last executing test programs:

1.680005231s ago: executing program 2 (id=1432):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x3c)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r6, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc6522303ecd2fe041"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000000000000000a001000171de5374a18bb08000300000000002950e6bf5a407d5b89b7f6d91da13bd1d879341211b9ebd09999f6ff797592c827d9e104d889d082bbb61b2cc02aa081589083146a86335b2bdbe36dc497a78df3fcadff1f79efaa06cce654d860701a0494f6017da19477081499e87584482504510184935678bd3133da078e688c42faad4df6f969f25a06dc18c99d8d855fdc20585bd523fc84228c97aea12423f5c1575666ac7681d51c653913a54c1ff7b0f675685b0cf81d6b75e8", @ANYRESDEC=r9, @ANYBLOB="3f000880dc0a08583e781a6747e23307096e72a4fed18ffdcf4fa37e63b7e4bb1a0d054d8c1b565d2c9867fd69cb6c9bfa1a7b9be3366f0da9d58ff4ca6ccc00"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000400)={r12, r11, 0x6, 0x0, 0x0, 0x9, 0x0, 0xc48, 0x7f, 0xc6, 0x1, 0x0, 'syz0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x0, 0xfffffffffffffdbc, 0x0, 0x1, 0x20007fff}, 0x40)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)

769.758147ms ago: executing program 2 (id=1441):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000440)=""/238, 0xee, 0x0, &(0x7f0000000540)=""/133, 0x85}}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000000003c0000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

710.575012ms ago: executing program 1 (id=1443):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80480, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
shutdown(r1, 0x2000000)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x8942, &(0x7f0000000440)={'sit0\x00', 0x0})
sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1fb4f8e1202c8efe, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="2056922489a10763765dfbbf6b974b51478419aa18c25ca3c842188a07b42666f308c3c4581b0700d7060639893f0fabb27bde4342ad0bc8f08bcc70b508498fe085c265cc683c4493e195c455eb7f237b7c98cafb70d56e86f802a04cde", 0x5e)
r7 = accept(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}], 0x1, 0x0)
recvmsg(r7, &(0x7f000000b680)={0x0, 0x0, 0x0}, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x2c, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

710.113429ms ago: executing program 0 (id=1444):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0xb767}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x10}]}}}]}, 0x4c}}, 0x44000)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000000c0)='taprio\x00', 0x400, &(0x7f0000000200)={@_ha_fsid={[0x8, 0x6]}, {0x0, 0x80, 0x9, 0x4}}, 0xfffffff2, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x6})
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={r3, 0x4, "3f77bd30"}, &(0x7f00000002c0)=0xc)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r3, 0x8}, &(0x7f0000000080)=0x8)

618.912921ms ago: executing program 0 (id=1445):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x2, 0x8, 0x0, @loopback, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x80, 0x20, 0x25d9, 0x77f87502}}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) (async)
r4 = socket(0x10, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async)
readv(r2, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) (async)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) (async)
recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001)
socket$inet6_tcp(0xa, 0x1, 0x0)

618.169553ms ago: executing program 1 (id=1446):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @private=0xa010101, 0x1f, 0xd}}) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400074020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

615.480142ms ago: executing program 2 (id=1447):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x52e, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xa}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16=<r0=>0xffffffffffffffff, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000ff6fe7a9b9284011c3e27d525ec2c9ea1792d91ed68e001000daf3715ede9ef242b8d840766beb4c24c76c8da7b34e11cdd9a9d74cece18a7e0ed1789355a2642b6d187430e8dc3f54e8d3dbda06cf2a0d243ed5b59161f05bd833d7a4638ab6da", @ANYRES32=r0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$unix(0x1, 0x3, 0x0)
getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

530.741074ms ago: executing program 2 (id=1448):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0x11, 0x7, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="62053c00", 0x4}], 0x1}, 0x4040)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800009500000020000000e6ff"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'vlan0\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x7d4165c9)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r9, 0x7d4165c9)
listen(r8, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r11, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r12, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @empty, 0x4}}, 0x0, 0x0, 0x40, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8)
r13 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r13, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x29, 0x0, &(0x7f0000000200)=""/41, 0x2, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)="5929528b", 0x2, 0x0, 0x1}, 0x50)

529.785953ms ago: executing program 0 (id=1449):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fa01, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
pipe(&(0x7f00000001c0)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000940))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e4ffffc9", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf253700000008000300", @ANYRES32=r3, @ANYBLOB="080026006c0900000800a10005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20002081) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r2], 0x44}}, 0x8000)

528.996465ms ago: executing program 1 (id=1450):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6249}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x50}}, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r8, 0x1, 0x74bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x26000080)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r9, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r10], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x80}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040002}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x40040)

409.329614ms ago: executing program 0 (id=1451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4000000210001002cbd7000fddbdf250a000004ff0000010200000014000100fe8000000000000000000000000000aa1400010020010000000000000000000000000001140011007665746831"], 0xa4}, 0x1, 0x0, 0x0, 0x4000841}, 0x1000c890)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r2=>0x0})
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100000000200"/20, @ANYRES32=0x0, @ANYBLOB="078000000000000008002900316f010008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x76a84d1145a5b2de}, 0x4054)

408.666431ms ago: executing program 1 (id=1452):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="2c0000003e0007010300000000000000047c00000400420a00000000686d6163287368613232344400000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850600000000ff6123614a000800", @ANYRESHEX=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001", @ANYRESHEX=r1, @ANYRES8=r1], 0x3c}}, 0x40000)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r6, {0xc, 0x5}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4804)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r8, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/4117, 0x1015}], 0x1}, 0xfffffff9}], 0x1, 0x0, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0600002c000100fefffffffcdbdf250a06f2801504"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r4}, 0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r12=>0x0})
r13 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r12, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r13], 0x44}}, 0x2000800)
recvfrom$packet(r5, &(0x7f0000000700)=""/198, 0xc6, 0x40010000, &(0x7f0000000800)={0x11, 0xf7, r12, 0x1, 0x8, 0x6, @broadcast}, 0x14)

360.195181ms ago: executing program 2 (id=1453):
r0 = socket$unix(0x1, 0x5, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003800000000020000100010000000000000004000200040001"], 0x40}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc0c0)

355.949964ms ago: executing program 0 (id=1454):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80482, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'xfrm0\x00', <r8=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0xc, r8}, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x9, r9, 0x3}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)='\x00', 0x1}], 0x1}, 0x400d5)
close(0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r12 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r13=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r13, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r13, @ANYBLOB="0c00018008000100", @ANYRES32=r13], 0x7c}}, 0x20000000)

300.565132ms ago: executing program 2 (id=1455):
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001a00010028bd7000fcdbdf250a0000fb0002fe01", @ANYRES32, @ANYBLOB="14000500fe880000000000000000000000000001080010000900000008001900", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48001)
syz_emit_ethernet(0x35, &(0x7f00000010c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xfffffffffffffffe}}}}}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r5, 0x0, 0x3, 0x0, 0x0) (async, rerun: 64)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (rerun: 64)

118.929482ms ago: executing program 1 (id=1456):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x2}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x24048000}, 0x800)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
r7 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000540)={0x4, {{0xa, 0x4e20, 0x38, @mcast1, 0xfffff511}}, {{0xa, 0x4e21, 0xcd7, @ipv4={'\x00', '\xff\xff', @remote}, 0x2e}}}, 0x108)
ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000140)={@any, 0x6})
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70020000", @ANYRES16=r6, @ANYBLOB="0f0700000000000000006700000048000e000c"], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r6, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xb}, @NL80211_ATTR_VENDOR_DATA={0x17, 0xc5, "39b3671f48dbfab6b8cba59a1a558786ad3adb"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5379}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffc}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x64}}, 0x800)

737.735µs ago: executing program 0 (id=1457):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f00000006c0), 0x4)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001f40)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0xffe0, 0xfff3}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r3, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c00"], 0x48}}, 0x4084)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={&(0x7f0000000240)="35c13c41df97f5f5dd5bf181524a14157f5540ef8add475c0770e6908f46c2bcffe7f665b9a718305c108a40cab2e053d8820c85ae8c2da9fc0dc696fb9b8c14e04561685e657ac389098adf2cf57fed0120efd4b09d06d8ce1de4e797115d710e02fb9a8c47fd8d2df83774519a2ec64a96b85b3cac50580af2a1a4ffe1b1286b12ae168110fd3ebc8dc8e23df32b3cd8cb6e670703073506efb586b1b0f68ebd6ca7754d8677099ed46e12ac6e2ccff2f129a1b5f190d933", &(0x7f0000000480)=""/29, &(0x7f00000004c0)="77a8b28d67c8872e0aae362c955c0a21de175701a7d6090c62547cc43049bcf9c348b74d5fdead32fec48ad7e62ae2ad7997bf88c1304d91347c5935b4b1b73f3988651292fc05c4cb036e4af32c126b812273278f85aebaa11aa49371ee0165ff1f4277080180d913612521c628b9245fc8a324", &(0x7f0000000540)="7418d1", 0x32, r1}, 0x38)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250007"], 0x14}, 0x1, 0x0, 0x0, 0x24048851}, 0xc000)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4008af14, &(0x7f0000000200)={0x2, 0x3af})

0s ago: executing program 1 (id=1458):
socket$xdp(0x2c, 0x3, 0x0) (async)
socketpair(0x18, 0x80000, 0x1, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES8, @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES8=r2], 0x64}}, 0x0) (async)
connect$qrtr(r0, &(0x7f0000000280)={0x2a, 0x4, 0xfffffffe}, 0xc)

kernel console output (not intermixed with test programs):

