[  244.703536][T13502] bond36: entered promiscuous mode
[  244.705686][T13502] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  244.708800][T13502] bond36: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  244.719392][T13502] bond36: left promiscuous mode
[  244.748985][T13499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.857173][T13519] netlink: 'syz.1.1852': attribute type 1 has an invalid length.
[  244.876560][T13519] bond39: entered promiscuous mode
[  244.878518][T13519] 8021q: adding VLAN 0 to HW filter on device bond39
[  244.889349][T13519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1852'.
[  244.898287][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'.
[  244.914009][T13521] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.644209][T13533] netlink: 'syz.1.1858': attribute type 10 has an invalid length.
[  245.741812][T13536] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1859'.
[  245.744926][T13536] .70: renamed from hsr0
[  245.747697][T13536] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  245.755352][T13536] .70: entered allmulticast mode
[  245.756950][T13536] hsr_slave_0: entered allmulticast mode
[  245.764690][T13536] 8021q: adding VLAN 0 to HW filter on device .70
[  245.767613][T13536] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  245.824647][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'.
[  246.055258][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1865'.
[  246.076516][T13554] veth0_to_team: left promiscuous mode
[  246.084880][T13554] veth0_to_team: left allmulticast mode
[  246.087495][T13554] .70: left allmulticast mode
[  246.088964][T13554] hsr_slave_0: left allmulticast mode
[  246.098779][T13554] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  246.114240][T13554] ip6erspan0: left promiscuous mode
[  246.116461][T13554] bond25: left promiscuous mode
[  246.132447][T13554] gtp2: left promiscuous mode
[  246.134181][T13554] gtp2: left allmulticast mode
[  246.136957][T13554] tipc: Resetting bearer <eth:syzkaller0>
[  246.151977][T13554] bond34: left promiscuous mode
[  246.154299][T13554] bond34: left allmulticast mode
[  246.231577][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1870'.
[  246.231593][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1870'.
[  246.238269][T13570] xfrm1: entered promiscuous mode
[  246.240396][T13570] xfrm1: entered allmulticast mode
[  246.275048][T13567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1871'.
[  246.324967][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'.
[  246.329623][T13580] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1873'.
[  246.338611][T13581] pimreg10: entered allmulticast mode
[  246.378782][T13592] veth0: entered promiscuous mode
[  246.393348][T13590] veth0: left promiscuous mode
[  246.492836][T13594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  246.498973][T13600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  246.603092][T13612] team0: entered promiscuous mode
[  246.607055][T13612] team0: entered allmulticast mode
[  246.674324][T13621] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  246.789103][T13621]  (unregistering): Released all slaves
[  246.817022][T13624] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.913221][T13632] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.922121][T13630] syzkaller1: entered promiscuous mode
[  246.923838][T13630] syzkaller1: entered allmulticast mode
[  246.964151][T13634] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  246.967912][T13634] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  247.219910][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  247.522189][T13661] bridge0: port 1(erspan0) entered blocking state
[  247.530587][T13661] bridge0: port 1(erspan0) entered disabled state
[  247.540127][T13661] erspan0: entered allmulticast mode
[  247.552744][T13661] erspan0: left allmulticast mode
[  247.644988][T13663] macsec1: entered promiscuous mode
[  247.646933][T13663] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  247.665218][T13663] macsec1: entered allmulticast mode
[  247.667160][T13663] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  247.827259][T13674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.839241][T13674] syzkaller0: entered promiscuous mode
[  247.843003][T13674] syzkaller0: entered allmulticast mode
[  247.897681][T13674] tipc: Resetting bearer <eth:syzkaller0>
[  247.903572][T13672] tipc: Resetting bearer <eth:syzkaller0>
[  247.916410][T13672] tipc: Disabling bearer <eth:syzkaller0>
[  248.107495][T13692] netlink: 'syz.0.1903': attribute type 10 has an invalid length.
[  248.112501][T13692] batman_adv: batadv0: Adding interface: 
[  248.114503][T13692] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.124419][T13692] batman_adv: batadv0: Interface activated: 
[  248.171731][T13694] vlan0: left promiscuous mode
[  248.173718][T13694] bond11: left promiscuous mode
[  248.176275][T13694] netdevsim0: left promiscuous mode
[  248.180381][T13694] bond14: left promiscuous mode
[  248.181970][T13694] bond14: left allmulticast mode
[  248.185557][T13694] veth9: left promiscuous mode
[  248.191933][T13694] mac80211_hwsim hwsim25 wlan0: left promiscuous mode
[  248.194071][T13694] mac80211_hwsim hwsim25 wlan0: left allmulticast mode
[  248.199691][T13694] ip6tnl5: left promiscuous mode
[  248.202686][T13694] ip6tnl5: left allmulticast mode
[  248.204734][T13694] bond26: left promiscuous mode
[  248.206512][T13694] bond26: left allmulticast mode
[  248.208095][T13694] bridge9: left promiscuous mode
[  248.211311][T13694] bridge9: left allmulticast mode
[  248.231924][T13694] bond31: left promiscuous mode
[  248.248598][T13694] geneve0: left promiscuous mode
[  248.251413][T13694] geneve0: left allmulticast mode
[  248.258045][T13694] geneve4: left promiscuous mode
[  248.261439][T13694] geneve4: left allmulticast mode
[  248.268414][T13694] bond36: left promiscuous mode
[  248.270376][T13694] bond36: left allmulticast mode
[  248.294283][T13694] bond39: left promiscuous mode
[  248.299288][T13694] team0: left promiscuous mode
[  248.301552][T13694] team0: left allmulticast mode
[  248.312121][ T5862] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.314944][ T5862] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  248.317686][ T5862] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.329892][ T5862] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  248.341460][ T5862] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.344373][ T5862] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  248.347112][ T5862] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  248.350558][ T5862] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  248.758868][T13724] netlink: 'syz.2.1914': attribute type 10 has an invalid length.
[  248.835707][T13730] netlink: 'syz.0.1916': attribute type 2 has an invalid length.
[  248.839688][T13730] netlink: 'syz.0.1916': attribute type 2 has an invalid length.
[  248.844393][T13730] netlink: 'syz.0.1916': attribute type 1 has an invalid length.
[  248.921284][T13737] 8021q: adding VLAN 0 to HW filter on device bond40
[  249.092261][T13756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.094973][T13750] syzkaller0: entered promiscuous mode
[  249.096673][T13750] syzkaller0: entered allmulticast mode
[  249.125421][T13750] tipc: Resetting bearer <eth:syzkaller0>
[  249.231618][T13749] tipc: Resetting bearer <eth:syzkaller0>
[  249.246553][T13749] tipc: Disabling bearer <eth:syzkaller0>
[  249.348350][T13766] veth1_to_bond: entered allmulticast mode
[  249.393351][T13766] veth1_to_bond (unregistering): left allmulticast mode
[  249.465012][T13768] netlink: 'syz.1.1925': attribute type 2 has an invalid length.
[  249.484476][T13768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  249.494207][T13768] veth0_to_team: entered promiscuous mode
[  249.496679][T13768] veth0_to_team: entered allmulticast mode
[  249.536793][T13770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.539260][T13770] syzkaller0: entered promiscuous mode
[  249.542116][T13770] syzkaller0: entered allmulticast mode
[  249.557643][T13770] tipc: Resetting bearer <eth:syzkaller0>
[  249.562185][T13769] tipc: Resetting bearer <eth:syzkaller0>
[  249.575884][T13769] tipc: Disabling bearer <eth:syzkaller0>
[  249.806011][T13779] IPVS: set_ctl: invalid protocol: 29 172.30.1.2:20001
[  249.997899][T13796] bond36: (slave veth23): Releasing active interface
[  250.118017][T13805] __nla_validate_parse: 16 callbacks suppressed
[  250.118031][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1936'.
[  250.193766][T13807] netlink: 'syz.2.1937': attribute type 39 has an invalid length.
[  250.238785][T13809] netlink: 'syz.2.1938': attribute type 7 has an invalid length.
[  250.253958][T13809] : entered promiscuous mode
[  250.258035][T13809] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.262822][T13809] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  250.265611][T13809] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  250.268860][T13809] tipc: Resetting bearer <eth:syzkaller0>
[  250.323330][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'.
[  250.528572][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'.
[  250.560823][T13821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1943'.
[  250.746599][T13835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1947'.
[  250.754402][T13835] openvswitch: netlink: Flow actions attr not present in new flow.
[  250.973775][T13843] batman_adv: batadv0: Interface deactivated: 
[  250.989246][T13843] tipc: Resetting bearer <eth:syzkaller0>
[  251.011894][T13843] tipc: Resetting bearer <eth:syzkaller0>
[  251.289885][T13853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1949'.
[  251.361623][T13857] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  251.396011][T13859] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  251.502950][T13865] batadv_slave_0: entered promiscuous mode
[  251.515977][T13859] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1950'.
[  251.537685][T13859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1950'.
[  251.626504][T13870] netlink: 'syz.2.1952': attribute type 4 has an invalid length.
[  251.727399][T13873] netlink: 'syz.1.1953': attribute type 10 has an invalid length.
[  251.782591][T13879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1955'.
[  251.964229][T13890] netlink: 'syz.1.1957': attribute type 1 has an invalid length.
[  251.966856][T13890] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1957'.
[  252.263791][T13897] bond0 (unregistering): (slave bond38): Releasing active interface
[  252.267412][T13897] bond0 (unregistering): Released all slaves
[  252.306504][T13911] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  252.319496][T13911] bridge7: left allmulticast mode
[  252.325792][T13911] bridge10: left allmulticast mode
[  252.328120][T13911] bridge11: left allmulticast mode
[  252.341933][T13911] bond22: left allmulticast mode
[  252.345339][T13911] bridge14: left allmulticast mode
[  252.356137][T13911] bond28: left allmulticast mode
[  252.363033][T13911] bridge15: left allmulticast mode
[  252.370181][T13911] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  252.378894][T13911] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  252.393101][T13911] macvtap1: left allmulticast mode
[  252.402377][T13911] geneve7: left allmulticast mode
[  252.436401][T13911] bridge16: left promiscuous mode
[  252.443594][T13911] bridge16: left allmulticast mode
[  252.445534][T13911] xfrm1: left promiscuous mode
[  252.447340][T13911] xfrm1: left allmulticast mode
[  252.458231][T13911] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  252.462250][T13911] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  252.464653][T13911] macsec1: left promiscuous mode
[  252.466445][T13911] macsec1: left allmulticast mode
[  252.487469][T13921] syzkaller0: entered promiscuous mode
[  252.492725][T13921] syzkaller0: entered allmulticast mode
[  252.599586][T13927] netlink: 'syz.2.1962': attribute type 1 has an invalid length.
