last executing test programs:

2m10.320265097s ago: executing program 1 (id=129):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000100))

2m9.411125882s ago: executing program 1 (id=143):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x1, 0x1, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0x0, 0x3, 0xfffffff9, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8000, 0x700, 0x6, 0x2}})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@const={0x2, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x2e, 0x5f, 0x0, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000840)=""/32, 0x2c, 0x20, 0x0, 0x0, 0x10000}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r5, 0x4}, 0x38)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@tail_call]}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000680)=""/185, 0x41100, 0x4a, '\x00', r3, 0x25, r4, 0x8, &(0x7f00000008c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r5]}, 0x94)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000))
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000a40), r1)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', <r9=>r3, 0x4, 0x10, 0x0, 0xf412, 0x10, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x80, 0x6, 0x6}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001140)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f0000000c40)={0x4b4, r7, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r3}, {0x18c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xd2, 0x9, 0x0, 0xa6}, {0x7800, 0x0, 0x4f, 0x1}, {0xff, 0x0, 0x9, 0x5}, {0xa, 0x8, 0x5}, {0x7, 0x5, 0x1, 0x42}, {0x8001, 0xc, 0xf4, 0x1f8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff88a}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2218}}, {0x8, 0x6, r3}}}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40040c0)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3}]}}}]}, 0x44}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r10, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r12 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x35, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x38, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r13, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x3}, 0xe)
r14 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r14, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
sendmmsg$inet6(r14, &(0x7f0000000040)=[{{&(0x7f0000001640)={0xa, 0x4e23, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000001480)=[{&(0x7f00000000c0)="9c435a7de4c0b544ffeb", 0xa}, {&(0x7f0000000100)="9bdf90e8259e5cd7c108ab78ac581dc823d1545f8230738aaa38c7b4af9eb7eff915e610300618e050bf27e0b4642d9a7b39fc5ea3f99d0e70526d42a9e345084c78c927779ac0dfe86549b28ee5d06ebfe6f44fa358f0fdfdada700f5d0f56c567be39c546adbaa7373f422da77bbad697ac3cbc56554eb5c27", 0x7a}, {&(0x7f0000000180)="7836015cf9559fef97d2c009e9f6b08a287bbf3c4fbe", 0x16}, {&(0x7f00000001c0)="d61f4e6ff153a849f3c9c8b505b7dcd95855e4d9db16edb723dd605b7c4a410f83ba81d992e4cd9bec5d3f9bc886e892c6a6cbbd919b70f64080308b2249f4bfe23f5151334f98e50332e7bcf2e3e4df61", 0x51}, {&(0x7f00000013c0)="0daa8b52dc204c489317199125ca41ff0808cec34c50b3933537323129f2c6bfab816f9fca0c44a5a78dc2a9ca66b0fdd74a1e51d4911c86752773fa0d38f85855a3c2ba8948887e1a81277f", 0x4c}, {&(0x7f00000002c0)="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", 0x34a}], 0x6}}], 0x1, 0x4001c00)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x84, {0x0, 0x0, 0x0, r15, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r15}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

2m8.98111458s ago: executing program 1 (id=149):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2100, {0x3, 0x1, 0x2}}]}}, 0x0, 0x32, 0x0, 0x8, 0xdd6}, 0x28)
unshare(0x22020400)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r0) (async)
close(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3802000023000900fffffffffddbdf2502000000240201"], 0x238}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050015001300060000001240000000000500050002000000050001000600000012000300686173683a6e65742c706f7274000000"], 0x60}}, 0x40000010)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x2, @void}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8054}, 0x4a804)

2m8.881070596s ago: executing program 1 (id=151):
r0 = socket(0x2, 0x3, 0xff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x4000000)
r2 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1f}, 0x0)
sendmmsg$inet(r0, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a897fb45a74a", 0x2d}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}], 0x2}}], 0x2, 0x488c4)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x8000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000908000340000000f5080002400000000c0900010073797a30"], 0xd4}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000119ac9560183432742500000000", @ANYRES32=r5, @ANYBLOB="0804000000000000"], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040)