: [Deprecated]: syz.0.556 (pid 8067) Use of int in max_burst socket option.
[  130.366883][ T8067] Use struct sctp_assoc_value instead
[  130.413318][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'.
[  130.431069][ T8071] batadv_slave_0: entered promiscuous mode
[  130.437250][ T8070] batadv_slave_0: left promiscuous mode
[  130.591051][ T8085] 8021q: adding VLAN 0 to HW filter on device bond13
[  130.693907][ T8090] netlink: 120 bytes leftover after parsing attributes in process `syz.0.562'.
[  130.699422][ T8090] netlink: 64 bytes leftover after parsing attributes in process `syz.0.562'.
[  130.810507][ T8094] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  131.000824][ T8105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.004607][ T8105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.011809][ T8105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  131.098426][ T8105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.102797][ T8105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.106340][ T8105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  131.184800][ T8105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.188703][ T8105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.191805][ T8105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  131.258847][ T8105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.263019][ T8105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.269666][ T8105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  131.403907][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.571'.
[  131.405473][ T5670] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.411231][ T5670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  131.414395][ T5670] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  131.490345][ T6407] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.495255][ T6407] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  131.499228][ T6407] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  131.516970][ T6407] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.520280][ T6407] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  131.523228][ T6407] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  131.921414][ T6407] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.928860][ T6407] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  131.935860][ T6407] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  131.939440][ T6407] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.942728][ T6407] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 4352 - 0
[  131.947236][ T6407] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.950924][ T6407] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  131.974678][ T8129] validate_nla: 12 callbacks suppressed
[  131.974693][ T8129] netlink: 'syz.2.573': attribute type 1 has an invalid length.
[  131.987477][ T5608] hsr0 speed is unknown, defaulting to 1000
[  131.994280][ T5608] syz2: Port: 1 Link DOWN
[  131.996815][ T6407] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  131.999973][ T6407] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 4352 - 0
[  132.003191][ T6407] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.006675][ T6407] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  132.011007][ T6407] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.018875][ T6407] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 4352 - 0
[  132.024360][ T6407] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.030890][ T6407] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  132.062585][ T8129] 8021q: adding VLAN 0 to HW filter on device bond19
[  132.079775][ T8130] bond19: (slave gretap2): making interface the new active one
[  132.085286][ T8130] bond19: (slave gretap2): Enslaving as an active interface with an up link
[  132.088534][ T6407] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.091463][ T6407] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 4352 - 0
[  132.093801][ T6407] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.099860][ T6407] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  132.134786][ T8133] netlink: 9 bytes leftover after parsing attributes in process `syz.2.574'.
[  132.142668][ T8133] .70X: renamed from veth1_virt_wifi
[  132.145727][ T8133] .70X: entered allmulticast mode
[  132.147789][ T8133] A link change request failed with some changes committed already. Interface .70X may have been left with an inconsistent configuration, please check.
[  132.219818][ T8137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.269573][ T8142] netlink: 'syz.0.578': attribute type 1 has an invalid length.
[  132.285579][ T8142] 8021q: adding VLAN 0 to HW filter on device bond14
[  132.320461][ T8142] bond14: (slave gretap3): making interface the new active one
[  132.324065][ T8142] bond14: (slave gretap3): Enslaving as an active interface with an up link
[  132.338313][ T8146] pimreg: entered allmulticast mode
[  132.340575][ T8146] pimreg: left allmulticast mode
[  132.379811][ T8148] xt_l2tp: v2 sid > 0xffff: 8388608
[  132.381822][ T8150] netlink: 'syz.0.580': attribute type 1 has an invalid length.
[  132.388046][ T8150] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  132.479938][ T8154] ip6gre1: entered allmulticast mode
[  132.487170][ T8154] team0: Device ip6gre1 is of different type
[  132.493135][ T6407] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.498871][ T6407] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.504116][ T6407] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.510139][ T6407] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  132.638698][ T8167] block nbd0: not configured, cannot reconfigure
[  132.647908][ T8167] netlink: 'syz.0.585': attribute type 1 has an invalid length.
[  132.787680][ T8182] syzkaller1: entered promiscuous mode
[  132.789637][ T8182] syzkaller1: entered allmulticast mode
[  132.932972][ T8185] lo: Caught tx_queue_len zero misconfig
[  133.304732][ T8199] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.313188][ T8199] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.181766][ T8211] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  134.187173][ T8211] bond9 (unregistering): Released all slaves
[  134.291854][ T8217] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  134.400670][ T8227] netlink: 'syz.0.597': attribute type 1 has an invalid length.
[  134.416711][ T8218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  134.452260][ T8227] bond15: entered promiscuous mode
[  134.460616][ T8227] bond15: entered allmulticast mode
[  134.465547][ T8227] 8021q: adding VLAN 0 to HW filter on device bond15
[  134.486555][ T8232] macvlan0: entered promiscuous mode
[  134.490807][ T8232] macvlan0: entered allmulticast mode
[  134.517727][ T8232] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  134.686454][ T8242] __nla_validate_parse: 18 callbacks suppressed
[  134.686464][ T8242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.599'.
[  134.840996][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.602'.
[  134.845909][ T8252] openvswitch: netlink: Invalid VLAN frame
[  134.868136][ T8261] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  134.873843][ T8257] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link
[  134.911342][ T8261] 8021q: adding VLAN 0 to HW filter on device bond20
[  134.957250][ T8261] netlink: 36 bytes leftover after parsing attributes in process `syz.2.604'.
[  134.965944][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'.
[  134.972664][ T8261] bond20: (slave geneve4): making interface the new active one
[  134.978224][ T8261] bond20: (slave geneve4): Enslaving as an active interface with an up link
[  134.998065][ T5649] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.003416][ T5649] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.007017][ T5649] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.011254][ T5649] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.033130][ T8276] syz.2.608: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  135.038200][ T8276] CPU: 0 UID: 0 PID: 8276 Comm: syz.2.608 Not tainted syzkaller #0 PREEMPT(full) 
[  135.038213][ T8276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.038218][ T8276] Call Trace:
[  135.038223][ T8276]  <TASK>
[  135.038227][ T8276]  dump_stack_lvl+0xe8/0x150
[  135.038242][ T8276]  warn_alloc+0x249/0x340
[  135.038256][ T8276]  ? stack_trace_save+0xa9/0x100
[  135.038271][ T8276]  ? __pfx_warn_alloc+0x10/0x10
[  135.038285][ T8276]  ? kasan_save_track+0x4f/0x80
[  135.038295][ T8276]  ? kasan_save_track+0x3e/0x80
[  135.038305][ T8276]  ? __kasan_kmalloc+0x93/0xb0
[  135.038316][ T8276]  ? __kmalloc_cache_noprof+0x31c/0x660
[  135.038327][ T8276]  ? xskq_create+0x56/0x170
[  135.038337][ T8276]  ? xsk_setsockopt+0x54c/0x990
[  135.038345][ T8276]  ? do_sock_setsockopt+0x17c/0x1b0
[  135.038355][ T8276]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  135.038365][ T8276]  ? do_syscall_64+0x15f/0xf80
[  135.038378][ T8276]  __vmalloc_node_range_noprof+0x132/0x1750
[  135.038403][ T8276]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  135.038417][ T8276]  ? __kasan_kmalloc+0x93/0xb0
[  135.038431][ T8276]  vmalloc_user_noprof+0xad/0xe0
[  135.038458][ T8276]  ? xskq_create+0xbf/0x170
[  135.038469][ T8276]  xskq_create+0xbf/0x170
[  135.038480][ T8276]  xsk_init_queue+0x8a/0xe0
[  135.038490][ T8276]  xsk_setsockopt+0x54c/0x990
[  135.038501][ T8276]  ? __pfx_xsk_setsockopt+0x10/0x10
[  135.038510][ T8276]  ? __pfx_aa_sk_perm+0x10/0x10
[  135.038522][ T8276]  ? aa_sock_opt_perm+0xff/0x1a0
[  135.038533][ T8276]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  135.038544][ T8276]  ? __pfx_xsk_setsockopt+0x10/0x10
[  135.038553][ T8276]  do_sock_setsockopt+0x17c/0x1b0
[  135.038566][ T8276]  __x64_sys_setsockopt+0x13d/0x1b0
[  135.038578][ T8276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.038587][ T8276]  do_syscall_64+0x15f/0xf80
[  135.038597][ T8276]  ? trace_irq_disable+0x3b/0x140
[  135.038611][ T8276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.038619][ T8276] RIP: 0033:0x7fbfc4f9cdd9
[  135.038627][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.038634][ T8276] RSP: 002b:00007fbfc5f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  135.038643][ T8276] RAX: ffffffffffffffda RBX: 00007fbfc5215fa0 RCX: 00007fbfc4f9cdd9
[  135.038649][ T8276] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  135.038654][ T8276] RBP: 00007fbfc5032d69 R08: 0000000000000004 R09: 0000000000000000
[  135.038659][ T8276] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.038664][ T8276] R13: 00007fbfc5216038 R14: 00007fbfc5215fa0 R15: 00007fffd37076a8
[  135.038678][ T8276]  </TASK>
[  135.038728][ T8276] Mem-Info:
[  135.056029][ T8277] netlink: 'syz.0.609': attribute type 16 has an invalid length.
[  135.060911][ T8276] active_anon:5727 inactive_anon:0 isolated_anon:0
[  135.060911][ T8276]  active_file:12289 inactive_file:38341 isolated_file:0
[  135.060911][ T8276]  unevictable:1768 dirty:31 writeback:0
[  135.060911][ T8276]  slab_reclaimable:10577 slab_unreclaimable:88893
[  135.060911][ T8276]  mapped:18242 shmem:2345 pagetables:995
[  135.060911][ T8276]  sec_pagetables:0 bounce:0
[  135.060911][ T8276]  kernel_misc_reclaimable:0
[  135.060911][ T8276]  free:1123836 free_pcp:22906 free_cma:0
[  135.066596][ T8278] netlink: 'syz.0.609': attribute type 16 has an invalid length.
[  135.067685][ T8276] Node 0 active_anon:12164kB inactive_anon:0kB active_file:27388kB inactive_file:5416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34996kB dirty:92kB writeback:0kB shmem:4616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9864kB pagetables:2352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  135.154999][ T8276] Node 1 active_anon:10844kB inactive_anon:0kB active_file:21768kB inactive_file:147948kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38172kB dirty:32kB writeback:0kB shmem:4764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4116kB pagetables:1628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  135.186967][ T8276] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  135.228022][ T8276] lowmem_reserve[]: 0 1587 2117 2117 2117
[  135.235688][ T8276] Node 0 DMA32 free:1563508kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:18648kB inactive_file:4kB unevictable:0kB writepending:72kB zspages:0kB present:2080636kB managed:1625328kB mlocked:0kB bounce:0kB free_pcp:20484kB local_pcp:20048kB free_cma:0kB
[  135.250617][ T8276] lowmem_reserve[]: 0 0 530 530 530
[  135.252628][ T8276] Node 0 Normal free:14772kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12144kB inactive_anon:0kB active_file:8740kB inactive_file:5412kB unevictable:3536kB writepending:20kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:6852kB local_pcp:3980kB free_cma:0kB
[  135.264952][ T8276] lowmem_reserve[]: 0 0 0 0 0
[  135.266439][ T8276] Node 1 Normal free:2899700kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10944kB inactive_anon:0kB active_file:21768kB inactive_file:147948kB unevictable:3536kB writepending:32kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:68448kB local_pcp:29908kB free_cma:0kB
[  135.281119][ T8276] lowmem_reserve[]: 0 0 0 0 0
[  135.282636][ T8276] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  135.287038][ T8276] Node 0 DMA32: 107*4kB (UME) 79*8kB (UME) 71*16kB (UME) 67*32kB (UME) 18*64kB (UM) 12*128kB (UM) 6*256kB (UME) 7*512kB (UME) 7*1024kB (M) 6*2048kB (UME) 374*4096kB (UM) = 1563508kB
[  135.292489][ T8276] Node 0 Normal: 338*4kB (UM) 555*8kB (UME) 278*16kB (UM) 44*32kB (UME) 23*64kB (UM) 4*128kB (UM) 2*256kB (U) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 14656kB
[  135.298108][ T8276] Node 1 Normal: 555*4kB (UME) 359*8kB (UME) 83*16kB (UM) 39*32kB (M) 13*64kB (M) 9*128kB (UM) 5*256kB (UM) 10*512kB (UM) 4*1024kB (M) 4*2048kB (M) 701*4096kB (UM) = 2899636kB
[  135.308521][ T8276] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  135.311283][ T8276] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  135.315042][ T8276] 53017 total pagecache pages
[  135.316873][ T8276] 0 pages in swap cache
[  135.318149][ T8276] Free swap  = 124996kB
[  135.320143][ T8276] Total swap = 124996kB
[  135.321400][ T8276] 1834877 pages RAM
[  135.322544][ T8276] 0 pages HighMem/MovableOnly
[  135.323909][ T8276] 390246 pages reserved
[  135.325334][ T8276] 0 pages cma reserved
[  135.353325][ T8303] netlink: 'syz.0.612': attribute type 1 has an invalid length.
[  135.368571][ T8303] bond16: entered promiscuous mode
[  135.370708][ T8303] 8021q: adding VLAN 0 to HW filter on device bond16
[  135.382918][ T8303] ipvlan0: entered allmulticast mode
[  135.384538][ T8303] bond16: entered allmulticast mode
[  135.394282][ T8303] bond16: (slave bridge5): making interface the new active one
[  135.397335][ T8303] bridge5: entered promiscuous mode
[  135.399029][ T8303] bridge5: entered allmulticast mode
[  135.401993][ T8303] bond16: (slave bridge5): Enslaving as an active interface with an up link
[  135.472285][ T8311] hsr0 speed is unknown, defaulting to 1000
[  135.507940][ T8314] bond9: option fail_over_mac: invalid value (127)
[  135.511027][ T8314] bond9 (unregistering): Released all slaves
[  135.618234][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'.
[  135.677696][ T8324] netlink: 152 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.684475][ T8324] netlink: 152 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.685305][ T8326] netlink: 164 bytes leftover after parsing attributes in process `syz.1.616'.
[  135.860483][ T8338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.863403][ T8338] syzkaller0: entered promiscuous mode
[  135.865832][ T8338] syzkaller0: entered allmulticast mode
[  135.894524][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'.
[  135.898698][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'.
[  135.916679][ T8338] tipc: Resetting bearer <eth:syzkaller0>
[  135.924278][ T8337] tipc: Resetting bearer <eth:syzkaller0>
[  135.953409][ T8337] tipc: Disabling bearer <eth:syzkaller0>
[  135.980705][ T8345] pim6reg1: entered allmulticast mode
[  136.031097][ T8348] netlink: 'syz.1.623': attribute type 1 has an invalid length.
[  136.069454][ T8348] bond9: (slave bridge2): making interface the new active one
[  136.072188][ T8348] bond9: (slave bridge2): Enslaving as an active interface with an up link
[  136.089399][ T8352] ipvlan0: entered allmulticast mode
[  136.091006][ T8352] gretap0: entered allmulticast mode
[  136.158557][ T8354] syzkaller1: entered promiscuous mode
[  136.160337][ T8354] syzkaller1: entered allmulticast mode
[  136.229904][ T8356] bond21: entered promiscuous mode
[  136.231821][ T8356] 8021q: adding VLAN 0 to HW filter on device bond21
[  136.241904][ T8356] macvtap0: entered allmulticast mode
[  136.273015][ T8356] bond21: (slave bridge8): making interface the new active one
[  136.278599][ T8356] bridge8: entered promiscuous mode
[  136.284257][ T8356] bond21: (slave bridge8): Enslaving as an active interface with an up link
[  136.717518][ T8389] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  136.780454][ T8394] ipvlan0: entered allmulticast mode
[  136.887231][ T8407] hsr0 speed is unknown, defaulting to 1000
[  137.043381][ T5670] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.048562][ T5670] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.054196][ T5670] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.057817][ T5670] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.072396][ T8425] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  137.107481][ T8428] bridge7: entered allmulticast mode
[  137.149246][ T8430] : renamed from veth0_to_bond
[  137.173533][ T8432] openvswitch: netlink: Message has 4 unknown bytes.
[  137.207933][ T8434] validate_nla: 3 callbacks suppressed
[  137.207991][ T8434] netlink: 'syz.0.648': attribute type 1 has an invalid length.
[  137.223852][ T8434] 8021q: adding VLAN 0 to HW filter on device bond18
[  137.269691][ T8439] tunl0: Caught tx_queue_len zero misconfig
[  137.310542][ T8434] bond18: (slave veth5): Enslaving as an active interface with a down link
[  137.324678][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv2
[  137.330696][ T8434] bond18: (slave batadv2): making interface the new active one
[  137.335001][ T8434] batadv2: entered promiscuous mode
[  137.337248][ T8434] bond18: (slave batadv2): Enslaving as an active interface with an up link
[  137.382669][ T8447] ip6gre1: entered promiscuous mode
[  137.384279][ T8447] ip6gre1: entered allmulticast mode
[  137.481453][ T8455] hsr0 speed is unknown, defaulting to 1000
[  137.506049][ T8467] pim6reg1: entered promiscuous mode
[  137.508125][ T8467] pim6reg1: entered allmulticast mode
[  137.721525][ T8471] 5n: entered promiscuous mode
[  137.782083][ T8474] syzkaller1: entered promiscuous mode
[  137.786276][ T8474] syzkaller1: entered allmulticast mode
[  138.569950][ T8492] syzkaller1: entered promiscuous mode
[  138.572127][ T8492] syzkaller1: entered allmulticast mode
[  138.725190][ T8492] ipvlan0: left allmulticast mode
[  138.727007][ T8492] veth0_vlan: left allmulticast mode
[  138.816688][ T8492] vti0: left promiscuous mode
[  138.838409][ T8492] syzkaller1: left promiscuous mode
[  138.844064][ T8492] syzkaller1: left allmulticast mode
[  138.849720][ T8493] ip6gre0: Caught tx_queue_len zero misconfig
[  138.857501][ T6103] syz1: Port: 1 Link DOWN
[  138.860147][ T6262] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.864340][ T6262] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  138.867464][ T6262] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  138.870003][ T6262] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.872883][ T6262] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  138.876406][ T6262] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  138.881774][ T6262] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.884461][ T6262] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  138.887117][ T6262] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  138.889835][ T6262] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  138.892571][ T6262] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  138.896494][ T6262] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  139.282402][ T8530] syzkaller0: entered promiscuous mode
[  139.284225][ T8530] syzkaller0: entered allmulticast mode
[  139.444830][ T8542] netlink: 'syz.0.675': attribute type 1 has an invalid length.
[  139.478469][ T8542] 8021q: adding VLAN 0 to HW filter on device bond19
[  139.487602][ T8540] netlink: 'syz.2.674': attribute type 13 has an invalid length.
[  139.542471][ T8548] bond20: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  139.548207][ T8548] bond20 (unregistering): Released all slaves
[  139.587862][ T8551] bond22: entered promiscuous mode
[  139.589658][ T8551] 8021q: adding VLAN 0 to HW filter on device bond22
[  139.608377][ T8551] 8021q: adding VLAN 0 to HW filter on device bond23
[  139.612502][ T8551] bond23: entered promiscuous mode
[  139.617736][ T8551] bond22: (slave bond23): Enslaving as an active interface with an up link
[  139.651658][ T8555] netlink: 'syz.0.678': attribute type 6 has an invalid length.