[  252.663662][T13927] 8021q: adding VLAN 0 to HW filter on device bond39
[  252.698613][T13931] bond39: (slave veth27): Enslaving as an active interface with a down link
[  252.718804][T13927] macvlan1: entered promiscuous mode
[  252.722562][T13927] macvlan1: entered allmulticast mode
[  252.724891][T13927] bond39: entered promiscuous mode
[  252.727384][T13927] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  252.730718][T13927] bond39: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  252.737083][T13927] bond39: left promiscuous mode
[  253.400248][T13977] netlink: 'syz.1.1971': attribute type 1 has an invalid length.
[  253.407000][T13979] netlink: 'syz.2.1970': attribute type 5 has an invalid length.
[  253.417573][T13979] geneve6: entered promiscuous mode
[  253.419683][T13979] geneve6: entered allmulticast mode
[  253.428779][ T5914] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  253.434805][ T5914] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  253.448863][ T5914] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  253.455180][ T5914] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  253.697664][T13996] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  253.707102][T13997] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  254.029401][T14023] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.033053][T14023] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  254.036082][T14023] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  254.328617][T14039] netlink: 'syz.0.1988': attribute type 10 has an invalid length.
[  254.472048][T14043] netlink: 'syz.0.1990': attribute type 10 has an invalid length.
[  254.472155][T14044] netlink: 'syz.0.1990': attribute type 10 has an invalid length.
[  254.747457][T14054] batman_adv: batadv0: Removing interface: 
[  254.751638][T14054] bond3: (slave macvlan0): Releasing backup interface
[  254.847386][T14064] netlink: 'syz.1.1996': attribute type 5 has an invalid length.
[  254.855307][T14064] geneve0: entered promiscuous mode
[  254.857454][T14064] geneve0: entered allmulticast mode
[  254.862138][ T5880] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  254.866452][ T5880] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  254.873842][ T5880] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  254.877507][ T5880] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  254.920119][T14071] tap0: tun_chr_ioctl cmd 1074025677
[  254.921976][T14071] tap0: linktype set to 0
[  254.982882][T14069] nbd1: detected capacity change from 0 to 63
[  254.988000][T14072] block nbd1: NBD_DISCONNECT
[  254.993364][T14072] block nbd1: Disconnected due to user request.
[  254.995682][T14072] block nbd1: shutting down sockets
[  255.011535][    C1] blk_print_req_error: 138 callbacks suppressed
[  255.011556][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.017446][    C1] buffer_io_error: 138 callbacks suppressed
[  255.017457][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  255.024706][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.028405][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  255.031274][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.034566][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  255.037207][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.040138][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  255.053557][T13846] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.056662][T13846] Buffer I/O error on dev nbd1, logical block 0, async page read
[  255.059426][T13846] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.064247][T13846] Buffer I/O error on dev nbd1, logical block 1, async page read
[  255.067051][T13846] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.071446][T13846] Buffer I/O error on dev nbd1, logical block 2, async page read
[  255.074467][T13846] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.077419][T13846] Buffer I/O error on dev nbd1, logical block 3, async page read
[  255.081218][T13846] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.083943][T13846] Buffer I/O error on dev nbd1, logical block 0, async page read
[  255.086408][T13846] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  255.089305][T13846] Buffer I/O error on dev nbd1, logical block 1, async page read
[  255.093412][T13846] ldm_validate_partition_table(): Disk read failed.
[  255.102240][T13846] Dev nbd1: unable to read RDB block 0
[  255.120539][T13846]  nbd1: unable to read partition table
[  255.145501][T13846] ldm_validate_partition_table(): Disk read failed.
[  255.160386][T13846] Dev nbd1: unable to read RDB block 0
[  255.170925][T14075] __nla_validate_parse: 17 callbacks suppressed
[  255.170943][T14075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'.
[  255.175072][T13846]  nbd1: unable to read partition table
[  255.198618][T14087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2003'.
[  255.338132][T14089] bond0: (slave bridge13): making interface the new active one
[  255.341984][T14089] bond0: (slave bridge13): Enslaving as an active interface with an up link
[  255.354131][T14092] : entered promiscuous mode
[  255.411790][T14097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'.
[  255.546356][T14082] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2000'.
[  255.588584][T14107] bond34: option resend_igmp: invalid value (2878)
[  255.594683][T14107] bond34: option resend_igmp: allowed values 0 - 255
[  255.599593][T14107] bond34 (unregistering): Released all slaves
[  255.733611][T14121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2013'.
[  255.736673][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'.
[  255.907704][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'.
[  255.913227][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'.
[  255.994782][ T5862] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  256.019506][ T5862] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  256.026076][ T5862] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  256.029191][ T5862] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  256.177239][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'.
[  256.283846][T14153] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 2, id = 0
[  256.330022][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'.
[  256.404977][T14163] lo: entered promiscuous mode
[  256.406985][T14163] tunl0: entered promiscuous mode
[  256.409237][T14163] gre0: entered promiscuous mode
[  256.411667][T14163] gretap0: entered promiscuous mode
[  256.413864][T14163] erspan0: entered promiscuous mode
[  256.415993][T14163] ip_vti0: entered promiscuous mode
[  256.418123][T14163] ip6_vti0: entered promiscuous mode
[  256.420226][T14163] sit0: entered promiscuous mode
[  256.422081][T14163] ip6tnl0: entered promiscuous mode
[  256.424170][T14163] ip6gre0: entered promiscuous mode
[  256.426312][T14163] ip6gretap0: entered promiscuous mode
[  256.428211][T14163] vcan0: entered promiscuous mode
[  256.430368][T14163] dummy0: entered promiscuous mode
[  256.432419][T14163] nlmon0: entered promiscuous mode
[  256.434603][T14163] caif0: entered promiscuous mode
[  256.436660][T14163] batadv0: entered promiscuous mode
[  256.438751][T14163] veth0: entered promiscuous mode
[  256.440834][T14163] veth1: entered promiscuous mode
[  256.442609][T14163] wg1: entered promiscuous mode
[  256.444492][T14163] wg2: entered promiscuous mode
[  256.446769][T14163] veth0_to_bridge: entered promiscuous mode
[  256.449344][T14163] bridge_slave_0: entered promiscuous mode
[  256.451959][T14163] veth1_to_bridge: entered promiscuous mode
[  256.454254][T14163] bridge_slave_1: entered promiscuous mode
[  256.456885][T14163] veth0_to_bond: entered promiscuous mode
[  256.459462][T14163] bond_slave_0: entered promiscuous mode
[  256.462239][T14163] veth0_to_team: entered promiscuous mode
[  256.464494][T14163] team_slave_0: entered promiscuous mode
[  256.466833][T14163] veth1_to_team: entered promiscuous mode
[  256.469108][T14163] team_slave_1: entered promiscuous mode
[  256.471331][T14163] veth0_to_batadv: entered promiscuous mode
[  256.473502][T14163] batadv_slave_0: entered promiscuous mode
[  256.475601][T14163] veth0_to_hsr: entered promiscuous mode
[  256.477884][T14163] veth1_to_hsr: entered promiscuous mode
[  256.480275][T14163] ..0: entered promiscuous mode
[  256.482144][T14163] veth1_virt_wifi: entered promiscuous mode
[  256.484504][T14163] veth0_virt_wifi: entered promiscuous mode
[  256.486746][T14163] net veth1_virt_wifi : entered promiscuous mode
[  256.489513][T14163] macvtap0: entered promiscuous mode
[  256.491440][T14163] macsec0: entered promiscuous mode
[  256.493244][T14163] geneve0: entered promiscuous mode
[  256.494988][T14163] geneve1: entered promiscuous mode
[  256.496712][T14163] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  256.499397][T14163] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  256.502143][T14163] sit1: entered promiscuous mode
[  256.504128][T14163] geneve2: entered promiscuous mode
[  256.506349][T14163] vxlan0: entered promiscuous mode
[  256.512798][T14163] vlan2: entered promiscuous mode
[  256.515225][T14163] bond1: entered promiscuous mode
[  256.517158][T14163] geneve3: entered promiscuous mode
[  256.520006][T14163] geneve4: entered promiscuous mode
[  256.522986][T14163] bond2: entered promiscuous mode
[  256.524841][T14163] veth2: entered promiscuous mode
[  256.526935][T14163] veth3: entered promiscuous mode
[  256.529122][T14163] pim6reg99999999: entered promiscuous mode
[  256.535028][T14163] gre1: entered promiscuous mode
[  256.537223][T14163] bond3: entered promiscuous mode
[  256.539499][T14163] vcan1: entered promiscuous mode
[  256.543158][T14163] vcan2: entered promiscuous mode
[  256.545376][T14163] syztnl2: entered promiscuous mode
[  256.547621][T14163] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode
[  256.554051][T14163] syztnl1: entered promiscuous mode
[  256.556384][T14163] bond4: entered promiscuous mode
[  256.558603][T14163] geneve5: entered promiscuous mode
[  256.560798][T14163] bond5: entered promiscuous mode
[  256.562816][T14163] ip6gretap1: entered promiscuous mode
[  256.564880][T14163] veth4: entered promiscuous mode
[  256.566963][T14163] veth5: entered promiscuous mode
[  256.569017][T14163] veth6: entered promiscuous mode