2m8.658198191s ago: executing program 1 (id=154):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100039042bbd5a002500000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c00128008000100677265002000028008001400020000000800040004000000060010004e2200000400120008000400000800"], 0x54}}, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={<r4=>0x0, 0x8, 0xb, 0x0, 0xfff8, 0xf732, 0x0, 0x9, {0x0, @in={{0x2, 0x4e21, @multicast2}}, 0xff, 0x3, 0x3, 0x7, 0x80000000}}, &(0x7f0000000040)=0xb0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r4, 0xff03, 0x20, 0xffff, 0x6}, &(0x7f00000001c0)=0x18)

2m8.577667466s ago: executing program 1 (id=156):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x3d, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, 0x0, 0x0, 0x2000000022, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000340)=0x2004, 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x3c}}, 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, r2, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x1000, 0x1}}, 0x20)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0)
close(0x3)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000540))
socket$inet6(0xa, 0x2, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)

2m8.491215912s ago: executing program 32 (id=156):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x3d, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
r3 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r3, 0x0, 0x0, 0x2000000022, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000340)=0x2004, 0x4)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x3c, r7, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x3c}}, 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, r2, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x1000, 0x1}}, 0x20)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0)
close(0x3)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000540))
socket$inet6(0xa, 0x2, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)

1.299502127s ago: executing program 0 (id=1800):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$ax25(0x3, 0x6, 0xc4)
socket$xdp(0x2c, 0x3, 0x0) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'gre0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x58}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.29924186s ago: executing program 0 (id=1801):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r1 = socket(0x10, 0x803, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff1, 0x1}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x45, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.169776161s ago: executing program 0 (id=1802):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$rose(r0, &(0x7f0000000040)=@full={0xb, @remote, @default, 0x0, [@default, @netrom, @null, @default, @rose, @netrom]}, &(0x7f0000000080)=0x40, 0x800)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc3})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000140)=0xc)
ioctl$TUNSETGROUP(r1, 0x400454ce, r4)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='hsr0\x00', 0x10)
r6 = socket$netlink(0x10, 0x3, 0x8)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={<r7=>0x0, 0x1, 0x5, 0xfffffffd, 0x3, 0xfff}, &(0x7f0000000280)=0x14)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x80, @remote, 0x80000001}, 0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000300))
ioctl$FIONCLEX(r5, 0x5450)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r3, &(0x7f0000002a40)=[{{&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000400)=""/84, 0x54}], 0x2, &(0x7f00000004c0)=""/4096, 0x1000}, 0x401}, {{&(0x7f00000014c0)=@xdp, 0x80, &(0x7f0000002540)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1, &(0x7f0000002580)=""/248, 0xf8}, 0x4}, {{&(0x7f0000002680)=@in, 0x80, &(0x7f0000002780)=[{&(0x7f0000002700)=""/122, 0x7a}], 0x1, &(0x7f00000027c0)=""/214, 0xd6}, 0x56453447}, {{&(0x7f00000028c0)=@vsock, 0x80, &(0x7f0000002980)=[{&(0x7f0000002940)=""/8, 0x8}], 0x1, &(0x7f00000029c0)=""/77, 0x4d}, 0x6fd}], 0x4, 0x100, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002b40), 0x20, 0x0)
ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000002b80)=0x7)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000002bc0)={0x1, 0x5})
getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f0000002c00), &(0x7f0000002c40)=0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000002c80)=0x3, 0x4)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002cc0), &(0x7f0000002d00)=0xc)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002d40)=0x3, 0x4)
sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x33}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x30}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x50)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000002e80)=0x80000001)
getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000002ec0)=@assoc_id=r7, &(0x7f0000002f00)=0x4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r6)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000003080)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)={0x44, r9, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x56}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000030c0)=0x7, 0x4)

829.307569ms ago: executing program 2 (id=1803):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380), 0x4)
setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)
r2 = socket$kcm(0x2, 0x0, 0x2)
socket$rds(0x15, 0x5, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})