[  139.660572][ T6262] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.660611][ T8555] netlink: 'syz.0.678': attribute type 6 has an invalid length.
[  139.666766][ T6262] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.680662][ T6262] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.684708][ T6262] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.732997][ T8566] __nla_validate_parse: 23 callbacks suppressed
[  139.733008][ T8566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.680'.
[  139.756995][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'.
[  139.816322][ T8572] netlink: 148 bytes leftover after parsing attributes in process `syz.2.683'.
[  139.853842][ T8569] hsr0 speed is unknown, defaulting to 1000
[  140.094028][ T8584] : renamed from virt_wifi0
[  140.151196][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'.
[  140.172105][ T8586] bridge9: port 1(veth7) entered blocking state
[  140.174122][ T8586] bridge9: port 1(veth7) entered disabled state
[  140.177096][ T8586] veth7: entered allmulticast mode
[  140.179757][ T8586] veth7: entered promiscuous mode
[  140.218462][ T8588] netlink: 'syz.0.686': attribute type 1 has an invalid length.
[  140.233275][ T8588] 8021q: adding VLAN 0 to HW filter on device bond20
[  140.430268][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'.
[  140.481901][ T8594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.537290][ T8598] netlink: 'syz.0.689': attribute type 1 has an invalid length.
[  140.540083][ T8598] netlink: 224 bytes leftover after parsing attributes in process `syz.0.689'.
[  140.705234][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'.
[  140.736264][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'.
[  140.739416][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.693'.
[  140.833378][ T8621] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  140.912388][ T8630] netlink: 'syz.0.699': attribute type 10 has an invalid length.
[  140.917241][ T8632] netlink: 'syz.0.699': attribute type 10 has an invalid length.
[  140.974004][ T8632] veth0: entered promiscuous mode
[  140.978922][ T8632] bond0: entered promiscuous mode
[  140.982193][ T8632] bond_slave_0: entered promiscuous mode
[  140.986963][ T8632] bond_slave_1: entered promiscuous mode
[  141.052319][ T8639] netlink: 'syz.2.700': attribute type 1 has an invalid length.
[  141.132349][ T8629] bond0: left promiscuous mode
[  141.133796][ T8629] bond_slave_0: left promiscuous mode
[  141.135990][ T8629] bond_slave_1: left promiscuous mode
[  141.138043][ T8629] veth0: left promiscuous mode
[  141.171402][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'.
[  141.260513][ T8657] : renamed from tunl0
[  141.349440][ T8659] erspan0: left promiscuous mode
[  141.391712][ T8659] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.402655][ T8659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.414438][   T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.418760][   T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.422327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.426495][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.432013][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.434685][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.452320][ T6276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.457784][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.468391][ T8659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.478122][ T8659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  141.481914][ T8659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  141.498634][ T8659] erspan0: entered promiscuous mode
[  141.502683][ T8659] 8021q: adding VLAN 0 to HW filter on device bond1
[  141.507205][ T8659] 8021q: adding VLAN 0 to HW filter on device team1
[  141.510717][ T8659] 8021q: adding VLAN 0 to HW filter on device team2
[  141.609117][ T8671] bond25: (slave vxcan1): The slave device specified does not support setting the MAC address
[  141.612563][ T8671] bond25: (slave vxcan1): Error -95 calling set_mac_address
[  141.637157][ T6262] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.646057][ T6262] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.691273][ T8679] bond25: (slave bridge13): Enslaving as an active interface with a down link
[  141.694317][ T6262] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.700288][ T6262] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.860860][ T8699] bond21: entered promiscuous mode
[  141.863207][ T8699] 8021q: adding VLAN 0 to HW filter on device bond21
[  141.910303][ T8699] bond21: (slave bridge10): making interface the new active one
[  141.913534][ T8699] bridge10: entered promiscuous mode
[  141.926600][ T8699] bond21: (slave bridge10): Enslaving as an active interface with an up link
[  142.067750][ T8709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.104568][ T8708] tipc: Disabling bearer <eth:syzkaller0>
[  142.255673][ T5670] net_ratelimit: 13 callbacks suppressed
[  142.255683][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.307913][ T8731] syzkaller0: entered promiscuous mode
[  142.309995][ T8731] syzkaller0: entered allmulticast mode
[  142.497017][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.516526][ T8745] syzkaller0: entered promiscuous mode
[  142.518370][ T8745] syzkaller0: entered allmulticast mode
[  142.643833][ T8752] validate_nla: 7 callbacks suppressed
[  142.643847][ T8752] netlink: 'syz.2.727': attribute type 2 has an invalid length.
[  142.675789][ T8754] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  142.695519][ T8756] netlink: 'syz.2.729': attribute type 4 has an invalid length.
[  142.716998][ T8756] netlink: 'syz.2.729': attribute type 4 has an invalid length.
[  142.749414][ T8758] bond22 (unregistering): Released all slaves
[  142.847684][ T8768] IPv6: NLM_F_CREATE should be specified when creating new route
[  142.850642][ T8768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.851276][ T8765] bond26: entered promiscuous mode
[  142.854203][ T8768] IPv6: NLM_F_CREATE should be set when creating new route
[  142.855506][ T8765] bond26: entered allmulticast mode
[  142.857385][ T8768] IPv6: NLM_F_CREATE should be set when creating new route
[  142.859782][ T8765] 8021q: adding VLAN 0 to HW filter on device bond26
[  142.861508][ T8768] IPv6: NLM_F_CREATE should be set when creating new route
[  142.931975][ T8772] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  143.119684][ T8787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.139670][ T8789] netlink: 'syz.1.741': attribute type 13 has an invalid length.
[  143.207326][ T8794] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  143.363887][ T8803] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[  143.434582][ T8805] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  143.535367][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.954198][ T8815] 8021q: adding VLAN 0 to HW filter on device bond22
[  143.963209][ T8815] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  144.013363][ T8822] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  144.073108][ T8827] bridge0: port 1(vlan4) entered blocking state
[  144.076318][ T8827] bridge0: port 1(vlan4) entered disabled state
[  144.078873][ T8827] vlan4: entered allmulticast mode
[  144.081001][ T8827] bridge0: entered allmulticast mode
[  144.086506][ T8827] vlan4: left allmulticast mode
[  144.088496][ T8827] bridge0: left allmulticast mode
[  144.186267][ T8833] netlink: 'syz.0.755': attribute type 1 has an invalid length.
[  144.568403][ T8861] bond0: Caught tx_queue_len zero misconfig
[  144.576631][ T8861] openvswitch: netlink: IP tunnel dst address not specified
[  144.576694][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.598142][ T8863] netlink: 'syz.2.762': attribute type 10 has an invalid length.
[  144.636273][ T8865] netlink: 'syz.2.764': attribute type 8 has an invalid length.
[  144.678478][ T8865] bridge14: port 1(veth7) entered blocking state
[  144.683105][ T8865] bridge14: port 1(veth7) entered disabled state
[  144.689124][ T8865] veth7: entered allmulticast mode
[  144.693355][ T8865] veth7: entered promiscuous mode
[  144.696707][ T8869] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  144.698096][ T8870] bridge14: port 2(veth0_to_bond) entered blocking state
[  144.702251][ T8870] bridge14: port 2(veth0_to_bond) entered disabled state
[  144.706316][ T8870] veth0_to_bond: entered allmulticast mode
[  144.707443][ T8869] netlink: 'syz.1.765': attribute type 1 has an invalid length.
[  144.711199][ T8870] veth0_to_bond: entered promiscuous mode
[  144.737690][ T8869] 8021q: adding VLAN 0 to HW filter on device bond10
[  144.762223][ T8869] bond10: (slave geneve4): making interface the new active one
[  144.767716][ T8869] bond10: (slave geneve4): Enslaving as an active interface with an up link
[  144.770896][ T6407] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.786660][ T6262] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.793292][ T6262] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.805307][ T6262] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.966630][ T8898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.008552][ T8903] __nla_validate_parse: 25 callbacks suppressed
[  145.008563][ T8903] netlink: 228 bytes leftover after parsing attributes in process `syz.2.774'.
[  145.072476][ T8911] netlink: 'syz.2.774': attribute type 13 has an invalid length.
[  145.155012][ T6262] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.159467][ T6262] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.183762][ T8911] erspan0: left promiscuous mode
[  145.191219][ T8911] ip6_vti0: left promiscuous mode
[  145.206922][ T8911] bridge0: left promiscuous mode
[  145.209522][ T8911] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.212808][ T8911] 8021q: adding VLAN 0 to HW filter on device team0
[  145.219935][ T8911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.260058][ T8911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  145.263027][ T8911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  145.267775][ T8911] .70X: left allmulticast mode
[  145.271239][ T8911] veth1_macvtap: left promiscuous mode
[  145.274194][ T8911] veth1_macvtap: entered promiscuous mode
[  145.281377][ T8911] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.283879][ T8911] erspan0: entered promiscuous mode
[  145.286771][ T8911] 8021q: adding VLAN 0 to HW filter on device batadv1
[  145.289285][ T8911] 8021q: adding VLAN 0 to HW filter on device bond2
[  145.296043][ T8911] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.300157][ T8911] 8021q: adding VLAN 0 to HW filter on device bond4
[  145.320313][ T8911] 8021q: adding VLAN 0 to HW filter on device bond5
[  145.326576][ T8911] 8021q: adding VLAN 0 to HW filter on device bond6
[  145.329189][ T8911] 8021q: adding VLAN 0 to HW filter on device bond7
[  145.331664][ T8911] 8021q: adding VLAN 0 to HW filter on device bond8
[  145.335147][ T8911] 8021q: adding VLAN 0 to HW filter on device bond9
[  145.337882][ T8911] 8021q: adding VLAN 0 to HW filter on device bond10
[  145.340988][ T8911] 8021q: adding VLAN 0 to HW filter on device eth0
[  145.348804][ T8911] 8021q: adding VLAN 0 to HW filter on device eth1
[  145.354432][ T8911] 8021q: adding VLAN 0 to HW filter on device eth2
[  145.360805][ T8911] 8021q: adding VLAN 0 to HW filter on device eth3
[  145.377103][ T8911] bond11: left promiscuous mode
[  145.378805][ T8911] 8021q: adding VLAN 0 to HW filter on device bond11
[  145.396899][ T8911] 8021q: adding VLAN 0 to HW filter on device bond12
[  145.412492][ T8911] bond13: left promiscuous mode
[  145.413869][ T8911] wireguard0: left promiscuous mode
[  145.416219][ T8911] 8021q: adding VLAN 0 to HW filter on device bond13
[  145.419903][ T8911] 8021q: adding VLAN 0 to HW filter on device bond14
[  145.422766][ T8911] 8021q: adding VLAN 0 to HW filter on device bond15
[  145.426968][ T8911] 8021q: adding VLAN 0 to HW filter on device bond16
[  145.429821][ T8911] 8021q: adding VLAN 0 to HW filter on device bond17
[  145.432663][ T8911] vlan1: left allmulticast mode
[  145.434054][ T8911] bond17: left allmulticast mode
[  145.437713][ T8911] 8021q: adding VLAN 0 to HW filter on device bond18
[  145.443556][ T8911] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  145.462572][ T6262] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  145.465812][ T6262] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 4352 - 0
[  145.468925][ T6262] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  145.472005][ T6262] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  145.475415][ T6262] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 4352 - 0
[  145.482846][ T6262] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  145.488991][ T6100] bridge0: entered promiscuous mode
[  145.524229][ T6262] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  145.533941][ T6262] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 4352 - 0
[  145.543729][ T6262] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.551344][ T6262] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  145.553760][ T6262] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  145.557545][ T6262] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 4352 - 0
[  145.560067][ T6262] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.562432][ T6262] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  145.603334][ T6270] hsr0 speed is unknown, defaulting to 1000
[  145.605665][ T6270] syz2: Port: 1 Link ACTIVE
[  145.619613][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.620558][ T5649] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  146.135856][ T8965] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  147.695338][ T6100] net_ratelimit: 8 callbacks suppressed
[  147.695353][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.254989][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.735125][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.144644][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  149.327458][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'.
[  149.366201][ T8980] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check.
[  149.375161][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  149.378233][ T5649] batadv2: left promiscuous mode
[  149.429104][ T8992] validate_nla: 2 callbacks suppressed
[  149.429115][ T8992] netlink: 'syz.0.794': attribute type 1 has an invalid length.
[  149.452258][ T8992] 8021q: adding VLAN 0 to HW filter on device bond24
[  149.463803][ T8996] syzkaller1: entered promiscuous mode
[  149.469469][ T8996] syzkaller1: entered allmulticast mode
[  149.617930][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.707404][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.801'.
[  149.713167][ T9015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.802'.
[  149.776957][ T6112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.917578][ T9029] syzkaller1: entered promiscuous mode
[  149.928080][ T9029] syzkaller1: entered allmulticast mode
[  150.121683][ T9047] netlink: 'syz.2.807': attribute type 1 has an invalid length.
[  150.247589][ T9049] netlink: 'syz.1.810': attribute type 1 has an invalid length.
[  150.272543][ T9049] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  150.277093][ T9049] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  150.333050][ T9049] bond12: (slave gretap1): making interface the new active one
[  150.338073][ T9049] bond12: (slave gretap1): Enslaving as an active interface with an up link
[  150.340981][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'.
[  150.343736][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'.
[  150.346460][ T9053] netlink: 'syz.2.811': attribute type 11 has an invalid length.
[  150.353833][ T9049] macvlan3: entered promiscuous mode
[  150.355570][ T9049] macvlan3: entered allmulticast mode
[  150.357615][ T9049] bond12: entered promiscuous mode
[  150.359356][ T9049] gretap1: entered promiscuous mode
[  150.361366][ T9049] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  150.366888][ T9049] bond12: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  150.370885][ T9049] bond12: left promiscuous mode
[  150.372366][ T9049] gretap1: left promiscuous mode
[  150.428481][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'.
[  150.434995][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'.
[  150.437931][ T9053] netlink: 'syz.2.811': attribute type 11 has an invalid length.
[  150.474208][ T9055] syzkaller1: entered promiscuous mode
[  150.477640][ T9055] syzkaller1: entered allmulticast mode
[  150.498696][ T9055] syzkaller1: left promiscuous mode
[  150.500406][ T9055] syzkaller1: left allmulticast mode
[  150.502952][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.508352][ T9055] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  150.511028][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.525462][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.528568][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.585416][ T9062] syzkaller1: entered promiscuous mode
[  150.587602][ T9062] syzkaller1: entered allmulticast mode
[  150.705664][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'.
[  150.710953][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'.
[  150.715818][ T9069] netlink: 124 bytes leftover after parsing attributes in process `syz.0.817'.
[  150.716777][ T9071] netlink: 'syz.2.818': attribute type 1 has an invalid length.
[  150.733620][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'.
[  150.743920][ T9071] 8021q: adding VLAN 0 to HW filter on device bond27
[  150.765565][ T9067] team3: entered promiscuous mode
[  150.767067][ T9067] team3: entered allmulticast mode
[  150.768954][ T9067] 8021q: adding VLAN 0 to HW filter on device team3
[  150.773140][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'.
[  150.784115][ T9071] bond27: (slave veth9): Enslaving as an active interface with a down link
[  150.786881][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  150.790489][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  150.792969][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  150.808802][ T9069] bond25: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  150.813320][ T9069] bond25 (unregistering): Released all slaves
[  150.825167][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.829032][ T9067] team4 (uninitialized): Failed to send options change via netlink (err -105)
[  150.843466][ T9067] team4: entered promiscuous mode
[  150.845521][ T9067] team4: entered allmulticast mode
[  150.848756][ T9067] 8021q: adding VLAN 0 to HW filter on device team4
[  150.851441][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  150.851559][ T9074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'.
[  150.872245][ T9074] bond27: (slave bridge15): Enslaving as an active interface with a down link
[  150.916250][ T9071] bond27: (slave veth11): Enslaving as an active interface with a down link
[  151.061442][ T9088] hsr0 speed is unknown, defaulting to 1000
[  151.121193][ T9084] macsec1: entered promiscuous mode
[  151.123971][ T9084] batadv0: entered promiscuous mode
[  151.126588][ T9084] macsec1: entered allmulticast mode
[  151.128594][ T9084] batadv0: entered allmulticast mode
[  151.131785][ T9084] 8021q: adding VLAN 0 to HW filter on device macsec1
[  151.137180][ T9084] batadv0: left allmulticast mode
[  151.139345][ T9084] batadv0: left promiscuous mode
[  151.141413][ T9093] netlink: 'syz.0.825': attribute type 8 has an invalid length.
[  151.849106][ T9125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.855138][ T6270] hsr0 speed is unknown, defaulting to 1000
[  151.856023][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.859681][ T6270] syz2: Port: 1 Link DOWN
[  151.868784][   T12] netdevsim netdevsim2 eth0: unset [0, 1] type 1 family 0 port 4352 - 0
[  151.871317][ T5608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.877650][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.890794][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  151.895928][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.901742][   T12] netdevsim netdevsim2 eth1: unset [0, 1] type 1 family 0 port 4352 - 0
[  151.908899][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.918292][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  151.961471][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.969974][   T12] netdevsim netdevsim2 eth2: unset [0, 1] type 1 family 0 port 4352 - 0
[  151.975898][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.980019][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  151.991894][ T9133] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  151.995826][ T9133] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  152.006376][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  152.009317][   T12] netdevsim netdevsim2 eth3: unset [0, 1] type 1 family 0 port 4352 - 0
[  152.011905][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.014390][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  152.032854][ T9128] macvlan3: entered promiscuous mode
[  152.041261][ T9128] macvlan3: entered allmulticast mode
[  152.043142][ T9128] bond13: (slave macvlan3): Error -98 calling set_mac_address