[  256.573097][T14163] veth7: entered promiscuous mode
[  256.574848][T14163] ip6erspan0: entered promiscuous mode
[  256.576824][T14163] sit2: entered promiscuous mode
[  256.578591][T14163] bond6: entered promiscuous mode
[  256.580424][T14163] vxlan1: entered promiscuous mode
[  256.582064][T14163] bond7: entered promiscuous mode
[  256.584177][T14163] ip6gretap2: entered promiscuous mode
[  256.586016][T14163] xfrm0: entered promiscuous mode
[  256.587666][T14163] bond8: entered promiscuous mode
[  256.594323][T14163] bridge1: entered promiscuous mode
[  256.596429][T14163] veth8: entered promiscuous mode
[  256.598465][T14163] veth9: entered promiscuous mode
[  256.600704][T14163] veth10: entered promiscuous mode
[  256.602423][T14163] veth11: entered promiscuous mode
[  256.604130][T14163] bond9: entered promiscuous mode
[  256.605778][T14163] bond10: entered promiscuous mode
[  256.607687][T14163] bridge2: entered promiscuous mode
[  256.609380][T14163] ip6gre1: entered promiscuous mode
[  256.612924][T14163] bond11: entered promiscuous mode
[  256.614610][T14163] bond12: entered promiscuous mode
[  256.616271][T14163] bridge3: entered promiscuous mode
[  256.618213][T14163] bond13: entered promiscuous mode
[  256.620257][T14163] bond14: entered promiscuous mode
[  256.621991][T14163] gretap1: entered promiscuous mode
[  256.623685][T14163] gretap2: entered promiscuous mode
[  256.625405][T14163] gtp0: entered promiscuous mode
[  256.627095][T14163] ipip0: entered promiscuous mode
[  256.628882][T14163] bond15: entered promiscuous mode
[  256.632930][T14163] bridge4: entered promiscuous mode
[  256.635084][T14163] gre2: entered promiscuous mode
[  256.637142][T14163] ip6erspan1: entered promiscuous mode
[  256.639106][T14163] bond16: entered promiscuous mode
[  256.641626][T14163] bridge5: entered promiscuous mode
[  256.643856][T14163] bridge6: entered promiscuous mode
[  256.645857][T14163] vxlan2: entered promiscuous mode
[  256.647972][T14163] vxlan3: entered promiscuous mode
[  256.652055][T14163] bond17: entered promiscuous mode
[  256.653970][T14163] bond0: entered promiscuous mode
[  256.655773][T14163] vxcan2: entered promiscuous mode
[  256.657605][T14163] vxcan3: entered promiscuous mode
[  256.659462][T14163] gtp1: entered promiscuous mode
[  256.661719][T14163] ip6tnl1: entered promiscuous mode
[  256.663876][T14163] ip6tnl2: entered promiscuous mode
[  256.666066][T14163] gretap3: entered promiscuous mode
[  256.668258][T14163] bond18: entered promiscuous mode
[  256.672218][T14163] ip6tnl3: entered promiscuous mode
[  256.674148][T14163] ipip1: entered promiscuous mode
[  256.676030][T14163] ip6_vti1: entered promiscuous mode
[  256.677773][T14163] bond19: entered promiscuous mode
[  256.679429][T14163] veth12: entered promiscuous mode
[  256.681209][T14163] veth13: entered promiscuous mode
[  256.683035][T14163] sit3: entered promiscuous mode
[  256.684666][T14163] bridge0: entered promiscuous mode
[  256.686359][T14163] bridge7: entered promiscuous mode
[  256.688013][T14163] bridge8: entered promiscuous mode
[  256.691692][T14163] bridge9: entered promiscuous mode
[  256.693447][T14163] veth14: entered promiscuous mode
[  256.695171][T14163] veth15: entered promiscuous mode
[  256.696815][T14163] macvlan3: entered promiscuous mode
[  256.698550][T14163] macvlan4: entered promiscuous mode
[  256.700359][T14163] macvlan5: entered promiscuous mode
[  256.702415][T14163] macvlan6: entered promiscuous mode
[  256.704499][T14163] macvlan7: entered promiscuous mode
[  256.706438][T14163] macvlan8: entered promiscuous mode
[  256.708098][T14163] macvlan9: entered promiscuous mode
[  256.711776][T14163] macvlan10: entered promiscuous mode
[  256.713564][T14163] macvlan11: entered promiscuous mode
[  256.715417][T14163] macvlan12: entered promiscuous mode
[  256.717383][T14163] macvlan13: entered promiscuous mode
[  256.719095][T14163] macvlan14: entered promiscuous mode
[  256.720974][T14163] macvlan15: entered promiscuous mode
[  256.723163][T14163] macvlan16: entered promiscuous mode
[  256.725322][T14163] macvlan17: entered promiscuous mode
[  256.727430][T14163] macvlan18: entered promiscuous mode
[  256.729375][T14163] macvlan19: entered promiscuous mode
[  256.733288][T14163] macvlan20: entered promiscuous mode
[  256.735224][T14163] macvlan21: entered promiscuous mode
[  256.737098][T14163] macvlan22: entered promiscuous mode
[  256.738852][T14163] macvlan23: entered promiscuous mode
[  256.740737][T14163] macvlan24: entered promiscuous mode
[  256.742716][T14163] macvlan25: entered promiscuous mode
[  256.744507][T14163] macvlan26: entered promiscuous mode
[  256.746725][T14163] macvlan27: entered promiscuous mode
[  256.748961][T14163] macvlan28: entered promiscuous mode
[  256.753403][T14163] macvlan29: entered promiscuous mode
[  256.755627][T14163] macvlan30: entered promiscuous mode
[  256.757680][T14163] macvlan31: entered promiscuous mode
[  256.759872][T14163] macvlan32: entered promiscuous mode
[  256.761920][T14163] macvlan33: entered promiscuous mode
[  256.764033][T14163] macvlan34: entered promiscuous mode
[  256.766076][T14163] macvlan35: entered promiscuous mode
[  256.767980][T14163] bond20: entered promiscuous mode
[  256.771856][T14163] bridge10: entered promiscuous mode
[  256.773584][T14163] gretap4: entered promiscuous mode
[  256.775222][T14163] bond21: entered promiscuous mode
[  256.777214][T14163] veth16: entered promiscuous mode
[  256.779286][T14163] veth17: entered promiscuous mode
[  256.781766][T14163] erspan1: entered promiscuous mode
[  256.783822][T14163] gtp2: entered promiscuous mode
[  256.785790][T14163] bridge11: entered promiscuous mode
[  256.787710][T14163] bond22: entered promiscuous mode
[  256.789382][T14163] bond23: entered promiscuous mode
[  256.793133][T14163] bridge12: entered promiscuous mode
[  256.794837][T14163] gretap5: entered promiscuous mode
[  256.796524][T14163] bond24: entered promiscuous mode
[  256.798179][T14163] bridge13: entered promiscuous mode
[  256.800143][T14163] bond25: entered promiscuous mode
[  256.802104][T14163] veth18: entered promiscuous mode
[  256.803778][T14163] veth19: entered promiscuous mode
[  256.805641][T14163] bond26: entered promiscuous mode
[  256.807915][T14163] ip6tnl4: entered promiscuous mode
[  256.811966][T14163] vxlan4: entered promiscuous mode
[  256.814005][T14163] veth20: entered promiscuous mode
[  256.816013][T14163] veth21: entered promiscuous mode
[  256.818133][T14163] bond27: entered promiscuous mode
[  256.820690][T14163] ip6tnl5: entered promiscuous mode
[  256.822380][T14163] bridge14: entered promiscuous mode
[  256.824111][T14163] batadv1: entered promiscuous mode
[  256.826010][T14163] gre3: entered promiscuous mode
[  256.828054][T14163] bond28: entered promiscuous mode
[  256.830692][T14163] bridge15: entered promiscuous mode
[  256.832689][T14163] netdevsim netdevsim0 eth0: entered promiscuous mode
[  256.834955][T14163] netdevsim netdevsim0 eth1: entered promiscuous mode
[  256.837161][T14163] netdevsim netdevsim0 eth2: entered promiscuous mode
[  256.839357][T14163] netdevsim netdevsim0 eth3: entered promiscuous mode
[  256.841899][T14163] sit4: entered promiscuous mode
[  256.843768][T14163] bond29: entered promiscuous mode
[  256.845738][T14163] veth22: entered promiscuous mode
[  256.847588][T14163] veth23: entered promiscuous mode
[  256.849349][T14163] veth24: entered promiscuous mode
[  256.851185][T14163] veth25: entered promiscuous mode
[  256.852905][T14163] veth26: entered promiscuous mode
[  256.854650][T14163] veth27: entered promiscuous mode
[  256.856646][T14163] veth28: entered promiscuous mode
[  256.858580][T14163] veth29: entered promiscuous mode
[  256.860819][T14163] bond30: entered promiscuous mode
[  256.862498][T14163] bond31: entered promiscuous mode
[  256.864164][T14163] geneve6: entered promiscuous mode
[  256.865833][T14163] syztnl0: entered promiscuous mode
[  256.867558][T14163] macvtap1: entered promiscuous mode
[  256.869682][T14163] geneve7: entered promiscuous mode
[  256.872035][T14163] veth30: entered promiscuous mode
[  256.873715][T14163] veth31: entered promiscuous mode
[  256.875481][T14163] bond32: entered promiscuous mode
[  256.877711][T14163] ip6gretap3: entered promiscuous mode
[  256.879963][T14163] sit5: entered promiscuous mode
[  256.881733][T14163] gtp3: entered promiscuous mode
[  256.883773][T14163] veth32: entered promiscuous mode
[  256.885864][T14163] veth33: entered promiscuous mode
[  256.887708][T14163] sit6: entered promiscuous mode
[  256.890289][T14163] veth34: entered promiscuous mode
[  256.892452][T14163] veth35: entered promiscuous mode
[  256.894292][T14163] veth36: entered promiscuous mode
[  256.896106][T14163] veth37: entered promiscuous mode
[  256.897946][T14163] veth38: entered promiscuous mode
[  256.899656][T14163] veth39: entered promiscuous mode
[  256.901668][T14163] bond33: entered promiscuous mode
[  256.903658][T14163] macvlan0: entered promiscuous mode
[  256.905547][T14163] bridge16: entered promiscuous mode
[  256.907610][T14163] veth40: entered promiscuous mode
[  256.909597][T14163] veth41: entered promiscuous mode
[  256.911964][T14163] xfrm1: entered promiscuous mode
[  256.913943][T14163] gre4: entered promiscuous mode
[  256.915698][T14163] macsec1: entered promiscuous mode
[  256.917410][T14163] veth42: entered promiscuous mode
[  256.919297][T14163] veth43: entered promiscuous mode
[  256.921297][T14163] macsec2: entered promiscuous mode
[  256.923207][T14163] bridge17: entered promiscuous mode
[  256.925229][T14163] bridge18: entered promiscuous mode
[  256.988753][T14172] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.992960][T14172] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  257.202665][T14188] validate_nla: 8 callbacks suppressed
[  257.202685][T14188] netlink: 'syz.0.2030': attribute type 1 has an invalid length.
[  257.248257][T14188] 8021q: adding VLAN 0 to HW filter on device bond34
[  257.262758][T14191] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  257.292289][T14188] veth45: entered promiscuous mode
[  257.296030][T14188] erspan0: left promiscuous mode
[  257.298178][T14188] erspan0: entered allmulticast mode
[  257.619626][T14209] netlink: 'syz.0.2035': attribute type 13 has an invalid length.
[  257.873588][T14223] block nbd1: Unsupported socket: shutdown callout must be supported.