826.596718ms ago: executing program 3 (id=1804):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40000000}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
getpid()
r2 = socket(0x1, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x840)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, '.\x00'}, 0x6e, 0x0}}], 0x1, 0x4)
recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendto$unix(r5, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
getpeername$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @empty}, &(0x7f00000004c0)=0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000007ec796bcae3b5edd4f6668b433d2acce9c494144f511a8d1408f3c16fe275c0f0517a57b641839b44ad74b4e05fbc8bc2137ca5b4452d58cd25c91e63a6b6399c1df6c3c4a31c3d75b5a2697a461987ca7572083c29d1d295ca0eb4f", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f00000002c0))
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0800000000000000744055b1660dd71313b4a3901548c4ee4f7dc418c1984a830cca82b1b02a73a50aedbfc61f1bb76e6df6f8757b6ecf70dc54c8c56a949047ea43d581706de5ea6a67b44f0073b98f05e6b83e4b85581cd10ce026b0712dbe8a66c84a3bf7da125223f51b8cb08922d1e0c6cbdbf7c05c9b06b997db6698bd62d6ac3df2c75589f00ad0571c9607991c4c570ecbcbd6cd21d4f4e8141b2c71", @ANYRES32=0x0, @ANYBLOB="0008000007500500300012800b00010062726964676500002000028005001700010000000c00220006000000000000000800040081000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r10, @ANYBLOB="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"], 0x4c}}, 0x4881)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f0000000040)='%pB    \x00'}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000389212956ca608000c0000000c000000020e00000000000000030006"], 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10)

738.034688ms ago: executing program 2 (id=1805):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000f40f005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d0001000000080029006edc0000"], 0x38}}, 0x0)

733.724449ms ago: executing program 3 (id=1806):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendfile(r1, r1, 0x0, 0x8)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]})
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xba, 0x1, 0x8}]})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x200004c1}, 0x0)

732.787497ms ago: executing program 2 (id=1807):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000020603000000000000c25401aeea000005000100070000000900020073797a300000000014000780080012401b000000080008400005000400000000000d000300686173683a6d616300"/88], 0x5c}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)

630.10217ms ago: executing program 3 (id=1808):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x4020000, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0xd257]}})
mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x10, r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0xa, 0xc2)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x8}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0xcc}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x1f, 0x1, 0x4cc7c1b4)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

629.203381ms ago: executing program 2 (id=1809):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000032aad89c6c96db788c30cbcd0000000000000000a2070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000000001e6d000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback, r5, 0x2f}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, <r8=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="2f0000002820000004000000", @ANYRES32=r8, @ANYBLOB="3bb7e7617c9e2efd4f7f94df6e716718f6d6c48dde68a4dd87bfe2e993f88b75ae84bfcb645823a32c07a3a152bf51884884164daae0fce1039a2d1aa705fd7f2bb3e3e7f2a9dea9d6a8", @ANYRES64=0x0], 0x20)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff03000008000900010000f308000700030000001400"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080013405f0017e505000500020000000500010006000000"], 0x54}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="ceaaa581b74be1bb0b4eb259da1e549ff3b844"], 0x44}}, 0x4000050)
r10 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r10, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
r11 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r11, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r11, 0x8)
r12 = accept4(r11, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x9}, &(0x7f0000000380)=0x8)
sendmsg$kcm(r10, &(0x7f0000000480)={&(0x7f0000000640)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000007c0)="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", 0x306}, {&(0x7f0000002b40)="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", 0x2af}], 0x2}, 0x8400)

507.727725ms ago: executing program 2 (id=1810):
listen(0xffffffffffffffff, 0x400004)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r2, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000200)=0x1, &(0x7f0000000380)=0x4)
shutdown(r2, 0x3)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', <r4=>0x0, 0x8000, 0x50, 0xfffffffc, 0x3, {{0xe, 0x4, 0x3, 0x4, 0x38, 0x64, 0x0, 0xa6, 0x4, 0x0, @multicast2, @private=0xa010102, {[@cipso={0x86, 0x20, 0x3, [{0x2, 0xd, "eaedfcff692ed122de0b59"}, {0x2, 0xd, "3640faf6cbc68c5532956a"}]}, @ra={0x94, 0x4}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@ipv6_deladdr={0xa4, 0x15, 0x10, 0x70bd27, 0x25dfdbfe, {0xa, 0x78, 0x20, 0xd61abc0e6fe7b0e8, r4}, [@IFA_FLAGS={0x8, 0x8, 0x86}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x198}, @IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x84}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x8001, 0x3, 0xc12}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x0)