[  152.067899][ T9130] hsr0 speed is unknown, defaulting to 1000
[  152.096557][ T9137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.160353][ T9128] TCP: TCP_TX_DELAY enabled
[  152.224051][ T9145] netlink: 'syz.1.838': attribute type 1 has an invalid length.
[  152.405942][ T9145] 8021q: adding VLAN 0 to HW filter on device bond14
[  152.441679][ T9154] hsr0 speed is unknown, defaulting to 1000
[  152.503282][ T9154] xt_hashlimit: invalid rate
[  152.570999][ T9155] 8021q: VLANs not supported on ip_vti0
[  152.581684][ T9162] ip6gre1: entered promiscuous mode
[  152.583833][ T9162] ip6gre1: entered allmulticast mode
[  152.681206][ T9164] hsr_slave_1 (unregistering): left promiscuous mode
[  152.821914][    C0] net_ratelimit: 2 callbacks suppressed
[  152.821926][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.827519][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.849004][ T9172] netlink: 'syz.2.843': attribute type 5 has an invalid length.
[  152.885106][ T9172] geneve5: entered promiscuous mode
[  152.887229][ T9172] geneve5: entered allmulticast mode
[  152.890254][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  152.894811][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  152.900666][ T5678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.908028][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  152.915260][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  153.170894][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.179520][ T9182] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.251148][ T9184] netlink: 'syz.0.847': attribute type 1 has an invalid length.
[  153.276401][ T9184] bond25: (slave bridge11): making interface the new active one
[  153.280783][ T9184] bond25: (slave bridge11): Enslaving as an active interface with an up link
[  153.296852][ T9184] bond25: (slave gretap5): Enslaving as an active interface with an up link
[  153.303838][ T9184] macvlan0: entered promiscuous mode
[  153.306581][ T9184] macvlan0: entered allmulticast mode
[  153.308721][ T9184] bond25: entered promiscuous mode
[  153.310396][ T9184] bridge11: entered promiscuous mode
[  153.312909][ T9184] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  153.315711][ T9184] bond25: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  153.321343][ T9184] bond25: left promiscuous mode
[  153.322951][ T9184] bridge11: left promiscuous mode
[  153.413495][ T9188] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  153.532108][ T9195] syzkaller1: entered promiscuous mode
[  153.533936][ T9195] syzkaller1: entered allmulticast mode
[  153.693356][ T9199] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  153.739667][ T5671] IPVS: starting estimator thread 0...
[  153.758579][ T9199] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  153.833168][ T9199] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  153.845004][ T9204] IPVS: using max 64 ests per chain, 153600 per kthread
[  153.909549][ T9199] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  153.946638][ T5678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.014010][ T9214] bond26 (unregistering): Released all slaves
[  154.152357][ T9218] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  154.180526][ T9218] bond26: (slave bond_slave_1): Device is not our slave
[  154.183348][ T9218] bond26: option active_slave: invalid value (bond_slave_1)
[  154.189381][ T9218] bond26 (unregistering): Released all slaves
[  154.340585][ T9221] batadv3: entered promiscuous mode
[  154.342280][ T9221] batadv3: entered allmulticast mode
[  154.344809][ T9221] 8021q: adding VLAN 0 to HW filter on device batadv3
[  154.473531][ T9223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.735186][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.809895][ T9232] validate_nla: 2 callbacks suppressed
[  154.809906][ T9232] netlink: 'syz.1.861': attribute type 1 has an invalid length.
[  154.842814][ T9232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.846652][ T9232] syzkaller0: entered promiscuous mode
[  154.848595][ T9232] syzkaller0: entered allmulticast mode
[  154.866272][ T9231] tipc: Resetting bearer <eth:syzkaller0>
[  154.878707][ T9231] tipc: Disabling bearer <eth:syzkaller0>
[  154.975611][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.004371][ T5670] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  155.026334][ T5670] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  155.048680][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  155.061710][ T9239] netlink: 'syz.0.863': attribute type 1 has an invalid length.
[  155.071293][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  155.139542][ T9239] bond26: entered promiscuous mode
[  155.142335][ T9239] 8021q: adding VLAN 0 to HW filter on device bond26
[  155.190429][ T9244] netlink: 'syz.2.864': attribute type 29 has an invalid length.
[  155.943033][ T9253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.027624][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.104465][ T9257] __nla_validate_parse: 20 callbacks suppressed
[  156.104480][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'.
[  156.115918][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'.
[  156.133182][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'.
[  156.148889][ T9257] bond27 (unregistering): Released all slaves
[  156.190999][ T9256] macvlan1: entered promiscuous mode
[  156.192913][ T9256] macvlan1: entered allmulticast mode
[  156.197307][ T9256] bond28: (slave macvlan1): Opening slave failed
[  156.278433][ T9264] netlink: 'syz.0.870': attribute type 1 has an invalid length.
[  156.310541][ T9264] 8021q: adding VLAN 0 to HW filter on device bond27
[  156.334379][ T9264] bond27: (slave veth11): Enslaving as an active interface with a down link
[  156.347392][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv4
[  156.352695][ T9264] bond27: (slave batadv4): making interface the new active one
[  156.357279][ T9264] batadv4: entered promiscuous mode
[  156.359820][ T9264] bond27: (slave batadv4): Enslaving as an active interface with an up link
[  156.405273][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  156.419692][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  156.427424][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  156.431843][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  156.542274][ T9282] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  156.607123][ T9287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'.
[  156.610617][ T9287] block nbd0: not configured, cannot reconfigure
[  156.655605][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.783817][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.878'.
[  156.840243][ T9308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.881'.
[  156.914191][ T9313] netlink: 'syz.1.882': attribute type 3 has an invalid length.
[  157.055331][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.268478][ T9329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.886'.
[  157.308164][ T9331] netlink: 52 bytes leftover after parsing attributes in process `syz.2.888'.
[  157.315493][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'.
[  157.404378][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'.
[  157.526904][ T9350] syzkaller1: entered promiscuous mode
[  157.529016][ T9350] syzkaller1: entered allmulticast mode
[  157.688951][ T9362] tipc: Enabling of bearer <eth:ipvlan0> rejected, failed to enable media
[  157.819332][ T9379] vlan2: entered promiscuous mode
[  157.984036][ T9394] netlink: 'syz.0.897': attribute type 1 has an invalid length.
[  158.034243][ T9396] macvlan0: entered promiscuous mode
[  158.036154][ T9396] macvlan0: entered allmulticast mode
[  158.038385][ T9396] bond28: entered promiscuous mode
[  158.040460][ T9396] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  158.046528][ T9396] bond28: left promiscuous mode
[  158.062061][ T9395] netlink: 'syz.2.898': attribute type 1 has an invalid length.
[  158.084447][ T9395] 8021q: adding VLAN 0 to HW filter on device bond29
[  158.097690][ T6100] net_ratelimit: 3 callbacks suppressed
[  158.097700][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.157375][ T9395] tipc: Failed to remove unknown binding: 66,0,0/2969450357:3240424349/3240424351
[  158.161746][ T9395] tipc: Failed to remove unknown binding: 66,0,0/2969450357:3240424349/3240424350
[  158.167430][ T9395] tipc: Failed to remove unknown binding: 66,0,0/2969450357:3240424349/3240424351
[  158.180438][ T9395] tipc: Failed to remove unknown binding: 66,0,0/2969450357:3240424349/3240424350
[  158.217232][ T9410] netlink: 'syz.1.900': attribute type 1 has an invalid length.
[  158.334240][ T9419] netlink: 'syz.2.902': attribute type 1 has an invalid length.
[  158.347904][ T9419] Timeout policy `syz1' can only be used by L3 protocol number 34825
[  158.415741][ T9424] netlink: 'syz.0.904': attribute type 10 has an invalid length.
[  158.421472][ T9424] erspan0: entered allmulticast mode
[  158.429302][ T9426] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  158.581130][ T9437] --map-set only usable from mangle table
[  158.731319][   T54] block nbd0: Receive control failed (result -32)
[  158.785325][ T9446] ipvlan0: entered allmulticast mode
[  158.803023][ T9449] syzkaller1: entered promiscuous mode
[  158.804841][ T9449] syzkaller1: entered allmulticast mode
[  158.913243][ T9454] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  158.986666][ T9465] team0: Port device dummy0 added
[  159.042834][ T9469] veth0: entered promiscuous mode
[  159.049392][ T9465] bond0: entered promiscuous mode
[  159.122261][ T9464] bond0: left promiscuous mode
[  159.125657][ T9464] veth0: left promiscuous mode
[  159.145377][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.180634][ T9474] bond30: entered promiscuous mode
[  159.182438][ T9474] 8021q: adding VLAN 0 to HW filter on device bond30
[  159.192029][ T9476] 8021q: adding VLAN 0 to HW filter on device bond30
[  159.196809][ T9476] bond30: (slave wireguard1): The slave device specified does not support setting the MAC address
[  159.201619][ T9476] bond30: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  159.209629][ T9476] bond30: (slave wireguard1): making interface the new active one
[  159.212070][ T9476] wireguard1: entered promiscuous mode
[  159.214512][ T9476] bond30: (slave wireguard1): Enslaving as an active interface with an up link
[  159.218272][ T9480] batadv_slave_0: Caught tx_queue_len zero misconfig
[  159.342281][ T9484] syzkaller1: entered promiscuous mode
[  159.344012][ T9484] syzkaller1: entered allmulticast mode
[  159.468785][ T9493] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  159.718379][ T9515] syzkaller1: entered promiscuous mode
[  159.720510][ T9515] syzkaller1: entered allmulticast mode
[  159.932828][ T9528] syzkaller0: Caught tx_queue_len zero misconfig
[  159.936947][ T9528] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  160.054383][ T9537] xt_TCPMSS: Only works on TCP SYN packets
[  160.106644][ T9539] syzkaller1: entered promiscuous mode
[  160.108833][ T9539] syzkaller1: entered allmulticast mode
[  160.186781][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.285458][ T9552] validate_nla: 2 callbacks suppressed
[  160.285468][ T9552] netlink: 'syz.0.939': attribute type 1 has an invalid length.
[  160.427517][ T9564] netlink: 'syz.2.942': attribute type 1 has an invalid length.
[  160.443020][ T9564] 8021q: adding VLAN 0 to HW filter on device bond31
[  160.458918][ T9564] bond31: (slave veth13): Enslaving as an active interface with a down link
[  160.484495][ T9564] bond31: (slave veth15): Enslaving as an active interface with a down link
[  160.491674][ T9564] bond31: entered allmulticast mode
[  161.216068][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.265278][ T5678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.268330][ T5678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.415889][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.227398][ T9543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  163.295458][ T5678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.354245][ T9593] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  163.513709][ T9602] netlink: 'syz.0.952': attribute type 10 has an invalid length.
[  163.585400][ T9603] veth0: entered promiscuous mode
[  163.593950][ T9603] bond0: entered promiscuous mode
[  163.605933][ T9603] bond_slave_0: entered promiscuous mode
[  163.613476][ T9603] bond_slave_1: entered promiscuous mode
[  163.682636][ T9605] netlink: 'syz.2.953': attribute type 4 has an invalid length.
[  163.696511][ T5678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.701927][ T9601] bond0: left promiscuous mode
[  163.703491][ T9601] bond_slave_0: left promiscuous mode
[  163.705412][ T9601] bond_slave_1: left promiscuous mode
[  163.709213][ T9605] __nla_validate_parse: 18 callbacks suppressed
[  163.709225][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.953'.
[  163.709397][ T9601] veth0: left promiscuous mode
[  163.803437][ T9613] macsec2: entered promiscuous mode
[  163.979299][ T9626] netlink: 'syz.1.959': attribute type 1 has an invalid length.
[  164.014015][ T9630] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  164.073134][ T9636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.961'.
[  164.157973][ T9645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.964'.
[  164.279747][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'.
[  164.340998][ T5678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.436430][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'.
[  164.624234][ T9667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.627761][ T9667] syzkaller0: entered promiscuous mode
[  164.630067][ T9667] syzkaller0: entered allmulticast mode
[  164.690374][ T9667] tipc: Resetting bearer <eth:syzkaller0>
[  164.817864][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'.
[  164.937774][ T9693] netlink: 200 bytes leftover after parsing attributes in process `syz.0.974'.
[  164.975054][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.977575][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.986539][ T9701] macvtap1: entered allmulticast mode
[  164.991315][ T9701] veth0_to_bridge: entered allmulticast mode
[  164.999026][ T9701] veth0_to_bridge: left allmulticast mode
[  165.019164][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'.
[  165.229204][ T9719] netlink: 'syz.2.980': attribute type 49 has an invalid length.
[  165.257054][ T9712] tipc: Resetting bearer <eth:syzkaller0>
[  165.287169][ T5649] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.292546][ T5649] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.295432][ T5649] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  165.306565][ T5649] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.309752][ T5649] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.312723][ T5649] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  165.430862][ T9719] ip6gretap0: entered promiscuous mode
[  165.434148][ T9719] ip6gretap0: entered allmulticast mode
[  165.437268][ T9725] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001
[  165.443927][ T5649] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.450971][ T5649] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.457610][ T5649] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  165.465103][ T5649] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  165.467918][ T5649] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.470567][ T5649] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  165.540575][ T9731] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  165.585936][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'.
[  165.588676][ T9736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.986'.
[  165.656024][ T9733] syzkaller0: entered allmulticast mode
[  165.701395][ T6106] tipc: Node number set to 1533921952
[  165.749403][ T9749] netlink: 'syz.0.989': attribute type 1 has an invalid length.
[  165.847411][ T9755] bond29: (slave bridge13): making interface the new active one
[  165.853220][ T9755] bond29: (slave bridge13): Enslaving as an active interface with an up link
[  165.874272][ T9749] macvlan0: entered promiscuous mode
[  165.876829][ T9749] macvlan0: entered allmulticast mode
[  165.883662][ T9749] bond29: entered promiscuous mode
[  165.887573][ T9749] bridge13: entered promiscuous mode
[  165.891234][ T9749] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  165.893749][ T9749] bond29: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  165.899464][ T9749] bond29: left promiscuous mode
[  165.902533][ T9749] bridge13: left promiscuous mode
[  165.913988][ T9761] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  165.928542][ T9761] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[  165.931028][ T9761] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[  165.937291][ T9761] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[  165.939485][ T9761] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[  165.942527][ T9761] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[  166.113958][ T9773] syzkaller0: entered promiscuous mode
[  166.117646][ T9773] syzkaller0: entered allmulticast mode
[  166.121090][ T9773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.125129][ T9773] tipc: Resetting bearer <eth:syzkaller0>
[  166.132438][ T9772] tipc: Resetting bearer <eth:syzkaller0>
[  166.147845][ T9772] tipc: Disabling bearer <eth:syzkaller0>
[  166.168764][ T9777] ip6_vti0: Caught tx_queue_len zero misconfig
[  166.262909][ T9784] xt_limit: Overflow, try lower: 324382443/0
[  166.347737][ T9790] macsec0: entered promiscuous mode
[  166.352103][ T9790] batadv0: entered promiscuous mode
[  166.354462][ T9790] macsec0: entered allmulticast mode
[  166.358792][ T9790] batadv0: entered allmulticast mode
[  166.361218][ T9790] 8021q: adding VLAN 0 to HW filter on device macsec0
[  166.364834][ T9790] batadv0: left allmulticast mode
[  166.367509][ T9790] batadv0: left promiscuous mode
[  166.493187][ T9803] netlink: 'syz.0.1004': attribute type 21 has an invalid length.
[  166.496040][ T9803] netlink: 'syz.0.1004': attribute type 4 has an invalid length.
[  166.630407][ T9816] xt_TCPMSS: Only works on TCP SYN packets
[  166.755391][ T9833] netlink: 'syz.1.1012': attribute type 13 has an invalid length.
[  167.174622][ T9870] hsr0 speed is unknown, defaulting to 1000
[  167.259588][ T9884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.285687][ T9884] syzkaller0: entered promiscuous mode
[  167.287406][ T9884] syzkaller0: entered allmulticast mode
[  167.289396][ T9884] tipc: Resetting bearer <eth:syzkaller0>
[  167.305639][ T9884] veth15: entered promiscuous mode
[  167.366243][ T9883] tipc: Resetting bearer <eth:syzkaller0>
[  168.745045][ T9883] tipc: Disabling bearer <eth:syzkaller0>
[  168.841159][ T5678] tipc: Node number set to 3565022972
[  168.871402][ T9900] __nla_validate_parse: 25 callbacks suppressed
[  168.871417][ T9900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1028'.
[  168.937340][ T9908] netlink: 'syz.0.1031': attribute type 1 has an invalid length.
[  169.016752][ T9912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1032'.
[  169.024494][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1032'.
[  169.103097][ T9915] syzkaller1: entered promiscuous mode
[  169.108304][ T9915] syzkaller1: entered allmulticast mode
[  169.229135][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'.
[  169.249771][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1037'.
[  169.322884][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'.
[  169.325880][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'.
[  169.328708][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'.
[  169.370963][ T9936] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  169.459179][ T9953] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1043'.
[  169.473935][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'.
[  169.504384][ T5649] nci: nci_rx_work: unknown MT 0x7
[  169.544534][ T9960] bridge19: port 1(veth17) entered blocking state
[  169.546812][ T9960] bridge19: port 1(veth17) entered disabled state
[  169.549316][ T9960] veth17: entered allmulticast mode
[  169.552153][ T9960] veth17: entered promiscuous mode
[  169.569565][ T9955] veth0_to_bond: left allmulticast mode
[  169.571312][ T9955] veth0_to_bond: left promiscuous mode
[  169.573084][ T9955] bridge14: port 2(veth0_to_bond) entered disabled state
[  169.577047][ T9955] bridge19: port 2(veth0_to_bond) entered blocking state
[  169.579276][ T9955] bridge19: port 2(veth0_to_bond) entered disabled state
[  169.581500][ T9955] veth0_to_bond: entered allmulticast mode
[  169.584186][ T9955] veth0_to_bond: entered promiscuous mode
[  169.784187][ T9967] team0: entered promiscuous mode
[  169.824452][ T9970] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  172.319933][ T9948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.548615][ T9994] validate_nla: 6 callbacks suppressed
[  172.548625][ T9994] netlink: 'syz.0.1053': attribute type 1 has an invalid length.
[  172.590856][ T9994] 8021q: adding VLAN 0 to HW filter on device bond32
[  172.594324][ T9994] bond31: (slave bond32): making interface the new active one