[  258.236981][T14247] batadv2: entered promiscuous mode
[  258.238939][T14247] batadv2: entered allmulticast mode
[  258.398063][T14259] bond40: invalid ARP target 0.0.0.0 specified for addition
[  258.404213][T14259] bond40: option arp_ip_target: invalid value (0)
[  258.416144][T14259] bond40 (unregistering): Released all slaves
[  258.515842][T14275] netlink: 'syz.1.2048': attribute type 12 has an invalid length.
[  258.868353][T14288] netlink: 'syz.2.2052': attribute type 1 has an invalid length.
[  258.967886][T14292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.706003][T14320] sch_tbf: burst 8 is lower than device bridge15 mtu (1514) !
[  259.720895][T14320] netlink: 'syz.1.2059': attribute type 1 has an invalid length.
[  259.729633][T14321] netlink: 'syz.2.2058': attribute type 5 has an invalid length.
[  260.124680][T14342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.131292][T14342] syzkaller0: entered promiscuous mode
[  260.133569][T14342] syzkaller0: entered allmulticast mode
[  260.151800][T14342] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  260.176789][T14342] tipc: Resetting bearer <eth:syzkaller0>
[  260.194521][T14341] tipc: Resetting bearer <eth:syzkaller0>
[  260.234688][T14341] tipc: Disabling bearer <eth:syzkaller0>
[  260.246900][T14354] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.254480][T14355] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.258581][T14354] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  260.263782][T14354] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  260.375240][T14370] netlink: 'syz.0.2072': attribute type 11 has an invalid length.
[  260.427063][T14374] __nla_validate_parse: 16 callbacks suppressed
[  260.427083][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'.
[  260.634235][T14386] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2076'.
[  260.801789][T14396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'.
[  260.901166][T14400] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.904312][T14400] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  260.906724][T14400] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  261.012788][T14404] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  261.408801][T14416] IPVS: length: 169 != 24
[  261.515620][T14420] ip6gretap2: entered promiscuous mode
[  261.660391][T14426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.663442][T14426] syzkaller0: entered promiscuous mode
[  261.665672][T14426] syzkaller0: entered allmulticast mode
[  261.686200][T14426] tipc: Resetting bearer <eth:syzkaller0>
[  261.691844][T14425] tipc: Resetting bearer <eth:syzkaller0>
[  261.705187][T14425] tipc: Disabling bearer <eth:syzkaller0>
[  261.773199][T14429] bridge20: the hash_elasticity option has been deprecated and is always 16
[  261.775932][T14429] bridge20: entered allmulticast mode
[  261.845880][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'.
[  262.040361][T14459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2092'.
[  262.047319][T14459] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2092'.
[  262.067061][T14461] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.253699][T14488] netlink: 'syz.0.2098': attribute type 11 has an invalid length.
[  262.333258][T14498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2102'.
[  262.346835][T14496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2102'.
[  262.404981][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2105'.
[  262.443720][T14506] syzkaller1: entered promiscuous mode
[  262.445808][T14506] syzkaller1: entered allmulticast mode
[  262.502127][T14510] netlink: 'syz.0.2107': attribute type 1 has an invalid length.
[  262.528518][T14510] 8021q: adding VLAN 0 to HW filter on device bond37
[  262.552556][T14510] veth47: entered promiscuous mode
[  262.560734][T14510] bond37: (slave veth47): Enslaving as an active interface with a down link
[  262.568248][T14515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.571572][T14517] syzkaller0: entered promiscuous mode
[  262.573529][T14517] syzkaller0: entered allmulticast mode
[  262.588570][T14517] tipc: Resetting bearer <eth:syzkaller0>
[  262.607931][T14517] tipc: Disabling bearer <eth:syzkaller0>
[  262.684260][T14524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.687076][T14524] syzkaller0: entered promiscuous mode
[  262.689096][T14524] syzkaller0: entered allmulticast mode
[  262.707687][T14524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2110'.
[  262.764841][T14522] tipc: Resetting bearer <eth:syzkaller0>
[  262.782180][T14522] tipc: Disabling bearer <eth:syzkaller0>
[  262.854154][T14531] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  262.948168][T14537] 8021q: adding VLAN 0 to HW filter on device bond42
[  262.951100][T14537] bridge0: port 1(bond42) entered blocking state
[  262.953445][T14537] bridge0: port 1(bond42) entered disabled state
[  262.955724][T14537] bond42: entered allmulticast mode
[  262.959055][T14537] bond42: entered promiscuous mode
[  263.552724][T14564] netlink: 'syz.2.2119': attribute type 1 has an invalid length.
[  263.622030][T14564] 8021q: adding VLAN 0 to HW filter on device bond40
[  263.697105][T14572] netlink: 'syz.1.2120': attribute type 10 has an invalid length.
[  263.794257][T14583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.917233][T14595] 8021q: adding VLAN 0 to HW filter on device bond43
[  263.922457][T14595] bridge0: port 2(bond43) entered blocking state
[  263.926226][T14595] bridge0: port 2(bond43) entered disabled state
[  263.928713][T14595] bond43: entered allmulticast mode
[  263.933595][T14595] bond43: entered promiscuous mode
[  264.301221][T14618] netlink: 'syz.1.2132': attribute type 4 has an invalid length.
[  264.775220][T14639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  264.778025][T14639] IPv6: NLM_F_CREATE should be set when creating new route
[  264.780565][T14639] IPv6: NLM_F_CREATE should be set when creating new route
[  264.782861][T14639] IPv6: NLM_F_CREATE should be set when creating new route
[  264.818508][T14639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.162189][T14670] rdma_rxe: rxe_newlink: failed to add lo
[  265.279214][T14680] netlink: 'syz.1.2147': attribute type 1 has an invalid length.
[  265.284849][T14675] bond38: Unable to set peer notification delay as MII monitoring is disabled
[  265.291930][T14675] bond38 (unregistering): Released all slaves
[  265.346624][T14683] nbd: illegal input index 65508
[  265.388444][T14685] netlink: 'syz.2.2149': attribute type 7 has an invalid length.
[  265.391890][T14685] netlink: 'syz.2.2149': attribute type 8 has an invalid length.
[  265.655180][T14704] __nla_validate_parse: 35 callbacks suppressed
[  265.655201][T14704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2155'.
[  265.712076][T14705] sctp: [Deprecated]: syz.1.2154 (pid 14705) Use of struct sctp_assoc_value in delayed_ack socket option.
[  265.712076][T14705] Use struct sctp_sack_info instead
[  265.802008][T14705] syzkaller0: entered promiscuous mode
[  265.808983][T14705] syzkaller0: entered allmulticast mode
[  267.490931][T14725] geneve7: entered promiscuous mode
[  267.493557][T14725] geneve7: entered allmulticast mode
[  267.511189][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  267.514340][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  267.517559][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  267.523783][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  267.553623][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2162'.
[  267.666201][T14733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2164'.
[  267.679437][T14731] syzkaller1: entered promiscuous mode
[  267.690148][T14731] syzkaller1: entered allmulticast mode
[  267.711935][T14737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2166'.
[  267.733152][T14739] netlink: 'syz.1.2167': attribute type 30 has an invalid length.
[  267.760157][T14737] 8021q: adding VLAN 0 to HW filter on device bond38
[  267.763577][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'.
[  267.791029][T14739] bond44: option arp_missed_max: invalid value (0)
[  267.793264][T14739] bond44: option arp_missed_max: allowed values 1 - 255
[  267.804057][T14739] bond44 (unregistering): Released all slaves
[  267.873728][T14748] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.904897][T14755] netlink: 'syz.1.2170': attribute type 3 has an invalid length.
[  267.968463][T14755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.990974][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  268.019439][T14761] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  268.039966][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  268.043254][T14763] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  268.070261][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  268.118713][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2175'.
[  268.120599][T14772] netlink: 'syz.1.2176': attribute type 13 has an invalid length.
[  268.124541][T14772] netlink: 'syz.1.2176': attribute type 17 has an invalid length.
[  268.138873][T14772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  268.161307][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  268.206717][T14777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2177'.
[  268.374249][T14786] netlink: 'syz.0.2180': attribute type 1 has an invalid length.
[  268.382833][T14786] workqueue: Failed to create a rescuer kthread for wq "bond39": -EINTR
[  268.485811][T14799] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  268.494083][T14799] batman_adv: batadv0: Adding interface: gretap6
[  268.496251][T14799] batman_adv: batadv0: The MTU of interface gretap6 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.507317][T14799] batman_adv: batadv0: Interface activated: gretap6
[  268.530473][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  268.536570][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  268.563219][T14801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.583952][ T5915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  268.683804][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2183'.
[  268.687843][T14801] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2183'.
[  268.876386][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'.