505.333216ms ago: executing program 3 (id=1811):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4005000}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0)
syz_emit_ethernet(0x176, &(0x7f0000002a40)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x168, 0x68, 0x0, 0x5, 0x84, 0x0, @multicast2, @remote}, "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"}}}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x1c)
sendmmsg$inet6(r0, &(0x7f0000001780)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0x7, @private2, 0xb46}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000480)="79fb1cf321741e86e729f4e4ba46481b5dd3998cf23cd5f47265f8eafd7a9e81c4005545d0b31f09917e8a5cd1481bf740bbd691e69d8da046874f1fc1ac21a0ddb84801fb3b02475c20b11ffcc7a8eae385b88fa6cad0091da4c84f38e6d6ff77c759a9e4387db72b309161260204c6e2600c80edae76b92a4254e45431c0c959685c0c67a234e74926f4154013866853b107d4d447fd9116b2a9c397eafec54e9c6b430d7df2e25883cff1d23f892ccb661ab95768123475a488449f00831af33deda938d341a9d2877b501da745a15091f763ad2adca757973b233798c4d579c4e0f606", 0xe5}, {&(0x7f00000005c0)="1ca5cbc4068980b58c681fd7fb32974a332e616e7e1176601ccf31983c4d3bab7e0faba3a6ffbe6e8838bd40b86e66b1f0148174148cd4555ce7d88e5caf8b7d55f2cec366592b20b8461efd4686885683b3999209528fb5a51d64f00e9ecb1de0cd763d8ed7eb48f0aabb5ec4a888b45695750719b7fbf9de9fe51ce207f48192e8c959aea459c589a901b15e8d4b30efbad2627e86a8242b6b04f2cc81e777bce22505ff19ce3a23185b389e09e1cef5851366cc83e80ce4f2e91bc59af890a0a32d965340480ff1b6a9ecb56fcd58594dd7b9e7ee4909b0bc097ec858b124280591279945991ca5549b79610df99e4581b4", 0xf3}, {&(0x7f00000006c0)="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", 0x1000}], 0x3, &(0x7f0000001700)=ANY=[@ANYBLOB="380000000000000029000000360000000c03000000000000c2040000000304030100010001020000010a00"/56], 0x38}}], 0x1, 0x24004802)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4$alg(r1, 0x0, 0x0, 0x800)
bind$alg(r1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000017c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00", @ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES64=r2, @ANYRES32=r0, @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001880)={&(0x7f00000029c0)=ANY=[@ANYBLOB="280000002392faa82cbd7000fddbdf2508004a0001000200080003000100000008004b0013000000edac9632118a01004f8eae2df5566446a4623e5e89b496e14eb29d599f7cd01f1ba36e80ea75ea55d714294cd5738f5b6ba89e5ccf1c5b8387cef33c470f95"], 0x28}, 0x1, 0x0, 0x0, 0x24000880}, 0x50)
sendmmsg(r3, &(0x7f0000002980), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x4f)
r5 = accept4$rose(0xffffffffffffffff, &(0x7f0000001900)=@full={0xb, @dev, @bcast, 0x0, [@remote, @rose, @default, @default, @rose, @rose]}, &(0x7f0000001940)=0x40, 0x800)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001980)={{r5}, "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"})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000002980)={0x0, 0x0, 0x3, 0x0, 0x9}, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

503.692381ms ago: executing program 2 (id=1812):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) (async)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}]}, 0x210)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000f8ac00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000f8ac00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
pipe(0x0) (async)
pipe(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(0x4) (async)
close(0x4)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80, 0x6)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xfeffffff}]}, 0x1c}}, 0x800) (async)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@private=0xfeffffff}]}, 0x1c}}, 0x800)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
write(r4, &(0x7f0000003300)="ac", 0x1)
write(r2, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
r7 = socket$netlink(0x10, 0x3, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)