[  172.597504][ T9994] bond31: (slave bond32): Enslaving as an active interface with an up link
[  172.600497][ T9996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.602816][ T9999] xt_TCPMSS: Only works on TCP SYN packets
[  172.607325][T10001] syzkaller0: entered promiscuous mode
[  172.619210][T10001] syzkaller0: entered allmulticast mode
[  172.629888][ T9996] tipc: Resetting bearer <eth:syzkaller0>
[  172.636837][ T9995] tipc: Resetting bearer <eth:syzkaller0>
[  172.659147][ T9995] tipc: Disabling bearer <eth:syzkaller0>
[  173.080216][T10031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.205324][T10044] netlink: 'syz.0.1067': attribute type 10 has an invalid length.
[  173.263677][T10053] veth0: entered promiscuous mode
[  173.278533][T10053] bond0: entered promiscuous mode
[  173.283713][T10053] bond_slave_0: entered promiscuous mode
[  173.294761][T10053] bond_slave_1: entered promiscuous mode
[  173.335272][T10052] netlink: 'syz.2.1069': attribute type 11 has an invalid length.
[  173.357687][T10043] bond0: left promiscuous mode
[  173.363026][T10043] bond_slave_0: left promiscuous mode
[  173.367072][T10043] bond_slave_1: left promiscuous mode
[  173.370693][T10043] veth0: left promiscuous mode
[  173.394490][T10058] netlink: 'syz.1.1072': attribute type 7 has an invalid length.
[  173.399106][T10058] netlink: 'syz.1.1072': attribute type 8 has an invalid length.
[  173.671516][T10082] netlink: 'syz.1.1079': attribute type 1 has an invalid length.
[  173.683962][T10082] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  173.695989][T10088] bond0: (slave bond_slave_0): Releasing backup interface
[  173.705623][T10088] bond_slave_0: left allmulticast mode
[  173.711831][T10088] bond0: (slave bond_slave_1): Releasing backup interface
[  173.725851][T10088] bond_slave_1: left allmulticast mode
[  173.731622][T10088] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  173.751894][T10088] pim6reg: entered allmulticast mode
[  173.760406][T10088] pim6reg: left allmulticast mode
[  174.133647][T10113] __nla_validate_parse: 14 callbacks suppressed
[  174.133663][T10113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1085'.
[  174.232146][T10128] netlink: 'syz.2.1087': attribute type 2 has an invalid length.
[  174.249762][T10127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1087'.
[  174.252511][T10128] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  174.281103][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'.
[  174.290679][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'.
[  174.303662][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'.
[  174.329583][ T6407] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.331177][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'.
[  174.332773][ T6407] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.341804][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'.
[  174.346004][ T6407] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.350327][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'.
[  174.350641][ T6407] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.429425][T10146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'.
[  174.433778][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1092'.
[  174.483149][T10150] netlink: 'syz.0.1093': attribute type 1 has an invalid length.
[  174.527637][T10150] 8021q: adding VLAN 0 to HW filter on device bond33
[  174.600244][   T33] audit: type=1804 audit(1778621547.279:2): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1097" name="/newroot/388/memory.events" dev="tmpfs" ino=2003 res=1 errno=0
[  174.615376][   T33] audit: type=1800 audit(1778621547.279:3): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1097" name="memory.events" dev="tmpfs" ino=2003 res=0 errno=0
[  174.779822][T10182] netlink: 'syz.2.1103': attribute type 1 has an invalid length.
[  174.839849][T10182] bond32: entered promiscuous mode
[  174.841616][T10182] 8021q: adding VLAN 0 to HW filter on device bond32
[  174.854796][T10182] bond32: entered allmulticast mode
[  174.861502][T10179] netlink: 'syz.0.1102': attribute type 8 has an invalid length.
[  174.868048][T10179] veth1_to_team: entered promiscuous mode
[  174.870382][T10179] gretap0: entered promiscuous mode
[  174.872964][T10179] hsr1: entered promiscuous mode
[  174.882764][T10182] bond32: (slave bridge0): making interface the new active one
[  174.885356][T10182] bridge0: entered promiscuous mode
[  174.887088][T10182] bridge0: entered allmulticast mode
[  174.890176][T10182] bond32: (slave bridge0): Enslaving as an active interface with an up link
[  174.933146][T10188] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.028144][T10204] xt_TCPMSS: Only works on TCP SYN packets
[  175.102330][T10211] gretap2: entered allmulticast mode
[  175.108469][T10211] bond20: (slave gretap2): making interface the new active one
[  175.111300][T10211] bond20: (slave gretap2): Enslaving as an active interface with an up link
[  175.292820][T10234] bond21: entered promiscuous mode
[  175.300848][T10234] bond21: entered allmulticast mode
[  175.306140][T10234] 8021q: adding VLAN 0 to HW filter on device bond21
[  175.407649][T10238] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  175.411069][T10238] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  175.603282][T10251] bridge0: entered promiscuous mode
[  175.606759][T10251] 8021q: adding VLAN 0 to HW filter on device 
[  175.611781][T10251] 8021q: adding VLAN 0 to HW filter on device team0
[  175.636257][T10251] dummy0: entered promiscuous mode
[  175.644626][T10251] 8021q: adding VLAN 0 to HW filter on device 60X
[  175.670125][T10251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  175.677025][T10251] veth1_macvtap: left promiscuous mode
[  175.679543][T10251] veth0_macvtap: left promiscuous mode
[  175.681930][T10251] veth0_macvtap: entered promiscuous mode
[  175.685210][T10251] veth1_macvtap: entered promiscuous mode
[  175.690468][T10251] geneve1: entered promiscuous mode
[  175.695721][T10251] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  175.697899][T10251] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  175.756366][ T5649] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.762130][ T5649] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.767041][ T6103] syz1: Port: 1 Link ACTIVE
[  175.769573][ T5678] hsr0 speed is unknown, defaulting to 1000
[  175.771845][ T6111] hsr0 speed is unknown, defaulting to 1000
[  175.787713][ T5649] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.790469][ T5649] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.873121][T10259] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  176.071002][T10278] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  176.254023][T10291] team0: Port device dummy0 removed
[  176.260922][T10291] : (slave dummy0): Enslaving as an active interface with an up link
[  176.263727][T10291] dummy0: left promiscuous mode
[  176.415373][T10283] nbd1: detected capacity change from 0 to 63
[  176.423630][T10297] block nbd1: Receive control failed (result -32)
[  176.425468][ T9696] block nbd1: Send control failed (result -32)
[  176.426560][   T55] block nbd1: Receive control failed (result -32)
[  176.428972][ T9696] block nbd1: Request send failed, requeueing
[  176.442841][  T132] block nbd1: Dead connection, failed to find a fallback
[  176.445689][  T132] block nbd1: shutting down sockets
[  176.448296][  T132] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.452137][  T132] Buffer I/O error on dev nbd1, logical block 0, async page read
[  176.455765][ T9696] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.462033][ T9696] Buffer I/O error on dev nbd1, logical block 1, async page read
[  176.471170][ T9696] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.480065][ T9696] Buffer I/O error on dev nbd1, logical block 2, async page read
[  176.489431][ T9696] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.502063][ T9696] Buffer I/O error on dev nbd1, logical block 3, async page read
[  176.517076][ T9696] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.526083][ T9696] Buffer I/O error on dev nbd1, logical block 0, async page read
[  176.528905][ T9696] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.531953][ T9696] Buffer I/O error on dev nbd1, logical block 1, async page read
[  176.535138][ T9696] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.540065][ T9696] Buffer I/O error on dev nbd1, logical block 2, async page read
[  176.546894][ T9696] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.550343][ T9696] Buffer I/O error on dev nbd1, logical block 3, async page read
[  176.553447][ T9696] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.558875][ T9696] Buffer I/O error on dev nbd1, logical block 0, async page read
[  176.561978][ T9696] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.565622][ T9696] Buffer I/O error on dev nbd1, logical block 1, async page read
[  176.570509][ T9696] ldm_validate_partition_table(): Disk read failed.
[  176.576687][ T9696] Dev nbd1: unable to read RDB block 0
[  176.582276][ T9696]  nbd1: unable to read partition table
[  176.597903][ T9696] ldm_validate_partition_table(): Disk read failed.
[  176.602580][ T9696] Dev nbd1: unable to read RDB block 0
[  176.607427][ T9696]  nbd1: unable to read partition table
[  176.640848][T10309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.660887][T10309] ipvlan0: entered promiscuous mode
[  176.689298][T10311] bond34 (unregistering): Released all slaves
[  176.805878][T10325] syzkaller0: entered promiscuous mode
[  176.807557][T10325] syzkaller0: entered allmulticast mode
[  176.977176][T10329] IPv6: sit2: Disabled Multicast RS
[  177.074014][T10333] 8021q: adding VLAN 0 to HW filter on device bond34
[  177.096503][T10334] bond34: (slave veth19): Enslaving as an active interface with a down link
[  177.107401][T10333] bond34 (unregistering): (slave veth19): Releasing active interface
[  177.114482][T10333] bond34 (unregistering): Released all slaves
[  177.474705][T10357] bond34: option broadcast_neighbor: invalid value (30)
[  177.477718][T10357] bond34 (unregistering): Released all slaves
[  177.545939][T10360] pimreg9: entered allmulticast mode
[  177.582174][T10364] validate_nla: 66 callbacks suppressed
[  177.582185][T10364] netlink: 'syz.0.1146': attribute type 1 has an invalid length.
[  177.642646][T10369] netlink: 'syz.0.1148': attribute type 1 has an invalid length.
[  177.673947][T10369] bond34: entered promiscuous mode
[  177.677332][T10369] bond34: entered allmulticast mode
[  177.679291][T10369] 8021q: adding VLAN 0 to HW filter on device bond34
[  177.777547][T10376] netlink: 'syz.0.1150': attribute type 1 has an invalid length.
[  177.816437][T10376] 8021q: adding VLAN 0 to HW filter on device bond35
[  177.839527][T10376] bond35: (slave veth15): Enslaving as an active interface with a down link
[  177.842746][T10378] : renamed from bridge_slave_0 (while UP)
[  177.852997][T10376] bond35: (slave dummy0): making interface the new active one
[  177.856482][T10376] dummy0: entered promiscuous mode
[  177.858504][T10376] bond35: (slave dummy0): Enslaving as an active interface with an up link
[  177.867296][T10376] bond35: (slave dummy0): Releasing active interface
[  177.869420][T10376] dummy0 (unregistering): left promiscuous mode
[  178.162338][T10407] netlink: 'syz.0.1159': attribute type 39 has an invalid length.
[  178.165066][T10406] netlink: 'syz.0.1159': attribute type 39 has an invalid length.
[  178.310072][T10419] netlink: 'syz.0.1162': attribute type 1 has an invalid length.
[  178.348408][T10419] bond36: entered promiscuous mode
[  178.350322][T10419] 8021q: adding VLAN 0 to HW filter on device bond36
[  178.373908][T10419] 8021q: adding VLAN 0 to HW filter on device bond36
[  178.376784][T10419] bond36: (slave wireguard0): The slave device specified does not support setting the MAC address
[  178.380180][T10419] bond36: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  178.388583][T10419] bond36: (slave wireguard0): making interface the new active one
[  178.391060][T10419] wireguard0: entered promiscuous mode
[  178.393743][T10419] bond36: (slave wireguard0): Enslaving as an active interface with an up link
[  178.448406][T10419] bond36: (slave wireguard1): The slave device specified does not support setting the MAC address
[  178.465948][T10419] bond36: (slave wireguard1): Enslaving as a backup interface with an up link
[  178.540826][T10434] bond22: entered promiscuous mode
[  178.544303][T10434] bond22: entered allmulticast mode
[  178.548590][T10434] 8021q: adding VLAN 0 to HW filter on device bond22
[  178.593227][T10439] netlink: 'syz.2.1166': attribute type 29 has an invalid length.
[  178.620720][T10450] raw_sendmsg: syz.0.1167 forgot to set AF_INET. Fix it!
[  178.743561][T10457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.343921][T10473] __nla_validate_parse: 28 callbacks suppressed
[  179.343933][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1173'.
[  179.354784][ T5649] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.354832][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1173'.
[  179.361201][ T5649] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.361244][ T5649] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.361270][ T5649] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.462115][T10480] netlink: 'syz.2.1175': attribute type 10 has an invalid length.
[  179.467270][T10482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'.
[  179.500854][T10480] dummy0: entered promiscuous mode
[  179.503061][T10480] team0: Port device dummy0 added
[  179.522211][T10482] bond37: (slave vxcan1): The slave device specified does not support setting the MAC address
[  179.526776][T10482] bond37: (slave vxcan1): Error -95 calling set_mac_address
[  179.540704][T10480] veth0: entered promiscuous mode
[  179.543028][T10480] bond0: entered promiscuous mode
[  179.554064][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'.
[  179.579166][T10485] macvlan0: entered promiscuous mode
[  179.581245][T10485] macvlan0: entered allmulticast mode
[  179.633476][T10479] bond0: left promiscuous mode
[  179.637574][T10479] veth0: left promiscuous mode
[  179.696218][T10491] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1178'.
[  179.753370][T10498] xt_HMARK: spi-set and port-set can't be combined
[  179.762127][T10498] dvmrp0: entered allmulticast mode
[  179.779729][T10500] veth1_to_team: entered promiscuous mode
[  179.782602][T10500] dummy0: entered promiscuous mode
[  179.788407][T10500] dummy0: left promiscuous mode
[  179.791771][T10500] veth1_to_team: left promiscuous mode
[  179.808593][T10502] veth1_to_team: entered promiscuous mode
[  179.810672][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1184'.
[  179.813187][T10502] dummy0: entered promiscuous mode
[  179.817236][T10502] dummy0: left promiscuous mode
[  179.819703][T10502] veth1_to_team: left promiscuous mode
[  179.849056][T10507] bond38 (unregistering): Released all slaves
[  179.905502][T10506] bond38: entered promiscuous mode
[  179.907544][T10506] 8021q: adding VLAN 0 to HW filter on device bond38
[  179.965929][T10511] syzkaller0: entered promiscuous mode
[  179.968444][T10511] syzkaller0: entered allmulticast mode
[  180.009432][T10516] bond39: (slave bond_slave_1): Device is not bonding slave
[  180.011801][T10516] bond39: option active_slave: invalid value (bond_slave_1)
[  180.016842][T10516] bond39 (unregistering): Released all slaves
[  180.117247][T10521] netlink: 'syz.1.1186': attribute type 1 has an invalid length.
[  180.145526][T10521] 8021q: adding VLAN 0 to HW filter on device bond23
[  180.152028][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1186'.
[  180.155384][T10524] syzkaller0: left promiscuous mode
[  180.155432][T10524] syzkaller0: left allmulticast mode
[  180.156930][T10524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1187'.
[  180.162244][T10524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.179514][T10521] 8021q: adding VLAN 0 to HW filter on device batadv2
[  180.185587][T10521] bond23: (slave batadv2): making interface the new active one
[  180.191082][T10521] bond23: (slave batadv2): Enslaving as an active interface with an up link
[  180.381577][T10531] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  180.389017][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'.
[  180.394352][T10531] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  180.542393][T10537] netlink: 'syz.1.1190': attribute type 13 has an invalid length.
[  180.552678][T10536] geneve1: left promiscuous mode
[  180.657912][T10537] bridge0: left promiscuous mode
[  180.660372][T10537] 8021q: adding VLAN 0 to HW filter on device 
[  180.663315][T10537] 8021q: adding VLAN 0 to HW filter on device team0
[  180.670990][T10537] 8021q: adding VLAN 0 to HW filter on device 60X
[  180.695550][T10537] veth1_macvtap: left promiscuous mode
[  180.697996][T10537] veth0_macvtap: left promiscuous mode
[  180.700744][T10537] veth0_macvtap: entered promiscuous mode
[  180.709665][T10537] veth1_macvtap: entered promiscuous mode
[  180.716131][T10537] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  182.116535][T10542] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR
[  182.203073][T10552] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  182.214650][T10554] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1194'.
[  182.271297][T10559] macsec0: entered promiscuous mode
[  182.273123][T10559] macsec0: entered allmulticast mode
[  182.302808][T10561] bond39: (slave vxcan1): The slave device specified does not support setting the MAC address
[  182.306514][T10561] bond39: (slave vxcan1): Error -95 calling set_mac_address
[  182.388498][T10571] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  182.470957][T10575] hsr0 speed is unknown, defaulting to 1000
[  182.592547][T10577] 0: renamed from hsr0
[  182.597901][T10577] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  182.601124][T10577] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  182.604193][T10577] 0: entered allmulticast mode
[  182.606663][T10577] hsr_slave_0: entered allmulticast mode
[  182.608478][T10577] hsr_slave_1: entered allmulticast mode
[  182.610985][T10577] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  183.092763][T10602] validate_nla: 5 callbacks suppressed
[  183.092774][T10602] netlink: 'syz.1.1205': attribute type 4 has an invalid length.
[  183.267341][T10613] netlink: 'syz.1.1207': attribute type 1 has an invalid length.
[  183.290378][T10613] 8021q: adding VLAN 0 to HW filter on device bond24
[  183.319773][T10613] bond24: (slave veth17): Enslaving as an active interface with a down link
[  183.335427][T10616] netlink: 'syz.2.1208': attribute type 1 has an invalid length.
[  183.361010][T10613] 8021q: adding VLAN 0 to HW filter on device batadv3
[  183.365048][T10613] bond24: (slave batadv3): making interface the new active one
[  183.368091][T10613] batadv3: entered promiscuous mode
[  183.370005][T10613] bond24: (slave batadv3): Enslaving as an active interface with an up link
[  183.377043][T10613] netlink: 'syz.1.1207': attribute type 9 has an invalid length.
[  183.390872][T10616] 8021q: adding VLAN 0 to HW filter on device bond34
[  183.479375][T10618] bond34: (slave veth21): Enslaving as an active interface with a down link
[  183.486771][T10619] bond24 (unregistering): (slave veth17): Releasing active interface
[  183.490994][T10619] bond24 (unregistering): (slave batadv3): Releasing active interface
[  183.494382][T10619] bond24 (unregistering): Released all slaves
[  183.511219][T10616] 8021q: adding VLAN 0 to HW filter on device batadv2
[  183.514667][T10616] bond34: (slave batadv2): making interface the new active one
[  183.518400][T10616] batadv2: entered promiscuous mode
[  183.520322][T10616] bond34: (slave batadv2): Enslaving as an active interface with an up link
[  183.536254][T10618] bond34 (unregistering): (slave veth21): Releasing active interface
[  183.542071][T10618] bond34 (unregistering): (slave batadv2): Releasing active interface
[  183.549647][T10618] bond34 (unregistering): Released all slaves
[  183.571717][T10621] netlink: 'syz.1.1209': attribute type 13 has an invalid length.
[  183.573969][T10621] netlink: 'syz.1.1209': attribute type 17 has an invalid length.
[  183.586471][T10621] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  183.837003][T10637] bond40 (unregistering): Released all slaves
[  183.900937][T10644] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  183.973965][T10647] dummy0: left promiscuous mode
[  183.982683][T10647] team0: Port device dummy0 removed
[  184.338212][T10660] netlink: 'syz.0.1220': attribute type 1 has an invalid length.
[  184.412601][T10666] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.466155][T10666] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.475783][T10670] lo: Caught tx_queue_len zero misconfig
[  184.527867][T10666] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.572971][T10666] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.633866][ T5649] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.642191][T10678] hsr0 speed is unknown, defaulting to 1000