[  268.980082][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  269.033471][T14823] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  269.038454][T14823] CPU: 0 UID: 0 PID: 14823 Comm: syz.2.2188 Not tainted syzkaller #0 PREEMPT(full) 
[  269.038476][T14823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.038487][T14823] Call Trace:
[  269.038495][T14823]  <TASK>
[  269.038503][T14823]  dump_stack_lvl+0x189/0x250
[  269.038533][T14823]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.038553][T14823]  ? __pfx__printk+0x10/0x10
[  269.038581][T14823]  ? kernfs_path_from_node+0x2f/0x290
[  269.038598][T14823]  ? kernfs_path_from_node+0x250/0x290
[  269.038612][T14823]  ? kernfs_path_from_node+0x2f/0x290
[  269.038631][T14823]  sysfs_warn_dup+0x8e/0xa0
[  269.038647][T14823]  sysfs_do_create_link_sd+0xc0/0x110
[  269.038665][T14823]  device_add_class_symlinks+0x1cf/0x240
[  269.038686][T14823]  device_add+0x475/0xb50
[  269.038705][T14823]  wiphy_register+0x1ba6/0x28d0
[  269.038744][T14823]  ? __pfx_wiphy_register+0x10/0x10
[  269.038764][T14823]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  269.038788][T14823]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  269.038809][T14823]  ieee80211_register_hw+0x3484/0x4100
[  269.038840][T14823]  ? ieee80211_register_hw+0x14c1/0x4100
[  269.038866][T14823]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  269.038887][T14823]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.038914][T14823]  ? __hrtimer_setup+0x187/0x210
[  269.038925][T14823]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  269.038950][T14823]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  269.039048][T14823]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  269.039068][T14823]  ? trace_kmalloc+0x1f/0xd0
[  269.039086][T14823]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  269.039106][T14823]  ? kstrndup+0xbf/0x160
[  269.039130][T14823]  hwsim_new_radio_nl+0xea4/0x1b10
[  269.039150][T14823]  ? __pfx___nla_validate_parse+0x10/0x10
[  269.039181][T14823]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  269.039206][T14823]  ? __nla_parse+0x40/0x60
[  269.039225][T14823]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  269.039248][T14823]  genl_family_rcv_msg_doit+0x215/0x300
[  269.039271][T14823]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  269.039295][T14823]  ? bpf_lsm_capable+0x9/0x20
[  269.039316][T14823]  ? security_capable+0x7e/0x2e0
[  269.039341][T14823]  genl_rcv_msg+0x60e/0x790
[  269.039364][T14823]  ? __pfx_genl_rcv_msg+0x10/0x10
[  269.039380][T14823]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  269.039410][T14823]  netlink_rcv_skb+0x208/0x470
[  269.039430][T14823]  ? __lock_acquire+0xab9/0xd20
[  269.039464][T14823]  ? __pfx_genl_rcv_msg+0x10/0x10
[  269.039484][T14823]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  269.039523][T14823]  ? down_read+0x1ad/0x2e0
[  269.039541][T14823]  genl_rcv+0x28/0x40
[  269.039556][T14823]  netlink_unicast+0x82f/0x9e0
[  269.039585][T14823]  ? __pfx_netlink_unicast+0x10/0x10
[  269.039607][T14823]  ? netlink_sendmsg+0x642/0xb30
[  269.039618][T14823]  ? skb_put+0x11b/0x210
[  269.039636][T14823]  netlink_sendmsg+0x805/0xb30
[  269.039658][T14823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  269.039676][T14823]  ? aa_sock_msg_perm+0xf1/0x1d0
[  269.039692][T14823]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  269.039729][T14823]  ? __pfx_netlink_sendmsg+0x10/0x10
[  269.039746][T14823]  __sock_sendmsg+0x21c/0x270
[  269.039773][T14823]  ____sys_sendmsg+0x505/0x830
[  269.039795][T14823]  ? __pfx_____sys_sendmsg+0x10/0x10
[  269.039821][T14823]  ? import_iovec+0x74/0xa0
[  269.039843][T14823]  ___sys_sendmsg+0x21f/0x2a0
[  269.039860][T14823]  ? __pfx____sys_sendmsg+0x10/0x10
[  269.039909][T14823]  ? __fget_files+0x2a/0x420
[  269.039922][T14823]  ? __fget_files+0x3a0/0x420
[  269.039944][T14823]  __x64_sys_sendmsg+0x19b/0x260
[  269.039962][T14823]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  269.040017][T14823]  ? rcu_is_watching+0x15/0xb0
[  269.040038][T14823]  ? do_syscall_64+0xbe/0x3b0
[  269.040057][T14823]  do_syscall_64+0xfa/0x3b0
[  269.040069][T14823]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.040090][T14823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.040104][T14823]  ? exc_page_fault+0x9f/0xf0
[  269.040126][T14823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.040140][T14823] RIP: 0033:0x7fbd1138eba9
[  269.040157][T14823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.040169][T14823] RSP: 002b:00007fbd12249038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.040186][T14823] RAX: ffffffffffffffda RBX: 00007fbd115d5fa0 RCX: 00007fbd1138eba9
[  269.040196][T14823] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  269.040205][T14823] RBP: 00007fbd11411e19 R08: 0000000000000000 R09: 0000000000000000
[  269.040216][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.040225][T14823] R13: 00007fbd115d6038 R14: 00007fbd115d5fa0 R15: 00007ffcc1d48e18
[  269.040250][T14823]  </TASK>
[  269.639135][T14866] netlink: 'syz.2.2198': attribute type 1 has an invalid length.
[  269.664006][T14862] netlink: 'syz.0.2199': attribute type 1 has an invalid length.
[  269.666706][T14862] netlink: 'syz.0.2199': attribute type 3 has an invalid length.
[  269.727022][T14864] bond43: left allmulticast mode
[  269.729000][T14864] bond43: left promiscuous mode
[  269.731505][T14864] bridge0: port 2(bond43) entered disabled state
[  269.736199][T14864] bond42: left allmulticast mode
[  269.738154][T14864] bond42: left promiscuous mode
[  269.740381][T14864] bridge0: port 1(bond42) entered disabled state
[  270.054665][T14891] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.202656][T14898] 8021q: adding VLAN 0 to HW filter on device bond39
[  270.205865][T14898] bridge0: port 1(bond39) entered blocking state
[  270.208584][T14898] bridge0: port 1(bond39) entered disabled state
[  270.212062][T14898] bond39: entered allmulticast mode
[  270.215230][T14898] bond39: entered promiscuous mode
[  270.236497][T14899] 8021q: adding VLAN 0 to HW filter on device bond40
[  270.239104][T14899] bridge0: port 2(bond40) entered blocking state
[  270.243564][T14899] bridge0: port 2(bond40) entered disabled state
[  270.246133][T14899] bond40: entered allmulticast mode
[  270.253194][T14899] bond40: entered promiscuous mode
[  270.351506][T14926] netlink: 'syz.0.2215': attribute type 3 has an invalid length.
[  270.357104][T14927] siw: device registration error -23
[  270.360849][T14926] siw: device registration error -23
[  270.363927][T14926] lo: left promiscuous mode
[  270.365730][T14926] tunl0: left promiscuous mode
[  270.367821][T14926] gre0: left promiscuous mode
[  270.372601][T14926] gretap0: left promiscuous mode
[  270.376428][T14926] erspan0: left allmulticast mode
[  270.379012][T14926] ip_vti0: left promiscuous mode
[  270.394061][T14926] ip6_vti0: left promiscuous mode
[  270.396590][T14926] sit0: left promiscuous mode
[  270.399055][T14926] ip6tnl0: left promiscuous mode
[  270.405012][T14926] ip6gre0: left promiscuous mode
[  270.407530][T14926] ip6gretap0: left promiscuous mode
[  270.425098][T14926] vcan0: left promiscuous mode
[  270.427978][T14926] dummy0: left promiscuous mode
[  270.436581][T14926] nlmon0: left promiscuous mode
[  270.455925][T14926] caif0: left promiscuous mode
[  270.457668][T14926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  270.463922][T14919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  270.526224][T14932] netlink: 'syz.1.2217': attribute type 19 has an invalid length.
[  270.556894][T14937] bond0: (slave gretap0): Enslaving as an active interface with an up link
[  270.606564][T14943] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  270.681830][T14947] 8021q: adding VLAN 0 to HW filter on device bond41
[  270.717454][T14955] __nla_validate_parse: 24 callbacks suppressed
[  270.717474][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'.
[  270.982456][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[  271.045280][T14984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2227'.
[  271.306156][T14994] bond41: (slave vxcan1): The slave device specified does not support setting the MAC address
[  271.315934][T14994] bond41: (slave vxcan1): Error -95 calling set_mac_address
[  271.425153][T15005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2231'.
[  271.437828][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'.
[  272.238606][T15043] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2239'.
[  272.358829][T15043] bridge0: port 1(macsec3) entered blocking state
[  272.373897][T15043] bridge0: port 1(macsec3) entered disabled state
[  272.381104][T15043] macsec3: entered allmulticast mode
[  272.389960][T15043] bridge0: entered allmulticast mode
[  272.405290][T15043] macsec3: left allmulticast mode
[  272.407551][T15043] bridge0: left allmulticast mode
[  272.500084][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  272.722045][T15053] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.729436][T15057] syzkaller0: entered promiscuous mode
[  272.733536][T15057] syzkaller0: entered allmulticast mode
[  272.747903][T15053] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  272.773991][T15052] tipc: Resetting bearer <eth:syzkaller0>
[  272.802409][T15052] tipc: Disabling bearer <eth:syzkaller0>
[  272.846568][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2243'.
[  272.865054][T15063] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  272.993932][T15064] validate_nla: 79 callbacks suppressed
[  272.993947][T15064] netlink: 'syz.2.2243': attribute type 3 has an invalid length.
[  272.999107][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2244'.
[  273.001222][T15064] netlink: 'syz.2.2243': attribute type 1 has an invalid length.
[  273.005835][T15064] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2243'.
[  273.048557][T15071] netlink: 'syz.1.2245': attribute type 1 has an invalid length.
[  273.055389][T15071] netlink: 'syz.1.2245': attribute type 1 has an invalid length.
[  273.107415][T15076] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2246'.
[  273.215830][T15086] netlink: 'syz.0.2249': attribute type 10 has an invalid length.
[  273.219479][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'.
[  273.266079][T15086] batman_adv: batadv0: Interface deactivated: gretap6
[  273.273906][T15089] netlink: 'syz.1.2250': attribute type 1 has an invalid length.
[  273.280022][T15090] netlink: 'syz.1.2250': attribute type 142 has an invalid length.
[  273.291802][T15089] workqueue: Failed to create a rescuer kthread for wq "bond45": -EINTR
[  273.363615][T15098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.372231][T15098] syzkaller0: entered promiscuous mode
[  273.374196][T15098] syzkaller0: entered allmulticast mode
[  273.452487][T15096] tipc: Resetting bearer <eth:syzkaller0>
[  273.468996][T15096] tipc: Disabling bearer <eth:syzkaller0>
[  273.475070][T15100] netlink: 'syz.0.2253': attribute type 1 has an invalid length.
[  273.494483][T15100] 8021q: adding VLAN 0 to HW filter on device bond42
[  273.525967][T15103] netlink: 'syz.0.2254': attribute type 6 has an invalid length.
[  273.542111][T15107] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.584753][T15107] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.636475][T15112] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.652427][T15107] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.693871][T15113] netem: change failed
[  273.723859][T15107] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.782332][T15119] netlink: 'syz.2.2257': attribute type 10 has an invalid length.
[  273.785016][T15119] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  273.851827][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  273.859533][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  273.884450][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  273.897027][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  273.981533][T15138] bond43: option min_links: invalid value (18446744073709551612)
[  273.984207][T15138] bond43: option min_links: allowed values 0 - 2147483647
[  273.988047][T15138] bond43 (unregistering): Released all slaves
[  274.025721][T15137] bond43: option min_links: invalid value (18446744073709551612)
[  274.044942][T15137] bond43: option min_links: allowed values 0 - 2147483647
[  274.051036][T15137] bond43 (unregistering): Released all slaves
[  274.714321][T15168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.717280][T15168] syzkaller0: entered promiscuous mode
[  274.719634][T15168] syzkaller0: entered allmulticast mode
[  274.745051][T15167] tipc: Resetting bearer <eth:syzkaller0>
[  274.766935][T15167] tipc: Disabling bearer <eth:syzkaller0>
[  275.301586][T15182] IPVS: set_ctl: invalid protocol: 44 172.20.20.42:20000
[  275.381794][T15182] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  275.443018][T15198] batadv_slave_0: left promiscuous mode
[  275.465900][T15198] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  275.468708][T15198] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  275.494133][T15198] geneve6: left promiscuous mode
[  275.496523][T15198] geneve6: left allmulticast mode
[  275.503176][T15198] geneve7: left promiscuous mode
[  275.506232][T15198] geneve7: left allmulticast mode
[  275.540246][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  275.545386][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  275.569584][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  275.573311][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  275.723960][T15219] __nla_validate_parse: 9 callbacks suppressed
[  275.723979][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2283'.