420.197418ms ago: executing program 3 (id=1813):
r0 = socket$kcm(0x10, 0x4, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xe7, 0xfb, &(0x7f00000001c0)="2273ae5e0879b4087d2444f71e8234d591c97d8a831108ec4a6573637593c022520abfb55405d1b3a7282e0c214fc5f3b37d9741ea046a78fd9cb62206dde4a674407eb430097e666ea03bcf0fda67f32279f0ef3cf362ab972404507d8567f18400338da8375f257f05a4db8fdd068069d0d608f42b428e2825c436d9d921fb891018cb3424313d508c4efdf1110d116b4addf1274be5164ac0291dfcabffe4fefcb23da24871e231444bc2f19bc07971bde3d147429891e7fa296d64eef5aaa53551e2d7861756f2ca7a108c33b3b0ff8d632294ebb2b28c6b6db47d0e5c29d421e8abc2b7c3", &(0x7f00000002c0)=""/251, 0x3, 0x0, 0x9a, 0x3d, &(0x7f00000003c0)="595b2519ab2c58e116063a4b49e5bbc1104dfd293b19d0e96203b8e8f2fc9066f67a8d1b4863ec9c554cfc89a94271baab3df39c52c3a3e9af41b20fc930b8a188103c0b83761d72dd9056545d621377bed16a0c75e3f4e7e68bad19c086110efa003563799f368ac169b12baadaea9d21128aeeb1604f78824970e53f8393c12e33697136e0b0ca7d7b11781bd12bf70d1d35f4105428013489", &(0x7f0000000480)="0290c99190ae799fdc1dfb1071230f514facfd7b3cd3f022fe146bc930780e35dd3cfba7c285a75c1880594fa85b84008705c459cefa30edc2cd9b4688", 0x0, 0x0, 0x10}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x40044084)

419.721457ms ago: executing program 3 (id=1814):
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0x0, 0x1}})
r2 = socket(0x1d, 0x2, 0x6)
bind$inet(r2, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @mcast2, 0x5}, 0x1c)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000600))
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000001d40)=[{{0x0, 0x5a, 0x0}}], 0x40001ec, 0x102, 0x0)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)='X\x00\x00\x00', 0x4}], 0x1)

300.180147ms ago: executing program 0 (id=1815):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x5)
setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000140)="2b3c820735a27d4b0881df236e3cc7b0f7a05d8587c8951a81be4e181aa7ac14f865001dbe29364065110d", 0x2b)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000580)=[@in6={0xa, 0x4e20, 0xff7c, @remote, 0x2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x100a, @empty}, @in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e21, 0xbe5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}], 0x90)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'veth1_to_bridge\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xdd86, &(0x7f0000000080)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x3, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000980)={0x90, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0x17, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}]}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x1}]}, 0x90}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000000906010200000000e49daf022084fa239fe91ef022000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a393c4f7be86c2aefc15b848c8c3f2d20fa5e4474"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x34, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="321fd48eb7d0985d49b1933bc1862ae5a4e3cbb333d6130b4143c6e05fa567243c8f91b86ef4de92a66c4a026d5dc56f6c985ad1c4e4a5294a186911722bf6d19ad669f6e5f70f0b32d2a5046bb889d9e0122aaec3e7fac4e52626385142efff5beda9e17b58623d197c073105dde9c83ec89a1df4614efefb0757ff19b80ee27770a590f570d2de26bf90d88384c6146193fbd1bd239a40e7ad84932a1276f84d5d94cdd0c75f4531e935bf3582bfa355ba5ed510e57ba8f44c12c70952fc3d9264f3311253d55d199f7501ac0eadf2cf87383eb428757c06078006", 0xdc, 0xc, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @mcast1, 0x80}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000001800000000000004a00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r11, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r2)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30f1ce7de989ca4a844cd35f4c71432ed7ed17ad5007e5dfd677e5b4dd2ddbefb288b411e56a10dfe813a57da0b3ede329ea07a44e082f4a6d263e090075566c0bd83f03c93d73107057944a888b4fa974", @ANYRES16=r12, @ANYBLOB="010027bd7000fcdbdf252500000005002a00070000000a0001007770616e3000000005002b0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x4011}, 0xc0c0)