[  184.642316][ T5649] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.654249][ T5649] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.679881][ T5649] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.777331][T10683] __nla_validate_parse: 10 callbacks suppressed
[  184.777341][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1225'.
[  184.813683][T10688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.820886][T10688] syzkaller0: entered promiscuous mode
[  184.824997][T10688] syzkaller0: entered allmulticast mode
[  184.833588][T10688] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1226'.
[  184.842162][T10688] tipc: Resetting bearer <eth:syzkaller0>
[  184.854218][T10688] team3: left promiscuous mode
[  184.858075][T10688] team4: left promiscuous mode
[  184.860811][T10688] ip6gre1: left promiscuous mode
[  184.864657][T10688] veth15: left promiscuous mode
[  184.867399][T10688] bond21: left promiscuous mode
[  184.869145][T10688] bond22: left promiscuous mode
[  184.870805][T10688] syzkaller0: left promiscuous mode
[  184.933156][T10687] tipc: Resetting bearer <eth:syzkaller0>
[  185.715666][T10687] tipc: Disabling bearer <eth:syzkaller0>
[  185.801349][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'.
[  185.813312][T10696] workqueue: Failed to create a rescuer kthread for wq "bond34": -EINTR
[  185.834442][T10710] hsr0 speed is unknown, defaulting to 1000
[  185.897885][T10722] netlink: 'syz.0.1233': attribute type 13 has an invalid length.
[  185.905249][T10722] netlink: 'syz.0.1233': attribute type 17 has an invalid length.
[  185.953924][T10722] erspan0: left promiscuous mode
[  185.965326][T10722] erspan0: left allmulticast mode
[  185.998060][T10722] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.003108][T10722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.033418][T10722] 0: left allmulticast mode
[  186.035480][T10722] hsr_slave_0: left allmulticast mode
[  186.037264][T10722] hsr_slave_1: left allmulticast mode
[  186.041592][T10722] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  186.066171][T10730] vlan0: entered promiscuous mode
[  186.184841][T10729] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  186.238266][T10736] syzkaller1: entered promiscuous mode
[  186.240345][T10736] syzkaller1: entered allmulticast mode
[  186.256493][ T5617] Bluetooth: hci1: command 0x0406 tx timeout
[  186.258888][T10658] Bluetooth: hci0: command 0x0c1a tx timeout
[  186.363364][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'.
[  186.404134][T10752] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1244'.
[  186.511697][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'.
[  186.534318][T10760] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.568131][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'.
[  186.571731][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'.
[  186.576363][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'.
[  186.580427][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'.
[  186.599798][T10760] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.611799][T10761] veth0_macvtap: left promiscuous mode
[  186.657386][T10760] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.728541][T10760] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  186.785649][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.796401][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.805761][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.816887][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.210510][T10773] netlink: 'syz.0.1250': attribute type 1 has an invalid length.
[  187.583045][T10785] bridge0: port 1(vlan0) entered blocking state
[  187.586811][T10785] bridge0: port 1(vlan0) entered disabled state
[  187.589343][T10785] vlan0: entered allmulticast mode
[  187.591267][T10785] bridge0: entered allmulticast mode
[  187.595958][T10785] vlan0: left allmulticast mode
[  187.600089][T10785] bridge0: left allmulticast mode
[  187.751588][T10792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.754169][T10792] syzkaller0: entered promiscuous mode
[  187.758445][T10792] syzkaller0: entered allmulticast mode
[  187.781551][T10791] tipc: Resetting bearer <eth:syzkaller0>
[  187.795580][T10791] tipc: Disabling bearer <eth:syzkaller0>
[  187.959281][T10796] bond0: entered promiscuous mode
[  187.962718][T10796] batadv0: entered promiscuous mode
[  187.969389][T10796] debugfs: 'hsr1' already exists in 'hsr'
[  187.971417][T10796] Cannot create hsr debugfs directory
[  187.973420][T10796] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  187.977879][T10796] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  187.985477][T10796] 8021q: adding VLAN 0 to HW filter on device hsr1
[  187.989806][T10796] bond0: left promiscuous mode
[  187.992635][T10796] batadv0: left promiscuous mode
[  188.008727][T10797] xt_hashlimit: size too large, truncated to 1048576
[  188.149117][T10800] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  188.338014][T10814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.394119][T10816] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved
[  188.505558][T10820] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  188.581190][T10824] syzkaller1: entered promiscuous mode
[  188.583540][T10824] syzkaller1: entered allmulticast mode
[  188.612485][T10822] smbdirect: ib_dev[syz2] removed
[  188.676672][T10828] validate_nla: 64 callbacks suppressed
[  188.676683][T10828] netlink: 'syz.1.1270': attribute type 1 has an invalid length.
[  188.862396][T10834] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  188.875484][T10833] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  188.957391][T10841] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  188.966885][T10841] geneve6: entered promiscuous mode
[  188.968884][T10841] geneve6: entered allmulticast mode
[  189.071572][T10843] : renamed from tunl0 (while UP)
[  189.144463][T10850] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  189.836150][T10867] macsec0: left promiscuous mode
[  189.871209][T10870] netlink: 'syz.2.1280': attribute type 1 has an invalid length.
[  189.901899][T10870] bond34: (slave bridge21): making interface the new active one
[  189.910970][T10870] bond34: (slave bridge21): Enslaving as an active interface with an up link
[  189.932652][T10870] __nla_validate_parse: 53 callbacks suppressed
[  189.932662][T10870] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1280'.
[  189.955765][T10870] bond34: entered promiscuous mode
[  189.960530][T10870] bridge21: entered promiscuous mode
[  189.964305][T10870] bond34: entered allmulticast mode
[  189.968098][T10870] bridge21: entered allmulticast mode
[  189.972640][T10870] 8021q: adding VLAN 0 to HW filter on device bond34
[  189.978609][T10874] netlink: 'syz.1.1281': attribute type 4 has an invalid length.
[  190.040522][T10879] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  190.064166][T10879] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  190.077643][T10881] netlink: 'syz.2.1283': attribute type 12 has an invalid length.
[  190.170033][T10882] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  190.185289][T10884] syzkaller1: entered promiscuous mode
[  190.195036][T10884] syzkaller1: entered allmulticast mode
[  190.404612][T10888] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1286'.
[  190.764611][T10900] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  190.768175][T10900] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  190.867822][T10912] lo: entered allmulticast mode
[  190.872203][T10912] lo: left allmulticast mode
[  190.966558][T10919] netlink: 'syz.2.1294': attribute type 10 has an invalid length.
[  190.991612][T10922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1293'.
[  191.002659][T10919] dummy0: entered promiscuous mode
[  191.016300][T10919] team0: Port device dummy0 added
[  191.195819][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'.
[  191.205612][T10938] bond0: entered promiscuous mode
[  191.208042][T10938] batadv_slave_0: entered promiscuous mode
[  191.210155][T10938] debugfs: 'hsr1' already exists in 'hsr'
[  191.211838][T10938] Cannot create hsr debugfs directory
[  191.281483][T10944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1299'.
[  191.284612][T10941] bond0: entered promiscuous mode
[  191.293399][T10941] batadv0: entered promiscuous mode
[  191.296545][T10941] debugfs: 'hsr0' already exists in 'hsr'
[  191.298399][T10941] Cannot create hsr debugfs directory
[  191.300208][T10941] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  191.306452][T10941] 8021q: adding VLAN 0 to HW filter on device hsr0
[  191.309842][T10941] bond0: left promiscuous mode
[  191.313388][T10941] batadv0: left promiscuous mode
[  191.320491][T10946] netlink: 'syz.1.1300': attribute type 4 has an invalid length.
[  191.320839][T10944] netlink: 'syz.2.1299': attribute type 1 has an invalid length.
[  191.324830][T10946] netlink: 'syz.1.1300': attribute type 4 has an invalid length.
[  191.336958][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1300'.
[  191.416431][T10949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1301'.
[  191.579190][T10969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.591320][T10969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.597368][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.791232][T10979] syzkaller0: entered promiscuous mode
[  191.792981][T10979] syzkaller0: entered allmulticast mode
[  191.845798][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1310'.
[  192.098579][T10996] tipc: Resetting bearer <eth:syzkaller0>
[  192.131726][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.137479][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.144803][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.147425][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.150050][T11002] syzkaller1: entered promiscuous mode
[  192.151773][T11002] syzkaller1: entered allmulticast mode
[  192.319761][T11004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  192.738363][T11010] 8021q: VLANs not supported on ip_vti0
[  193.193464][T11012] netlink: 'syz.1.1319': attribute type 1 has an invalid length.
[  193.209337][T11012] 8021q: adding VLAN 0 to HW filter on device bond24
[  193.225878][T11012] bond24: (slave gretap3): making interface the new active one
[  193.229804][T11012] bond24: (slave gretap3): Enslaving as an active interface with an up link
[  193.320913][T11017] netlink: 'syz.1.1320': attribute type 9 has an invalid length.
[  194.415704][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.933017][T10992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.037591][T11023] syzkaller1: entered promiscuous mode
[  195.041211][T11023] syzkaller1: entered allmulticast mode
[  195.120946][T11028] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  195.131768][T11030] syzkaller1: entered allmulticast mode
[  195.222880][T11038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1328'.
[  195.230253][T11038] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1328'.
[  195.316200][T11047] netlink: 'syz.1.1331': attribute type 10 has an invalid length.
[  195.320535][T11047] : (slave dummy0): Releasing backup interface
[  195.332715][T11047] team0: Port device dummy0 added
[  195.363190][T11051] netlink: 'syz.2.1332': attribute type 10 has an invalid length.
[  195.375126][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.377682][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.453958][T11060] netlink: 'syz.1.1331': attribute type 10 has an invalid length.
[  195.487827][T11060] team0: Port device dummy0 removed
[  195.493974][T11060] : (slave dummy0): Enslaving as an active interface with an up link
[  195.588666][T11047] nbd2: detected capacity change from 0 to 63
[  195.601240][   T54] block nbd2: Receive control failed (result -104)
[  195.604388][ T9443] block nbd2: Receive control failed (result -32)
[  195.625178][ T9696] block nbd2: Send control failed (result -32)
[  195.633110][ T9696] block nbd2: Request send failed, requeueing
[  195.645842][  T132] block nbd2: Dead connection, failed to find a fallback
[  195.648598][  T132] block nbd2: shutting down sockets
[  195.650344][  T132] blk_print_req_error: 138 callbacks suppressed
[  195.650356][  T132] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.656766][  T132] buffer_io_error: 138 callbacks suppressed
[  195.656775][  T132] Buffer I/O error on dev nbd2, logical block 3, async page read
[  195.715491][T11065] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  195.754279][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'.
[  195.831672][T11079] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  195.978411][T11095] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  195.995050][T11099] vlan0: entered allmulticast mode
[  196.000519][T11099] bond_slave_0: entered allmulticast mode
[  196.015914][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'.
[  196.072624][T11105] syzkaller1: entered promiscuous mode
[  196.074591][T11105] syzkaller1: entered allmulticast mode
[  196.103536][T11107] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1344'.
[  196.167809][T11114] syzkaller1: entered promiscuous mode
[  196.171244][T11114] syzkaller1: entered allmulticast mode
[  196.268188][   T33] audit: type=1804 audit(1778621568.949:4): pid=11122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1347" name="/newroot/463/memory.events" dev="tmpfs" ino=2385 res=1 errno=0
[  196.277864][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'.
[  196.289443][   T33] audit: type=1800 audit(1778621568.949:5): pid=11122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1347" name="memory.events" dev="tmpfs" ino=2385 res=0 errno=0
[  196.316480][T11125] netlink: 'syz.0.1349': attribute type 8 has an invalid length.
[  196.322725][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1349'.
[  196.410109][T11134] syzkaller0: entered promiscuous mode
[  196.417927][T11134] syzkaller0: entered allmulticast mode
[  196.422186][T11131] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1350'.
[  196.425790][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'.
[  196.431027][T11139] IPv6: sit2: Disabled Multicast RS
[  196.433944][T11134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1351'.
[  196.448653][T11139] batadv4: entered promiscuous mode
[  196.450313][T11139] batadv4: entered allmulticast mode
[  196.452600][T11139] 8021q: adding VLAN 0 to HW filter on device batadv4
[  196.454832][ T5649] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  196.463015][ T5649] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.466453][ T5649] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.469525][ T5649] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.691497][T11170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.693962][T11170] syzkaller0: entered promiscuous mode
[  196.696075][T11170] syzkaller0: entered allmulticast mode
[  196.717161][T11170] tipc: Resetting bearer <eth:syzkaller0>
[  196.721502][T11160] netlink: 'syz.0.1357': attribute type 2 has an invalid length.
[  196.725234][T11169] tipc: Resetting bearer <eth:syzkaller0>
[  196.739392][T11160] netlink: 'syz.0.1357': attribute type 2 has an invalid length.
[  196.745764][T11169] tipc: Disabling bearer <eth:syzkaller0>
[  196.975495][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.225677][T11197] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  197.239668][T11197] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  197.276387][T11196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.513884][T11206] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.726325][T11233] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.780872][T11233] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.811904][T11233] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.861725][T11233] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.937922][T11241] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  197.940742][T11241] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  197.949654][T11241] erspan1: left promiscuous mode
[  197.951860][T11241] erspan1: left allmulticast mode
[  197.953849][T11241] vlan0: left allmulticast mode
[  197.955627][T11241] bond0: left allmulticast mode
[  197.957574][T11241] bridge0: left allmulticast mode
[  197.959502][T11241] bond12: left allmulticast mode
[  197.961755][T11241] bond15: left promiscuous mode
[  197.963490][T11241] bond15: left allmulticast mode
[  197.965594][T11241] bond16: left promiscuous mode
[  197.967372][T11241] bridge5: left promiscuous mode
[  197.969052][T11241] ipvlan0: left allmulticast mode
[  197.970665][T11241] bond16: left allmulticast mode
[  197.972554][T11241] bridge5: left allmulticast mode
[  197.975457][T11241] bridge7: left allmulticast mode
[  197.977581][T11241] ip6gre1: left promiscuous mode
[  197.979554][T11241] ip6gre1: left allmulticast mode
[  197.981877][T11241] bond21: left promiscuous mode
[  197.983479][T11241] bridge10: left promiscuous mode
[  197.986566][T11241] tipc: Resetting bearer <eth:syzkaller0>
[  197.988822][T11241] syzkaller0: left promiscuous mode
[  197.990580][T11241] syzkaller0: left allmulticast mode
[  197.993416][T11241] batadv3: left promiscuous mode
[  197.995537][T11241] batadv3: left allmulticast mode
[  197.997447][T11241] bond26: left promiscuous mode
[  198.000578][T11241] hsr1: left promiscuous mode
[  198.002446][T11241] bond34: left promiscuous mode
[  198.004026][T11241] bond34: left allmulticast mode
[  198.006533][T11241] bond36: left promiscuous mode
[  198.008363][T11241] wireguard0: left promiscuous mode
[  198.010504][T11241] macvlan0: left promiscuous mode
[  198.012518][T11241] macvlan0: left allmulticast mode
[  198.014350][T11241] bond38: left promiscuous mode
[  198.022491][ T5670] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.029111][ T5670] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.045257][ T5670] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.048465][ T5670] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  198.082102][ T5670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.095935][ T5649] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.109883][ T5649] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.116508][T11251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  198.127468][ T5649] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.130962][T11251] syzkaller0: entered promiscuous mode
[  198.132962][T11251] syzkaller0: entered allmulticast mode
[  198.204792][T11255] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  198.236597][T11255] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  198.252612][T11255] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  198.359987][T11272] netlink: 'syz.0.1383': attribute type 1 has an invalid length.
[  198.392974][T11272] bond41: entered promiscuous mode
[  198.395580][T11272] bond41: entered allmulticast mode
[  198.398235][T11272] 8021q: adding VLAN 0 to HW filter on device bond41
[  198.425068][T11272] bridge16: entered promiscuous mode
[  198.427055][T11272] bridge16: entered allmulticast mode
[  198.428990][T11272] bond41: (slave bridge16): Enslaving as a backup interface with an up link
[  198.516362][ T5649] bond41: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  198.518770][T11276] netlink: 'syz.0.1385': attribute type 1 has an invalid length.
[  198.525888][T11278] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  198.645561][   T12] bond41: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  198.665360][T11291] bond0: entered promiscuous mode
[  198.667494][T11291] batadv0: entered promiscuous mode
[  198.669346][T11291] debugfs: 'hsr1' already exists in 'hsr'
[  198.671245][T11291] Cannot create hsr debugfs directory
[  198.673706][T11291] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  198.677125][T11291] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  198.681568][T11291] 8021q: adding VLAN 0 to HW filter on device hsr1
[  198.686168][T11291] bond0: left promiscuous mode
[  198.691081][T11291] batadv0: left promiscuous mode
[  198.739947][T11298] batman_adv: batadv0: Removing interface: macvtap1
[  198.794992][T11302] syzkaller1: entered promiscuous mode
[  198.800243][T11302] syzkaller1: entered allmulticast mode
[  198.884622][T11309] netlink: 'syz.1.1396': attribute type 1 has an invalid length.
[  198.903953][T11309] 8021q: adding VLAN 0 to HW filter on device bond25
[  198.914937][T11309] netlink: 'syz.1.1396': attribute type 1 has an invalid length.
[  198.931080][T11309] 8021q: adding VLAN 0 to HW filter on device batadv5
[  198.939260][T11309] bond25: (slave batadv5): making interface the new active one
[  198.947635][T11309] bond25: (slave batadv5): Enslaving as an active interface with an up link
[  199.045476][T11327] openvswitch: : Dropping previously announced user features
[  199.230783][T11341] syzkaller0: entered promiscuous mode
[  199.232621][T11341] syzkaller0: entered allmulticast mode
[  199.269242][T11343] syzkaller1: entered promiscuous mode
[  199.270946][T11343] syzkaller1: entered allmulticast mode
[  199.531372][T11353] netlink: 'syz.0.1408': attribute type 11 has an invalid length.
[  199.663292][T11355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.720816][T11359] syzkaller1: entered promiscuous mode