[  275.837846][T15230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2284'.
[  275.905502][T15232] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2285'.
[  276.345031][T15249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2289'.
[  276.348608][T15249] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2289'.
[  276.362175][T15249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2289'.
[  276.420042][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  276.784051][T15268] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2293'.
[  276.809507][T15270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2294'.
[  276.943338][T15279] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2297'.
[  276.948202][T15279] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2297'.
[  276.957590][T15279] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap7
[  276.961484][T15279] gretap7: entered promiscuous mode
[  276.963526][T15279] gretap7: entered allmulticast mode
[  277.022945][T15288] gtp4: entered promiscuous mode
[  277.024627][T15288] gtp4: entered allmulticast mode
[  277.598687][T15328] bond45 (unregistering): Released all slaves
[  277.758871][T15346] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  278.002117][T15369] validate_nla: 6 callbacks suppressed
[  278.002131][T15369] netlink: 'syz.1.2319': attribute type 1 has an invalid length.
[  278.019195][T15374] netlink: 'syz.2.2320': attribute type 7 has an invalid length.
[  278.021178][T15365] netlink: 'syz.0.2318': attribute type 10 has an invalid length.
[  278.026412][T15374] netlink: 'syz.2.2320': attribute type 8 has an invalid length.
[  278.045777][T15369] 8021q: adding VLAN 0 to HW filter on device bond45
[  278.061877][T15369] bond45: (slave gretap7): making interface the new active one
[  278.066761][T15369] bond45: (slave gretap7): Enslaving as an active interface with an up link
[  278.133617][ T5862] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  278.136846][ T5862] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  278.142003][ T5862] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  278.145136][ T5862] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  278.257194][T15393] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  279.011022][T15423] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  279.194851][T15429] bond43: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3)
[  279.203772][T15429] bond43 (unregistering): Released all slaves
[  279.424467][T15433] netlink: 'syz.2.2335': attribute type 5 has an invalid length.
[  279.587890][T15441] netlink: 'syz.0.2337': attribute type 1 has an invalid length.
[  279.742956][T15468] syzkaller1: entered promiscuous mode
[  279.744820][T15468] syzkaller1: entered allmulticast mode
[  279.752683][T15468] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  279.757957][T15468] netlink: 'syz.2.2340': attribute type 1 has an invalid length.
[  279.762423][T15468] netlink: 'syz.2.2340': attribute type 2 has an invalid length.
[  279.783843][T15468] geneve8: entered promiscuous mode
[  280.063034][T15478] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.067763][T15478] netlink: 'syz.0.2343': attribute type 1 has an invalid length.
[  280.119205][T15481] netlink: 'syz.0.2345': attribute type 3 has an invalid length.
[  280.145533][T15482] 8021q: adding VLAN 0 to HW filter on device bond44
[  280.155321][T15482] macvlan1: entered promiscuous mode
[  280.158255][T15482] macvlan1: entered allmulticast mode
[  280.161635][T15482] bond44: entered promiscuous mode
[  280.163928][T15482] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  280.168752][T15482] bond44: left promiscuous mode
[  280.189613][T15481] siw: device registration error -23
[  280.199834][T15481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.287196][T15488] IPv6: sit10: Disabled Multicast RS
[  280.290916][T15488] sit10: entered allmulticast mode
[  280.313832][T15490] veth0: mtu less than device minimum
[  280.316222][T15491] veth0: mtu less than device minimum
[  280.340774][T15490] veth53: entered promiscuous mode
[  280.408528][T15491] veth53: entered promiscuous mode
[  280.434425][T15492] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  280.475359][T15499] 8021q: adding VLAN 0 to HW filter on device bond45
[  280.500072][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  280.512690][T15501] bond46: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3)
[  280.518758][T15501] bond46 (unregistering): Released all slaves
[  280.549214][T15492] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  280.560657][T15505] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.564491][T15505] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  280.567415][T15505] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  280.588969][T15492] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  280.658272][T15492] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  280.730061][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  280.740939][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  280.753995][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  280.766708][ T5862] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  280.799156][T15513] __nla_validate_parse: 29 callbacks suppressed
[  280.799174][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2354'.
[  280.835735][T15513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2354'.
[  280.919468][T15524] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.957029][T15530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2360'.
[  281.001720][T15536] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2362'.
[  281.107640][T15540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2363'.
[  281.114764][T15540] 8021q: adding VLAN 0 to HW filter on device bond43
[  281.918806][T15580] 8021q: adding VLAN 0 to HW filter on device bond46
[  281.923595][T15580] bridge0: port 1(bond46) entered blocking state
[  281.925889][T15580] bridge0: port 1(bond46) entered disabled state
[  281.928361][T15580] bond46: entered allmulticast mode
[  281.933045][T15580] bond46: entered promiscuous mode
[  281.937752][T15580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2368'.
[  281.942907][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2368'.
[  282.059076][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'.
[  282.062931][T15591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2371'.
[  282.096315][T15595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2372'.
[  282.223047][T15597] bond47: option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  282.233123][T15597] bond47 (unregistering): Released all slaves
[  282.277311][T15602] syzkaller1: entered promiscuous mode
[  282.279577][T15602] syzkaller1: entered allmulticast mode
[  282.627593][T15637] tap0: tun_chr_ioctl cmd 1074025677
[  282.635552][T15637] tap0: linktype set to 0
[  283.581873][ T5862] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  283.585043][ T5862] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  283.600032][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  283.617979][T15691] validate_nla: 5 callbacks suppressed
[  283.617991][T15691] netlink: 'syz.0.2397': attribute type 14 has an invalid length.
[  283.627488][T15691] netlink: 'syz.0.2397': attribute type 13 has an invalid length.
[  283.938541][T15712] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  284.029972][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  284.057781][T15724] netlink: 'syz.1.2404': attribute type 1 has an invalid length.
[  284.105993][T15724] bond46: (slave gretap8): making interface the new active one
[  284.109319][T15724] bond46: (slave gretap8): Enslaving as an active interface with an up link
[  284.114763][T15712] netlink: 'syz.0.2401': attribute type 3 has an invalid length.
[  284.117446][T15712] netlink: 'syz.0.2401': attribute type 1 has an invalid length.
[  284.272825][T15739] bond37: (slave veth47): Releasing active interface
[  284.286392][T15739] batman_adv: batadv0: Removing interface: gretap6
[  284.297926][T15739] bond39: left allmulticast mode
[  284.300790][T15739] bond39: left promiscuous mode
[  284.303639][T15739] bridge0: port 1(bond39) entered disabled state
[  284.308870][T15739] bond40: left allmulticast mode
[  284.311965][T15739] bond40: left promiscuous mode
[  284.314217][T15739] bridge0: port 2(bond40) entered disabled state
[  284.334231][T15745] netlink: 'syz.1.2410': attribute type 1 has an invalid length.
[  284.360941][   T47] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  284.366686][T15745] 8021q: adding VLAN 0 to HW filter on device bond47
[  284.373950][T15744] delete_channel: no stack
[  284.379191][T15748] netlink: 'syz.0.2411': attribute type 10 has an invalid length.
[  284.503134][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  284.683700][T15771] netlink: 'syz.1.2417': attribute type 4 has an invalid length.
[  284.735737][T15773] sit0: entered promiscuous mode
[  284.872441][T15779] netlink: 'syz.2.2420': attribute type 10 has an invalid length.
[  285.013416][T15783] netlink: 'syz.2.2421': attribute type 1 has an invalid length.
[  285.036130][T15783] 8021q: adding VLAN 0 to HW filter on device bond47
[  285.150327][   T47] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  285.330643][T15791] bond39: (slave veth27): Releasing active interface
[  285.336472][T15791] bond46: left allmulticast mode
[  285.338641][T15791] bond46: left promiscuous mode
[  285.344199][T15791] bridge0: port 1(bond46) entered disabled state
[  285.708693][T15830] hsr0: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  285.713211][T15830] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  285.717674][T15830] hsr0: entered allmulticast mode
[  285.720487][T15830] macvlan0: entered allmulticast mode
[  285.722904][T15830] batadv0: entered allmulticast mode
[  285.726068][T15830] 8021q: adding VLAN 0 to HW filter on device hsr0
[  285.858282][T15833] __nla_validate_parse: 22 callbacks suppressed
[  285.858304][T15833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2427'.
[  285.858366][T15837] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2427'.
[  286.737726][T15856] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2432'.
[  286.846598][T15864] bond48 (unregistering): Released all slaves
[  286.922874][T15863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2433'.
[  286.979498][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'.
[  287.108158][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2441'.
[  287.119468][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'.
[  287.229558][T15898] bond48: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3)
[  287.237222][T15898] bond48 (unregistering): Released all slaves
[  287.514538][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2446'.
[  287.584432][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'.
[  287.704976][T15918] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2449'.
[  287.789888][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  287.993604][T15929] bond48: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3)
[  288.000715][T15929] bond48 (unregistering): Released all slaves
[  288.022270][T15931] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.139950][T15938] nbd: must specify at least one socket
[  288.149369][T15936] geneve5: entered promiscuous mode
[  288.154600][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  288.158515][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  288.162074][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  288.165059][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  288.660155][T15960] bond48: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3)
[  288.667730][T15960] bond48 (unregistering): Released all slaves
[  288.957965][T15982] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.036824][T15991] validate_nla: 4 callbacks suppressed
[  289.036841][T15991] netlink: 'syz.1.2469': attribute type 1 has an invalid length.
[  289.088263][T15991] bond48: (slave vxcan9): The slave device specified does not support setting the MAC address
[  289.096629][T15991] bond48: (slave vxcan9): Error -95 calling set_mac_address
[  289.204852][T16003] bridge18: the hash_elasticity option has been deprecated and is always 16
[  289.208362][T16003] bridge18: entered allmulticast mode
[  289.230107][T16005] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.317568][T16009] sctp: [Deprecated]: syz.2.2473 (pid 16009) Use of int in maxseg socket option.