220.01704ms ago: executing program 0 (id=1816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x20, 0x9, "f7979a9a53bd42c9f0"}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0)
socket(0x2, 0x3, 0x100000001)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="9200000000000000000000001ec5264831528129509d047545aee7b4fdc24503f090e778854bda8d1768056b123d6b155daa6b0222080f32b4ddf18400a4b86ba2e9e1b1d3261ed7908de5d783e99ce82fd93041671361e22c7fff850d9041c37ac13a392fcde06fc698", 0x6a)
accept4(r6, 0x0, 0x0, 0x80800)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r7=>0x0})
r8 = gettid()
r9 = socket(0x18, 0x802, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000304fdfffffffedbdf2500007400", @ANYRES32=r7, @ANYBLOB="241c03000750050008001300", @ANYRES32=r8, @ANYBLOB="080020007be50035821dbba8707800d3f2d3163f0e22e3fbdf9c2510c291f12db1506affdc89a46c17a9570c994541eb9d256d8357ca59ffd6a6fdb28180d6a50fa95c8b761d58d3"], 0x30}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40440d4)

0s ago: executing program 0 (id=1817):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000000000000000000000000000900020073797a32000000000500040000000000050001"], 0x64}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r2=>0x0})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

kernel console output (not intermixed with test programs):