[  199.725351][T11359] syzkaller1: entered allmulticast mode
[  199.745973][T11361] netem: unknown loss type 0
[  199.747793][T11361] netem: change failed
[  199.843356][T11374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.970561][T11383] bridge0: entered promiscuous mode
[  199.974263][T11383] 8021q: adding VLAN 0 to HW filter on device 
[  199.977675][T11383] 8021q: adding VLAN 0 to HW filter on device team0
[  199.982935][T11383] 8021q: adding VLAN 0 to HW filter on device 60X
[  199.989415][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.993338][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.014297][T11387] syzkaller0: left promiscuous mode
[  200.018935][T11387] syzkaller0: left allmulticast mode
[  200.200014][T11401] 8021q: adding VLAN 0 to HW filter on device bond35
[  200.248219][T11417] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  200.266385][T11419] __nla_validate_parse: 35 callbacks suppressed
[  200.266396][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'.
[  200.351225][T11431] validate_nla: 4 callbacks suppressed
[  200.351236][T11431] netlink: 'syz.0.1430': attribute type 1 has an invalid length.
[  200.360737][T11430] bond26: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  200.365739][T11430] bond26 (unregistering): Released all slaves
[  200.377006][T11422] netlink: 'syz.2.1428': attribute type 10 has an invalid length.
[  200.392159][T11431] bond42: entered promiscuous mode
[  200.394159][T11431] 8021q: adding VLAN 0 to HW filter on device bond42
[  200.399952][T11422] team0: left promiscuous mode
[  200.403442][T11422] dummy0: left promiscuous mode
[  200.407908][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1430'.
[  200.410643][T11422] 8021q: adding VLAN 0 to HW filter on device team0
[  200.413626][T11422] team0: entered promiscuous mode
[  200.415721][T11422] dummy0: entered promiscuous mode
[  200.417993][T11422] bond0: (slave team0): Enslaving as an active interface with an up link
[  200.420837][T11431] bond42: entered allmulticast mode
[  200.460937][T11431] bond42: (slave bridge17): making interface the new active one
[  200.465265][T11431] bridge17: entered promiscuous mode
[  200.467176][T11431] bridge17: entered allmulticast mode
[  200.470107][T11431] bond42: (slave bridge17): Enslaving as an active interface with an up link
[  200.520016][T11445] netlink: 'syz.2.1432': attribute type 1 has an invalid length.
[  200.545791][T11445] bond36: (slave geneve7): making interface the new active one
[  200.548977][T11445] bond36: (slave geneve7): Enslaving as an active interface with an up link
[  200.552403][ T5670] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  200.557865][ T5670] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  200.561228][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1432'.
[  200.567531][T11445] 8021q: adding VLAN 0 to HW filter on device bond36
[  200.570092][ T5670] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  200.573585][ T5670] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  200.610655][T11450] syzkaller0: entered promiscuous mode
[  200.612356][T11450] syzkaller0: entered allmulticast mode
[  201.138597][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'.
[  201.246246][T11466] netlink: 'syz.0.1439': attribute type 1 has an invalid length.
[  201.315314][T11466] bond43: (slave geneve5): making interface the new active one
[  201.318877][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'.
[  201.329104][T11466] bond43: (slave geneve5): Enslaving as an active interface with an up link
[  201.335726][ T6407] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  201.340708][ T6407] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  201.343916][ T6407] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  201.349156][T11466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1439'.
[  201.361434][ T6407] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  201.399033][T11473] syzkaller1: entered promiscuous mode
[  201.400775][T11473] syzkaller1: entered allmulticast mode
[  201.442102][T11475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1442'.
[  201.572472][T11484] tipc: Resetting bearer <eth:syzkaller0>
[  201.584045][T11491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1447'.
[  201.590552][T11491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1447'.
[  201.612023][ T5649] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.620658][ T5649] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.627051][ T5649] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.629770][ T5649] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  201.692161][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'.
[  201.820265][T11509] netlink: 'syz.1.1452': attribute type 1 has an invalid length.
[  201.822753][T11509] netlink: 'syz.1.1452': attribute type 1 has an invalid length.
[  201.870164][T11520] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.873031][T11520] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  201.882783][T11517] netlink: 'syz.0.1454': attribute type 10 has an invalid length.
[  201.951775][T11520] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  201.960443][T11520] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  202.000329][T11520] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.006707][T11520] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  202.062843][T11520] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.067755][T11520] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  202.115015][T11517] nbd3: detected capacity change from 0 to 63
[  202.123784][   T54] block nbd3: Receive control failed (result -104)
[  202.125207][ T9443] block nbd3: Receive control failed (result -32)
[  202.147394][ T6407] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  202.149958][ T6407] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  202.160344][ T6407] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  202.163107][ T6407] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  202.179744][ T6407] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  202.182506][ T6407] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  202.212772][ T6407] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  202.216988][ T6407] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  202.223246][T11520] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  202.226760][T11520] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  202.243547][ T6407] ==================================================================
[  202.245931][ T6407] BUG: KASAN: slab-use-after-free in __mutex_lock+0x15a/0x1550
[  202.248106][ T6407] Read of size 8 at addr ffff8881a7fba0a8 by task kworker/u8:5/6407
[  202.250608][ T6407] 
[  202.251800][ T6407] CPU: 1 UID: 0 PID: 6407 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  202.251811][ T6407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.251818][ T6407] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  202.251832][ T6407] Call Trace:
[  202.251837][ T6407]  <TASK>
[  202.251842][ T6407]  dump_stack_lvl+0xe8/0x150
[  202.251852][ T6407]  print_address_description+0x55/0x1e0
[  202.251861][ T6407]  ? __mutex_lock+0x15a/0x1550
[  202.251873][ T6407]  print_report+0x58/0x70
[  202.251880][ T6407]  kasan_report+0x117/0x150
[  202.251892][ T6407]  ? __mutex_lock+0x15a/0x1550
[  202.251904][ T6407]  __mutex_lock+0x15a/0x1550
[  202.251940][ T6407]  ? __lock_acquire+0x6b5/0x2cf0
[  202.251952][ T6407]  ? look_up_lock_class+0x57/0x110
[  202.251971][ T6407]  ? __mutex_lock+0x608/0x1550
[  202.251985][ T6407]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[  202.251994][ T6407]  ? __pfx___mutex_lock+0x10/0x10
[  202.252006][ T6407]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  202.252017][ T6407]  ? process_scheduled_works+0xa70/0x1860
[  202.252025][ T6407]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[  202.252036][ T6407]  ? process_scheduled_works+0xa70/0x1860
[  202.252043][ T6407]  ? process_scheduled_works+0xa70/0x1860
[  202.252051][ T6407]  process_scheduled_works+0xb5d/0x1860
[  202.252064][ T6407]  ? __pfx_process_scheduled_works+0x10/0x10
[  202.252073][ T6407]  ? assign_work+0x3d5/0x5e0
[  202.252081][ T6407]  worker_thread+0xa53/0xfc0
[  202.252094][ T6407]  kthread+0x388/0x470
[  202.252105][ T6407]  ? __pfx_worker_thread+0x10/0x10
[  202.252112][ T6407]  ? __pfx_kthread+0x10/0x10
[  202.252121][ T6407]  ret_from_fork+0x514/0xb70
[  202.252130][ T6407]  ? __pfx_ret_from_fork+0x10/0x10
[  202.252137][ T6407]  ? __switch_to+0xc79/0x1410
[  202.252148][ T6407]  ? __pfx_kthread+0x10/0x10
[  202.252158][ T6407]  ret_from_fork_asm+0x1a/0x30
[  202.252170][ T6407]  </TASK>
[  202.252173][ T6407] 
[  202.306773][ T6407] Allocated by task 11520:
[  202.308434][ T6407]  kasan_save_track+0x3e/0x80
[  202.309938][ T6407]  __kasan_kmalloc+0x93/0xb0
[  202.311285][ T6407]  __kmalloc_noprof+0x35c/0x760
[  202.312659][T11539] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  202.312722][ T6407]  udp_tunnel_nic_netdevice_event+0x4c3/0x17d0
[  202.312735][ T6407]  notifier_call_chain+0x1ad/0x3d0
[  202.312745][ T6407]  register_netdevice+0x18c9/0x1ec0
[  202.312756][ T6407]  nsim_create+0xbed/0x1160
[  202.312764][ T6407]  __nsim_dev_port_add+0x857/0xd30
[  202.324174][ T6407]  nsim_dev_port_add_all+0x37/0xf0
[  202.325641][ T6407]  nsim_dev_reload_up+0x45f/0x7c0
[  202.327108][ T6407]  devlink_reload+0x4f8/0x8c0
[  202.328456][ T6407]  devlink_nl_reload_doit+0xaaa/0xc80
[  202.329988][ T6407]  genl_family_rcv_msg_doit+0x22a/0x330
[  202.331574][ T6407]  genl_rcv_msg+0x61c/0x7a0
[  202.332891][ T6407]  netlink_rcv_skb+0x232/0x4b0
[  202.334293][ T6407]  genl_rcv+0x28/0x40
[  202.335454][ T6407]  netlink_unicast+0x75c/0x8e0
[  202.336825][ T6407]  netlink_sendmsg+0x813/0xb40
[  202.338235][ T6407]  ____sys_sendmsg+0x972/0x9f0
[  202.339609][ T6407]  ___sys_sendmsg+0x2a5/0x360
[  202.340982][ T6407]  __x64_sys_sendmsg+0x1bd/0x2a0
[  202.342444][ T6407]  do_syscall_64+0x15f/0xf80
[  202.343772][ T6407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.345473][ T6407] 
[  202.346171][ T6407] Freed by task 11520:
[  202.347360][ T6407]  kasan_save_track+0x3e/0x80
[  202.348706][ T6407]  kasan_save_free_info+0x46/0x50
[  202.350173][ T6407]  __kasan_slab_free+0x5c/0x80
[  202.351525][ T6407]  kfree+0x1c5/0x640
[  202.352599][ T6407]  udp_tunnel_nic_netdevice_event+0x11ed/0x17d0
[  202.354390][ T6407]  notifier_call_chain+0x1ad/0x3d0
[  202.355869][ T6407]  unregister_netdevice_many_notify+0x17a5/0x22c0
[  202.357666][ T6407]  unregister_netdevice_queue+0x31f/0x360
[  202.359318][ T6407]  nsim_destroy+0x277/0x7f0
[  202.360625][ T6407]  __nsim_dev_port_del+0x14f/0x200
[  202.362120][ T6407]  nsim_dev_reload_destroy+0x288/0x490
[  202.363668][ T6407]  nsim_dev_reload_down+0x8a/0xc0
[  202.365122][ T6407]  devlink_reload+0x1eb/0x8c0
[  202.366476][ T6407]  devlink_nl_reload_doit+0xaaa/0xc80
[  202.368031][ T6407]  genl_family_rcv_msg_doit+0x22a/0x330
[  202.369551][ T6407]  genl_rcv_msg+0x61c/0x7a0
[  202.370800][ T6407]  netlink_rcv_skb+0x232/0x4b0
[  202.372201][ T6407]  genl_rcv+0x28/0x40
[  202.373361][ T6407]  netlink_unicast+0x75c/0x8e0
[  202.374798][ T6407]  netlink_sendmsg+0x813/0xb40
[  202.376214][ T6407]  ____sys_sendmsg+0x972/0x9f0
[  202.377612][ T6407]  ___sys_sendmsg+0x2a5/0x360
[  202.379106][ T6407]  __x64_sys_sendmsg+0x1bd/0x2a0
[  202.380481][ T6407]  do_syscall_64+0x15f/0xf80
[  202.381808][ T6407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.383519][ T6407] 
[  202.384215][ T6407] Last potentially related work creation:
[  202.385789][ T6407]  kasan_save_stack+0x3e/0x60
[  202.387183][ T6407]  kasan_record_aux_stack+0xbd/0xd0
[  202.388681][ T6407]  insert_work+0x3d/0x330
[  202.389875][ T6407]  __queue_work+0xbad/0xfc0
[  202.391171][ T6407]  queue_work_on+0x106/0x1d0
[  202.392490][ T6407]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  202.394117][ T6407]  udp_tunnel_push_rx_port+0x186/0x210
[  202.395700][ T6407]  geneve_offload_rx_ports+0xc7/0x150
[  202.397263][ T6407]  geneve_netdevice_event+0x6a/0x80
[  202.398784][ T6407]  notifier_call_chain+0x1ad/0x3d0
[  202.400278][ T6407]  call_netdevice_notifiers+0x90/0xd0
[  202.401794][ T6407]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[  202.403558][ T6407]  notifier_call_chain+0x1ad/0x3d0
[  202.405016][ T6407]  register_netdevice+0x18c9/0x1ec0
[  202.406455][ T6407]  nsim_create+0xbed/0x1160
[  202.407858][ T6407]  __nsim_dev_port_add+0x857/0xd30
[  202.409378][ T6407]  nsim_dev_port_add_all+0x37/0xf0
[  202.410863][ T6407]  nsim_dev_reload_up+0x45f/0x7c0
[  202.412242][ T6407]  devlink_reload+0x4f8/0x8c0
[  202.413541][ T6407]  devlink_nl_reload_doit+0xaaa/0xc80
[  202.415016][ T6407]  genl_family_rcv_msg_doit+0x22a/0x330
[  202.416615][ T6407]  genl_rcv_msg+0x61c/0x7a0
[  202.417924][ T6407]  netlink_rcv_skb+0x232/0x4b0
[  202.419259][ T6407]  genl_rcv+0x28/0x40
[  202.420410][ T6407]  netlink_unicast+0x75c/0x8e0
[  202.421738][ T6407]  netlink_sendmsg+0x813/0xb40
[  202.423186][ T6407]  ____sys_sendmsg+0x972/0x9f0
[  202.424655][ T6407]  ___sys_sendmsg+0x2a5/0x360
[  202.426033][ T6407]  __x64_sys_sendmsg+0x1bd/0x2a0
[  202.427380][ T6407]  do_syscall_64+0x15f/0xf80
[  202.428721][ T6407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.430459][ T6407] 
[  202.431174][ T6407] Second to last potentially related work creation:
[  202.433065][ T6407]  kasan_save_stack+0x3e/0x60
[  202.434608][ T6407]  kasan_record_aux_stack+0xbd/0xd0
[  202.436115][ T6407]  insert_work+0x3d/0x330
[  202.437358][ T6407]  __queue_work+0xccf/0xfc0
[  202.438630][ T6407]  queue_work_on+0x106/0x1d0
[  202.440070][ T6407]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  202.441883][ T6407]  udp_tunnel_push_rx_port+0x186/0x210
[  202.443785][ T6407]  vxlan_offload_rx_ports+0x129/0x1f0
[  202.445624][ T6407]  vxlan_netdevice_event+0x111/0x480
[  202.447459][ T6407]  notifier_call_chain+0x1ad/0x3d0
[  202.449198][ T6407]  call_netdevice_notifiers+0x90/0xd0
[  202.451071][ T6407]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[  202.453223][ T6407]  notifier_call_chain+0x1ad/0x3d0
[  202.454690][ T6407]  register_netdevice+0x18c9/0x1ec0
[  202.456215][ T6407]  nsim_create+0xbed/0x1160
[  202.457675][ T6407]  __nsim_dev_port_add+0x857/0xd30
[  202.459266][ T6407]  nsim_dev_port_add_all+0x37/0xf0
[  202.460848][ T6407]  nsim_dev_reload_up+0x45f/0x7c0
[  202.462409][ T6407]  devlink_reload+0x4f8/0x8c0
[  202.463925][ T6407]  devlink_nl_reload_doit+0xaaa/0xc80
[  202.465521][ T6407]  genl_family_rcv_msg_doit+0x22a/0x330
[  202.467154][ T6407]  genl_rcv_msg+0x61c/0x7a0
[  202.468532][ T6407]  netlink_rcv_skb+0x232/0x4b0
[  202.470036][ T6407]  genl_rcv+0x28/0x40
[  202.471267][ T6407]  netlink_unicast+0x75c/0x8e0
[  202.472715][ T6407]  netlink_sendmsg+0x813/0xb40
[  202.474262][ T6407]  ____sys_sendmsg+0x972/0x9f0
[  202.475763][ T6407]  ___sys_sendmsg+0x2a5/0x360
[  202.477171][ T6407]  __x64_sys_sendmsg+0x1bd/0x2a0
[  202.478669][ T6407]  do_syscall_64+0x15f/0xf80
[  202.480027][ T6407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.481728][ T6407] 
[  202.482441][ T6407] The buggy address belongs to the object at ffff8881a7fba000
[  202.482441][ T6407]  which belongs to the cache kmalloc-256 of size 256
[  202.486557][ T6407] The buggy address is located 168 bytes inside of
[  202.486557][ T6407]  freed 256-byte region [ffff8881a7fba000, ffff8881a7fba100)
[  202.490484][ T6407] 
[  202.491196][ T6407] The buggy address belongs to the physical page:
[  202.493249][ T6407] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a7fba
[  202.495842][ T6407] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  202.498428][ T6407] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  202.500711][ T6407] page_type: f5(slab)
[  202.501936][ T6407] raw: 057ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[  202.504648][ T6407] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  202.507193][ T6407] head: 057ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[  202.509807][ T6407] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  202.512463][ T6407] head: 057ff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  202.515083][ T6407] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  202.517639][ T6407] page dumped because: kasan: bad access detected
[  202.519622][ T6407] page_owner tracks the page as allocated
[  202.521466][ T6407] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7806, tgid 7796 (syz.0.483), ts 125403672544, free_ts 108242418539
[  202.527571][ T6407]  post_alloc_hook+0x231/0x280
[  202.529014][ T6407]  get_page_from_freelist+0x24ba/0x2540
[  202.530719][ T6407]  __alloc_frozen_pages_noprof+0x18d/0x380
[  202.532506][ T6407]  allocate_slab+0x77/0x660
[  202.533961][ T6407]  refill_objects+0x339/0x3d0
[  202.535378][ T6407]  __pcs_replace_empty_main+0x321/0x720
[  202.537122][ T6407]  __kmalloc_noprof+0x474/0x760
[  202.538572][ T6407]  hash_ip4_resize+0xa70/0x1a20
[  202.540014][ T6407]  call_ad+0x463/0xb60
[  202.541350][ T6407]  ip_set_ad+0x824/0x9d0
[  202.542615][ T6407]  nfnetlink_rcv_msg+0xc03/0x12c0
[  202.544130][ T6407]  netlink_rcv_skb+0x232/0x4b0
[  202.545544][ T6407]  nfnetlink_rcv+0x2c0/0x27b0
[  202.547019][ T6407]  netlink_unicast+0x75c/0x8e0
[  202.548434][ T6407]  netlink_sendmsg+0x813/0xb40
[  202.549855][ T6407]  ____sys_sendmsg+0x972/0x9f0
[  202.551306][ T6407] page last free pid 6860 tgid 6860 stack trace:
[  202.553189][ T6407]  __free_frozen_pages+0xbc7/0xd30
[  202.554712][ T6407]  __slab_free+0x274/0x2c0
[  202.556012][ T6407]  qlist_free_all+0x99/0x100
[  202.557473][ T6407]  kasan_quarantine_reduce+0x148/0x160
[  202.559154][ T6407]  __kasan_slab_alloc+0x22/0x80
[  202.560567][ T6407]  kmem_cache_alloc_noprof+0x2bc/0x650
[  202.562100][ T6407]  do_getname+0x2e/0x250
[  202.563303][ T6407]  do_sys_openat2+0xca/0x200
[  202.564644][ T6407]  __x64_sys_openat+0x138/0x170
[  202.566087][ T6407]  do_syscall_64+0x15f/0xf80
[  202.567415][ T6407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.569125][ T6407] 
[  202.569810][ T6407] Memory state around the buggy address:
[  202.571434][ T6407]  ffff8881a7fb9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  202.573725][ T6407]  ffff8881a7fba000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.576080][ T6407] >ffff8881a7fba080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  202.578477][ T6407]                                   ^
[  202.580029][ T6407]  ffff8881a7fba100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  202.582348][ T6407]  ffff8881a7fba180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  202.584630][ T6407] ==================================================================
[  202.592739][ T6407] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  202.594881][ T6407] CPU: 1 UID: 0 PID: 6407 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  202.597608][ T6407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.600469][ T6407] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  202.602720][ T6407] Call Trace:
[  202.603700][ T6407]  <TASK>
[  202.604570][ T6407]  vpanic+0x56c/0xa60
[  202.605750][ T6407]  ? __pfx_vpanic+0x10/0x10
[  202.607122][ T6407]  panic+0xc5/0xd0
[  202.608243][ T6407]  ? __pfx_panic+0x10/0x10
[  202.609547][ T6407]  ? preempt_schedule_thunk+0x16/0x30
[  202.611114][ T6407]  ? __mutex_lock+0x15a/0x1550
[  202.612501][ T6407]  ? preempt_schedule_thunk+0x16/0x30
[  202.614083][ T6407]  ? __mutex_lock+0x15a/0x1550
[  202.615474][ T6407]  check_panic_on_warn+0x89/0xb0
[  202.616952][ T6407]  ? __mutex_lock+0x15a/0x1550
[  202.618354][ T6407]  end_report+0x73/0x170
[  202.619601][ T6407]  ? __mutex_lock+0x15a/0x1550
[  202.621179][ T6407]  kasan_report+0x128/0x150
[  202.622738][ T6407]  ? __mutex_lock+0x15a/0x1550
[  202.624082][ T6407]  __mutex_lock+0x15a/0x1550
[  202.625375][ T6407]  ? __lock_acquire+0x6b5/0x2cf0
[  202.626805][ T6407]  ? look_up_lock_class+0x57/0x110
[  202.628297][ T6407]  ? __mutex_lock+0x608/0x1550
[  202.629687][ T6407]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[  202.631546][ T6407]  ? __pfx___mutex_lock+0x10/0x10
[  202.633043][ T6407]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  202.634607][ T6407]  ? process_scheduled_works+0xa70/0x1860
[  202.636272][ T6407]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[  202.638051][ T6407]  ? process_scheduled_works+0xa70/0x1860
[  202.639677][ T6407]  ? process_scheduled_works+0xa70/0x1860
[  202.641328][ T6407]  process_scheduled_works+0xb5d/0x1860
[  202.642942][ T6407]  ? __pfx_process_scheduled_works+0x10/0x10
[  202.644675][ T6407]  ? assign_work+0x3d5/0x5e0
[  202.646040][ T6407]  worker_thread+0xa53/0xfc0
[  202.647390][ T6407]  kthread+0x388/0x470
[  202.648572][ T6407]  ? __pfx_worker_thread+0x10/0x10
[  202.650064][ T6407]  ? __pfx_kthread+0x10/0x10
[  202.651405][ T6407]  ret_from_fork+0x514/0xb70
[  202.652737][ T6407]  ? __pfx_ret_from_fork+0x10/0x10
[  202.654208][ T6407]  ? __switch_to+0xc79/0x1410
[  202.655573][ T6407]  ? __pfx_kthread+0x10/0x10
[  202.656948][ T6407]  ret_from_fork_asm+0x1a/0x30
[  202.658355][ T6407]  </TASK>
[  202.659912][ T6407] Kernel Offset: disabled
[  202.661189][ T6407] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:32:55  Registers:
info registers vcpu 0