[  289.317568][T16009] Use struct sctp_assoc_value instead
[  289.462246][T16019] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  289.687620][T16026] netlink: 'syz.1.2477': attribute type 10 has an invalid length.
[  290.193253][T16052] netlink: 'syz.0.2484': attribute type 32 has an invalid length.
[  290.249678][T16052] bond44: Setting coupled_control to off (0)
[  290.493632][T16065] 8021q: adding VLAN 0 to HW filter on device bond49
[  290.526308][T16072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.529521][T16072] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  290.533597][T16072] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  290.542145][T16072] tipc: Resetting bearer <eth:syzkaller0>
[  290.915027][T16089] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  290.917376][T16089] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  290.950798][T16096] __nla_validate_parse: 14 callbacks suppressed
[  290.950816][T16096] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2494'.
[  291.035767][T16096] syzkaller1: entered promiscuous mode
[  291.037812][T16096] syzkaller1: entered allmulticast mode
[  291.047352][T16098] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.061513][T16096] 8021q: VLANs not supported on ip6gre0
[  291.202813][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2498'.
[  291.206300][T16104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2498'.
[  291.395285][T16108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  292.175575][T16122] netlink: 'syz.2.2502': attribute type 1 has an invalid length.
[  292.178143][T16122] netlink: 'syz.2.2502': attribute type 1 has an invalid length.
[  292.187971][T16122] netlink: 'syz.2.2502': attribute type 2 has an invalid length.
[  292.194860][T16122] netlink: 'syz.2.2502': attribute type 2 has an invalid length.
[  292.197509][T16122] netlink: 'syz.2.2502': attribute type 2 has an invalid length.
[  292.211912][T16122] netlink: 'syz.2.2502': attribute type 1 has an invalid length.
[  292.478475][T16124] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2503'.
[  292.726494][T16144] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  292.736124][T16144] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  292.746078][T16143] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.186326][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2510'.
[  293.331925][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'.
[  293.335027][T16174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2513'.
[  293.338560][T16174] netlink: 'syz.1.2513': attribute type 1 has an invalid length.
[  293.343066][T16174] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2513'.
[  293.358578][T16177] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2512'.
[  293.382641][T16174] nbd: socks must be embedded in a SOCK_ITEM attr
[  293.388863][T16174] block nbd1: shutting down sockets
[  293.411837][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'.
[  293.450038][T16175] nbd: socks must be embedded in a SOCK_ITEM attr
[  293.452063][T16175] block nbd1: shutting down sockets
[  293.512892][T16187] 8021q: adding VLAN 0 to HW filter on device bond45
[  293.529416][T16187] veth55: entered promiscuous mode
[  293.535480][T16187] bond45: (slave veth55): Enslaving as a backup interface with a down link
[  293.545188][T16192] : entered promiscuous mode
[  293.705922][T16208] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.803390][T16212] IPVS: set_ctl: invalid protocol: 44 172.20.20.42:20000
[  293.813637][T16212] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  294.373341][T16246] : renamed from batadv_slave_1
[  294.502055][T16246] validate_nla: 5 callbacks suppressed
[  294.502102][T16246] netlink: 'syz.1.2534': attribute type 17 has an invalid length.
[  294.525163][T16259] netlink: 'syz.2.2536': attribute type 3 has an invalid length.
[  294.541478][T16259] IPv6: sit10: Disabled Multicast RS
[  294.544589][T16259] sit10: entered allmulticast mode
[  294.683934][T16263] sctp: [Deprecated]: syz.0.2538 (pid 16263) Use of struct sctp_assoc_value in delayed_ack socket option.
[  294.683934][T16263] Use struct sctp_sack_info instead
[  294.877177][T16282] bond50: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3)
[  294.885392][T16282] bond50 (unregistering): Released all slaves
[  295.098007][T16291] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  295.101907][T16291] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  295.179447][T16295] bond50: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  295.186016][T16295] bond50 (unregistering): Released all slaves
[  295.200929][T16293] vxcan0: Master is either lo or non-ether device
[  295.248159][T16302] netlink: 'syz.1.2548': attribute type 1 has an invalid length.
[  295.288737][T16305] pim6reg1: entered allmulticast mode
[  295.388939][T16313] bond50: option primary_reselect: invalid value (6)
[  295.394536][T16313] bond50 (unregistering): Released all slaves
[  295.506244][T16324] netlink: 'syz.0.2554': attribute type 1 has an invalid length.
[  295.522844][T16324] 8021q: adding VLAN 0 to HW filter on device bond46
[  295.592388][T16339] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.625498][T16342] ip6gretap6: entered promiscuous mode
[  295.627663][T16342] bond3: (slave ip6gretap6): Enslaving as a backup interface with an up link
[  296.509903][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  296.512431][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  296.561566][T16365] __nla_validate_parse: 18 callbacks suppressed
[  296.561578][T16365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2564'.
[  296.566558][T16366] netlink: 'syz.2.2563': attribute type 12 has an invalid length.
[  296.569052][T16366] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2563'.
[  296.643797][T16371] netlink: 'syz.0.2566': attribute type 5 has an invalid length.
[  296.818476][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2570'.
[  296.827138][T16388] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2571'.
[  296.830154][T16388] openvswitch: netlink: Flow actions attr not present in new flow.
[  296.949062][T16394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.001017][T16397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2573'.
[  297.142816][T16404] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2576'.
[  297.201407][T16404] .70: renamed from ..0
[  297.204482][T16404] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  297.207902][T16404] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  297.213075][T16404] .70: left promiscuous mode
[  297.214603][T16404] .70: entered allmulticast mode
[  297.216261][T16404] hsr_slave_0: entered allmulticast mode
[  297.218917][T16404] hsr_slave_1: entered allmulticast mode
[  297.221688][T16404] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  297.336850][T16412] netlink: 'syz.2.2579': attribute type 2 has an invalid length.
[  297.351329][T16412] : entered promiscuous mode
[  297.390672][T16414] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  297.394213][T16414] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  297.397175][T16414] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  297.629685][T16420] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  297.678905][T16422] netlink: 'syz.1.2584': attribute type 1 has an invalid length.
[  297.730587][T16422] bond50: (slave vxcan9): The slave device specified does not support setting the MAC address
[  297.735779][T16422] bond50: (slave vxcan9): Error -95 calling set_mac_address
[  297.791053][T16428] bond0: (slave rose0): Error: Device can not be enslaved while up
[  297.795826][T16428] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2586'.
[  297.847601][T16430] bond51: option ad_select: invalid value (34)
[  297.851345][T16430] bond51 (unregistering): Released all slaves
[  297.962125][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'.
[  298.027202][T16436] openvswitch: netlink: Flow actions attr not present in new flow.
[  298.098043][T16448] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2591'.
[  298.185951][T16455] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.195939][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2594'.
[  298.209135][T16458] netlink: 'syz.0.2595': attribute type 1 has an invalid length.
[  298.216501][T16458] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.249026][T16460] veth25: entered promiscuous mode
[  298.276238][T16461] sch_fq: defrate 257 ignored.
[  298.404267][T16470] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.805461][T16478] bond0: (slave rose0): Error: Device can not be enslaved while up
[  299.019265][T16485] netlink: 'syz.2.2603': attribute type 1 has an invalid length.
[  299.534163][T16519] netlink: 'syz.2.2610': attribute type 10 has an invalid length.
[  299.695736][T16524] bond50: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3)
[  299.705223][T16524] bond50 (unregistering): Released all slaves
[  299.774006][T16527] netlink: 'syz.2.2612': attribute type 6 has an invalid length.
[  300.298592][T16544] erspan0: entered promiscuous mode
[  300.302198][T16544] erspan0: left promiscuous mode
[  300.786573][T16547] netlink: 'syz.0.2617': attribute type 1 has an invalid length.
[  300.839648][T16548] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  300.997258][T16552] netlink: 'syz.2.2618': attribute type 5 has an invalid length.
[  301.006648][T16552] geneve0: entered promiscuous mode
[  301.008467][T16552] geneve0: entered allmulticast mode
[  301.012294][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  301.015216][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  301.019927][T16552] netlink: 'syz.2.2618': attribute type 2 has an invalid length.
[  301.022809][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  301.025817][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  301.037246][T16552] : entered promiscuous mode
Connection to localhost closed by remote host.