device team_slave_0 removed
[  125.116501][ T9026] team0: Port device team_slave_1 removed
[  125.118512][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.122937][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.127555][ T9026] team0: Port device geneve0 removed
[  125.131160][ T9026] bond2: (slave ip6gretap1): Releasing active interface
[  125.138673][ T9026] bond3: (slave ip6gretap2): Releasing active interface
[  125.141193][ T9026] bond3: (slave ip6gretap2): the permanent HWaddr of slave - ae:0f:d6:2f:be:3d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  125.147760][ T9026] ip6gretap2: left promiscuous mode
[  125.152753][ T9026] bond3: (slave veth3): Releasing active interface
[  125.158040][ T9026] bond6: (slave bridge1): Releasing backup interface
[  125.162710][ T9026] bond0: (slave vcan1): Releasing backup interface
[  125.167176][ T9026] batadv2: left allmulticast mode
[  125.169321][ T9026] batadv2: left promiscuous mode
[  125.171590][ T9026] bridge0: port 3(batadv2) entered disabled state
[  125.177999][ T9026] bond11: (slave bridge4): Releasing backup interface
[  125.183313][ T9026] bond13: (slave geneve4): Releasing active interface
[  125.188546][ T9026] batadv3: left allmulticast mode
[  125.190644][ T9026] batadv3: left promiscuous mode
[  125.192868][ T9026] bridge0: port 4(batadv3) entered disabled state
[  125.199569][ T9030] vlan0: entered promiscuous mode
[  125.249556][ T9032] bond0: (slave gre0): Error: Device type is different from other slaves
[  125.253714][ T9032] netlink: 'syz.0.744': attribute type 39 has an invalid length.
[  125.286875][ T9037] netlink: 'syz.0.745': attribute type 4 has an invalid length.
[  125.336560][ T9042] bond9: entered promiscuous mode
[  125.338355][ T9042] 8021q: adding VLAN 0 to HW filter on device bond9
[  125.378530][ T9045] vxcan1 speed is unknown, defaulting to 1000
[  125.490341][ T9048] xt_CT: No such helper "netbios-ns"
[  125.624348][ T9057] netlink: 'syz.0.750': attribute type 13 has an invalid length.
[  125.635907][ T9060] pim6reg1: entered promiscuous mode
[  125.638235][ T9060] pim6reg1: entered allmulticast mode
[  125.750524][ T9065] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  125.901066][ T9069] vxcan1 speed is unknown, defaulting to 1000
[  125.984790][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'.
[  126.020400][ T9083] bond17: (slave vxcan1): The slave device specified does not support setting the MAC address
[  126.024362][ T9083] bond17: (slave vxcan1): Error -95 calling set_mac_address
[  126.065663][ T9085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.755'.
[  126.156987][ T9088] vxcan1 speed is unknown, defaulting to 1000
[  126.333587][ T9104] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  126.472883][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.761'.
[  126.777096][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'.
[  126.976649][ T9141] vxcan1 speed is unknown, defaulting to 1000
[  127.018614][ T9144] netlink: 277 bytes leftover after parsing attributes in process `syz.2.768'.
[  127.023520][ T9144] veth0: entered promiscuous mode
[  127.157928][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'.
[  127.191736][ T9144] veth0: left promiscuous mode
[  127.264522][ T9154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.280368][ T9154] syzkaller0: entered promiscuous mode
[  127.282420][ T9154] syzkaller0: entered allmulticast mode
[  127.308523][ T9154] tipc: Resetting bearer <eth:syzkaller0>
[  127.316960][ T9153] tipc: Resetting bearer <eth:syzkaller0>
[  127.336418][ T9159] netlink: 'syz.0.772': attribute type 1 has an invalid length.
[  127.339976][ T9153] tipc: Disabling bearer <eth:syzkaller0>
[  127.485571][ T9159] 8021q: adding VLAN 0 to HW filter on device bond17
[  127.537443][ T9164] ip6gre0: entered allmulticast mode
[  127.665246][ T9172] 8021q: adding VLAN 0 to HW filter on device bond18
[  127.703140][ T9170] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  127.726054][ T9176] vxcan1 speed is unknown, defaulting to 1000
[  127.972963][ T9187] netlink: 'syz.2.780': attribute type 1 has an invalid length.
[  128.078313][ T9189] pimreg3: entered allmulticast mode
[  128.180916][ T9200] bond18: option arp_validate: invalid value (18446744073491447809)
[  128.195706][ T9200] bond18 (unregistering): Released all slaves
[  128.221543][ T9205] netlink: 'syz.2.783': attribute type 13 has an invalid length.
[  128.292676][ T9205] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  128.329230][ T9208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.333172][ T9208] syzkaller0: entered promiscuous mode
[  128.335617][ T9208] syzkaller0: entered allmulticast mode
[  128.344243][ T9208] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  128.360793][ T9208] tipc: Resetting bearer <eth:syzkaller0>
[  128.365702][ T9207] tipc: Resetting bearer <eth:syzkaller0>
[  128.379922][ T9207] tipc: Disabling bearer <eth:syzkaller0>
[  128.447324][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  128.451802][ T9211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  128.522438][ T9226] netlink: 'syz.2.788': attribute type 1 has an invalid length.
[  128.563625][ T9226] bond18: (slave geneve0): making interface the new active one
[  128.568431][ T9226] bond18: (slave geneve0): Enslaving as an active interface with an up link
[  128.571794][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  128.574861][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  128.583240][ T9226] 8021q: adding VLAN 0 to HW filter on device bond18