CPU#0
RAX=ffff88823b400000 RBX=0000000000000d01 RCX=0000000000984920 RDX=00000000f3aaf9f0
RSI=0000000000000001 RDI=000000006fbad58f RBP=0000000042998492 RSP=ffffc9000779fa08
R8 =0000000016c67524 R9 =00000000dcaa1bb2 R10=000000000000000b R11=ffffffff81b0e910
R12=ffff88823bd84920 R13=0000000000000d40 R14=ffffc9000779fa60 R15=ffff888170080b40
RIP=ffffffff84ee7ad6 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8aaed2b6c0 ffffffff 00c00000
GS =0000 ffff88818dc8d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=0000000113d3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=00007f8aadfed5e8 00007f8aadfed618 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f8aadfed5d0 00007f8aadfed610
XMM06=00007f8aadfed5f8 00007f8aadfed5c8 XMM07=00007f8aadfed600 00007f8aadfed5e0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000484f250
R8 =ffff888109a68237 R9 =1ffff1102134d046 R10=dffffc0000000000 R11=ffffffff8544c610
R12=dffffc0000000000 R13=ffffffff9a4899a4 R14=ffffffff9a7a2880 R15=0000000000000000
RIP=ffffffff8544c68c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a928d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=0000000195c38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2d25dfdbfe0070bd 2900010015000000
XMM02=00007fbfc51ed5e8 00007fbfc51ed618 XMM03=00007fbfc51ed600 00007fbfc51ed5e0
XMM04=00007fbfc5d4d020 00007fbfc51ed5c0 XMM05=00007fbfc51ed5d0 00007fbfc51ed610
XMM06=00007fbfc51ed5f8 00007fbfc51ed5c8 XMM07=00007fbfc51ed600 00007fbfc51ed5e0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