[  301.875601][T16510] Set syz1 is full, maxelem 65536 reached
[  313.780092][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  317.713545][    C1] ==================================================================
[  317.716706][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  317.719800][    C1] Write of size 8 at addr ffff88803a442d30 by task swapper/1/0
[  317.722649][    C1] 
[  317.723578][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  317.723598][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  317.723607][    C1] Call Trace:
[  317.723622][    C1]  <IRQ>
[  317.723629][    C1]  dump_stack_lvl+0x189/0x250
[  317.723648][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  317.723667][    C1]  ? rcu_is_watching+0x15/0xb0
[  317.723680][    C1]  ? __kasan_check_byte+0x12/0x40
[  317.723700][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.723715][    C1]  ? rcu_is_watching+0x15/0xb0
[  317.723728][    C1]  ? lock_release+0x4b/0x3e0
[  317.723749][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  317.723766][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  317.723781][    C1]  print_report+0xca/0x240
[  317.723794][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  317.723807][    C1]  kasan_report+0x118/0x150
[  317.723826][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  317.723842][    C1]  __xfrm_state_delete+0x696/0xca0
[  317.723861][    C1]  xfrm_timer_handler+0x18f/0xa00
[  317.723877][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  317.723889][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  317.723908][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.723929][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  317.723947][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  317.723967][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  317.723980][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  317.723993][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  317.724014][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  317.724028][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  317.724045][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  317.724061][    C1]  handle_softirqs+0x286/0x870
[  317.724076][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  317.724091][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  317.724107][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  317.724126][    C1]  __irq_exit_rcu+0xca/0x1f0
[  317.724139][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  317.724157][    C1]  irq_exit_rcu+0x9/0x30
[  317.724169][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  317.724188][    C1]  </IRQ>
[  317.724193][    C1]  <TASK>
[  317.724199][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  317.724215][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  317.724235][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 27 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  317.724247][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  317.724260][    C1] RAX: 8a9f7b34d7787300 RBX: ffffffff819683f8 RCX: 8a9f7b34d7787300
[  317.724272][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b8dbb RDI: ffffffff8be33880
[  317.724281][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  317.724292][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39830
[  317.724302][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d7000
[  317.724313][    C1]  ? do_idle+0x1e8/0x510
[  317.724330][    C1]  default_idle+0x13/0x20
[  317.724344][    C1]  default_idle_call+0x74/0xb0
[  317.724390][    C1]  do_idle+0x1e8/0x510
[  317.724404][    C1]  ? __pfx_do_idle+0x10/0x10
[  317.724416][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.724442][    C1]  cpu_startup_entry+0x44/0x60
[  317.724456][    C1]  start_secondary+0x101/0x110
[  317.724478][    C1]  common_startup_64+0x13e/0x147
[  317.724504][    C1]  </TASK>
[  317.724510][    C1] 
[  317.853697][    C1] Allocated by task 14243:
[  317.855489][    C1]  kasan_save_track+0x3e/0x80
[  317.857370][    C1]  __kasan_slab_alloc+0x6c/0x80
[  317.859314][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  317.861565][    C1]  xfrm_state_alloc+0x24/0x2f0
[  317.863501][    C1]  __find_acq_core+0x8a7/0x1c00
[  317.865437][    C1]  xfrm_find_acq+0x78/0xa0
[  317.867225][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  317.869239][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  317.871236][    C1]  netlink_rcv_skb+0x208/0x470
[  317.873161][    C1]  xfrm_netlink_rcv+0x79/0x90
[  317.875049][    C1]  netlink_unicast+0x82f/0x9e0
[  317.876985][    C1]  netlink_sendmsg+0x805/0xb30
[  317.878876][    C1]  __sock_sendmsg+0x21c/0x270
[  317.880765][    C1]  ____sys_sendmsg+0x505/0x830
[  317.882708][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  317.884592][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  317.886535][    C1]  do_syscall_64+0xfa/0x3b0
[  317.888283][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.890541][    C1] 
[  317.891465][    C1] Freed by task 10:
[  317.892992][    C1]  kasan_save_track+0x3e/0x80
[  317.894897][    C1]  kasan_save_free_info+0x46/0x50
[  317.896853][    C1]  __kasan_slab_free+0x5b/0x80
[  317.898673][    C1]  kmem_cache_free+0x18f/0x400
[  317.900537][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  317.902469][    C1]  process_scheduled_works+0xae1/0x17b0
[  317.904593][    C1]  worker_thread+0x8a0/0xda0
[  317.906362][    C1]  kthread+0x711/0x8a0
[  317.907903][    C1]  ret_from_fork+0x3fc/0x770
[  317.909702][    C1]  ret_from_fork_asm+0x1a/0x30
[  317.911536][    C1] 
[  317.912467][    C1] The buggy address belongs to the object at ffff88803a442d00
[  317.912467][    C1]  which belongs to the cache xfrm_state of size 928
[  317.917560][    C1] The buggy address is located 48 bytes inside of
[  317.917560][    C1]  freed 928-byte region [ffff88803a442d00, ffff88803a4430a0)
[  317.922128][    C1] 
[  317.922964][    C1] The buggy address belongs to the physical page:
[  317.925290][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803a443a80 pfn:0x3a440
[  317.928412][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  317.931145][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  317.933728][    C1] page_type: f5(slab)
[  317.935109][    C1] raw: 00fff00000000040 ffff888104b04640 dead000000000122 0000000000000000
[  317.938064][    C1] raw: ffff88803a443a80 00000000800e0005 00000000f5000000 0000000000000000
[  317.941196][    C1] head: 00fff00000000040 ffff888104b04640 dead000000000122 0000000000000000
[  317.944195][    C1] head: ffff88803a443a80 00000000800e0005 00000000f5000000 0000000000000000
[  317.947161][    C1] head: 00fff00000000002 ffffea0000e91001 00000000ffffffff 00000000ffffffff
[  317.950372][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  317.953110][    C1] page dumped because: kasan: bad access detected
[  317.955355][    C1] page_owner tracks the page as allocated
[  317.957375][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6722, tgid 6714 (syz.0.192), ts 84614060268, free_ts 84514774100
[  317.964025][    C1]  post_alloc_hook+0x240/0x2a0
[  317.965827][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  317.967942][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  317.970128][    C1]  alloc_pages_mpol+0x232/0x4a0
[  317.971851][    C1]  allocate_slab+0x8a/0x370
[  317.973429][    C1]  ___slab_alloc+0xbeb/0x1420
[  317.975016][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  317.977111][    C1]  xfrm_state_alloc+0x24/0x2f0
[  317.978936][    C1]  xfrm_add_sa+0x17d1/0x4070
[  317.980707][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  317.982566][    C1]  netlink_rcv_skb+0x208/0x470
[  317.984389][    C1]  xfrm_netlink_rcv+0x79/0x90
[  317.986100][    C1]  netlink_unicast+0x82f/0x9e0
[  317.987969][    C1]  netlink_sendmsg+0x805/0xb30
[  317.989783][    C1]  __sock_sendmsg+0x21c/0x270
[  317.991374][    C1]  ____sys_sendmsg+0x505/0x830
[  317.993123][    C1] page last free pid 5299 tgid 5299 stack trace:
[  317.995271][    C1]  __free_frozen_pages+0xbc4/0xd30
[  317.997406][    C1]  __put_partials+0x156/0x1a0
[  317.999359][    C1]  put_cpu_partial+0x17c/0x250
[  318.001094][    C1]  __slab_free+0x2d5/0x3c0
[  318.002754][    C1]  qlist_free_all+0x97/0x140
[  318.004237][    C1]  kasan_quarantine_reduce+0x148/0x160
[  318.006218][    C1]  __kasan_slab_alloc+0x22/0x80
[  318.007809][    C1]  __kmalloc_noprof+0x224/0x4f0
[  318.009410][    C1]  tomoyo_realpath_from_path+0xe3/0x5d0
[  318.011382][    C1]  tomoyo_path_perm+0x213/0x4b0
[  318.013231][    C1]  security_inode_getattr+0x12f/0x330
[  318.014959][    C1]  vfs_fstatat+0xb1/0x170
[  318.016243][    C1]  __x64_sys_newfstatat+0x116/0x190
[  318.018151][    C1]  do_syscall_64+0xfa/0x3b0
[  318.019925][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.021749][    C1] 
[  318.022492][    C1] Memory state around the buggy address:
[  318.024238][    C1]  ffff88803a442c00: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  318.026960][    C1]  ffff88803a442c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  318.029919][    C1] >ffff88803a442d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.032667][    C1]                                      ^
[  318.034471][    C1]  ffff88803a442d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.037107][    C1]  ffff88803a442e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  318.039453][    C1] ==================================================================
[  318.042001][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  318.044641][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  318.047814][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  318.051282][    C1] Call Trace:
[  318.052501][    C1]  <IRQ>
[  318.053644][    C1]  dump_stack_lvl+0x99/0x250
[  318.055219][    C1]  ? __asan_memcpy+0x40/0x70
[  318.056585][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.058246][    C1]  ? __pfx__printk+0x10/0x10
[  318.059734][    C1]  vpanic+0x281/0x750
[  318.060998][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  318.062852][    C1]  ? __pfx_vpanic+0x10/0x10
[  318.064194][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  318.066057][    C1]  panic+0xb9/0xc0
[  318.067457][    C1]  ? __pfx_panic+0x10/0x10
[  318.068876][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  318.070739][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  318.072925][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  318.074552][    C1]  check_panic_on_warn+0x89/0xb0
[  318.076128][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  318.078057][    C1]  end_report+0x78/0x160
[  318.079792][    C1]  kasan_report+0x129/0x150
[  318.081205][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  318.082822][    C1]  __xfrm_state_delete+0x696/0xca0
[  318.084550][    C1]  xfrm_timer_handler+0x18f/0xa00
[  318.086528][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  318.088894][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  318.090755][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  318.092768][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  318.094674][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  318.096907][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  318.098781][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  318.100664][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  318.102636][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  318.104536][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  318.106703][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  318.108756][    C1]  handle_softirqs+0x286/0x870
[  318.110617][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  318.112088][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  318.113909][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  318.116023][    C1]  __irq_exit_rcu+0xca/0x1f0
[  318.117898][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  318.119944][    C1]  irq_exit_rcu+0x9/0x30
[  318.121678][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  318.123456][    C1]  </IRQ>
[  318.124623][    C1]  <TASK>
[  318.125692][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  318.127846][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  318.130171][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 27 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  318.136529][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  318.138578][    C1] RAX: 8a9f7b34d7787300 RBX: ffffffff819683f8 RCX: 8a9f7b34d7787300
[  318.141252][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b8dbb RDI: ffffffff8be33880
[  318.143714][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  318.146109][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39830
[  318.148635][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d7000
[  318.151650][    C1]  ? do_idle+0x1e8/0x510
[  318.153062][    C1]  default_idle+0x13/0x20
[  318.154373][    C1]  default_idle_call+0x74/0xb0
[  318.155822][    C1]  do_idle+0x1e8/0x510
[  318.157085][    C1]  ? __pfx_do_idle+0x10/0x10
[  318.158610][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  318.160211][    C1]  cpu_startup_entry+0x44/0x60
[  318.161879][    C1]  start_secondary+0x101/0x110
[  318.163455][    C1]  common_startup_64+0x13e/0x147
[  318.165251][    C1]  </TASK>
[  318.167037][    C1] Kernel Offset: disabled
[  318.168533][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:35:00  Registers:
info registers vcpu 0

CPU#0
RAX=51dd83c7ae4a8f00 RBX=ffffffff819683f8 RCX=51dd83c7ae4a8f00 RDX=0000000000000001
RSI=ffffffff8d9b8dbb RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39830 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558b2ac64530 CR3=0000000022d4e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 000055558f81b498
XMM02=080003f003020400 03ec0310040003e8 XMM03=04800306040003fc 0310040003f80320
XMM04=030a0400048c0310 0400048803040800 XMM05=010010000a800401 0000000806060168
XMM06=e00008000ae00300 10000ad003001000 XMM07=0ac0030210000ab0 0301981000459003
XMM08=0000000808060490 030a0400048c0310 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=8a9f7b34d7787300 RBX=ffffffff819683f8 RCX=8a9f7b34d7787300 RDX=0000000000000001
RSI=ffffffff8d9b8dbb RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39830 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d7000
RIP=ffffffff8b7a03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558b2ac60010 CR3=0000000022d4e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 000055558f81b498
XMM02=080003f003020400 03ec0310040003e8 XMM03=04800306040003fc 0310040003f80320
XMM04=030a0400048c0310 0400048803040800 XMM05=010010000a800401 0000000806060168
XMM06=e00008000ae00300 10000ad003001000 XMM07=0ac0030210000ab0 0301981000459003
XMM08=0000000808060490 030a0400048c0310 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