[  128.590252][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  128.593709][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  128.677461][ T9247] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  128.684325][ T9247] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  128.694234][ T9247] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  128.699489][ T9247] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  128.711223][ T9247] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  128.717686][ T9247] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  128.722662][ T9247] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  128.728373][ T9247] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  128.905724][ T9270] bond0: entered promiscuous mode
[  128.908034][ T9270] bond0: left promiscuous mode
[  128.957418][ T9266] netlink: 'syz.0.797': attribute type 1 has an invalid length.
[  129.228365][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.231192][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.234477][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.238159][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.331876][ T9293] bond0: (slave gre0): Error: Device type is different from other slaves
[  129.339912][ T9293] netlink: 'syz.0.804': attribute type 39 has an invalid length.
[  129.360716][ T9293] bond19: option arp_validate: invalid value (18446744073709551615)
[  129.365584][ T9293] bond19 (unregistering): Released all slaves
[  129.450961][ T9297] netlink: 'syz.3.805': attribute type 9 has an invalid length.
[  129.496960][ T9299] netlink: 'syz.0.806': attribute type 1 has an invalid length.
[  129.502362][ T9302] netlink: 'syz.3.807': attribute type 10 has an invalid length.
[  129.565975][ T9300] batman_adv: batadv0: Adding interface: dummy0
[  129.568402][ T9300] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  129.578214][ T9300] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  129.667352][ T9311] __nla_validate_parse: 20 callbacks suppressed
[  129.667371][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'.
[  129.673288][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'.
[  129.678414][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'.
[  129.681806][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'.
[  129.686278][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'.
[  129.690011][ T9311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.810'.
[  129.738283][ T9313] vxcan10: entered allmulticast mode
[  129.811140][ T9315] vlan0: left allmulticast mode
[  129.813267][ T9315] bond12: left allmulticast mode
[  129.964113][ T9329] bond0: (slave gre0): Error: Device type is different from other slaves
[  129.966921][ T9330] bond0: (slave gre0): Error: Device type is different from other slaves
[  129.967985][ T9331] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  129.989947][ T9331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.992856][ T9331] syzkaller0: entered promiscuous mode
[  129.996267][ T9331] syzkaller0: entered allmulticast mode
[  130.008647][ T9331] tipc: Resetting bearer <eth:syzkaller0>
[  130.012977][ T9328] tipc: Resetting bearer <eth:syzkaller0>
[  130.015485][ T9333] netlink: 32 bytes leftover after parsing attributes in process `syz.2.817'.
[  130.029815][ T9328] tipc: Disabling bearer <eth:syzkaller0>
[  130.039678][ T9333] netlink: 72 bytes leftover after parsing attributes in process `syz.2.817'.
[  130.130159][ T9336] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  130.133323][ T9336] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  130.185777][ T9346] Bluetooth: MGMT ver 1.23
[  130.200858][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'.
[  130.299434][ T9352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.303094][ T9352] syzkaller0: entered promiscuous mode
[  130.308310][ T9352] syzkaller0: entered allmulticast mode
[  130.316965][ T9352] tipc: Resetting bearer <eth:syzkaller0>
[  130.364848][ T9352] tipc: Disabling bearer <eth:syzkaller0>
[  130.403146][ T9359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.823'.
[  130.624383][ T9379] ׌s~: renamed from lo
[  130.720778][ T9391] vxcan1 speed is unknown, defaulting to 1000
[  130.748586][ T9394] validate_nla: 5 callbacks suppressed
[  130.748598][ T9394] netlink: 'syz.2.832': attribute type 1 has an invalid length.
[  130.753226][ T9394] netlink: 'syz.2.832': attribute type 1 has an invalid length.
[  130.755727][ T9394] netlink: 'syz.2.832': attribute type 1 has an invalid length.
[  130.758278][ T9394] netlink: 'syz.2.832': attribute type 1 has an invalid length.
[  130.760652][ T9394] netlink: 'syz.2.832': attribute type 1 has an invalid length.
[  130.826653][ T9395] vxcan1 speed is unknown, defaulting to 1000
[  130.918396][ T9403] bond19: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  130.923422][ T9403] bond19 (unregistering): Released all slaves
[  131.147872][ T9416] netlink: 'syz.2.837': attribute type 4 has an invalid length.
[  131.182386][ T9416] netlink: 'syz.2.837': attribute type 4 has an invalid length.
[  131.194484][ T9416] net_ratelimit: 4 callbacks suppressed
[  131.194495][ T9416] A link change request failed with some changes committed already. Interface ׌s~ may have been left with an inconsistent configuration, please check.
[  132.046083][ T9426] bond19 (unregistering): Released all slaves
[  132.251927][ T9433] netlink: 'syz.0.845': attribute type 1 has an invalid length.
[  132.281708][ T9437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.287217][ T9433] 8021q: adding VLAN 0 to HW filter on device bond19
[  132.299610][ T9433] 8021q: adding VLAN 0 to HW filter on device bond19
[  132.305332][ T9433] bond19: (slave geneve5): making interface the new active one
[  132.310832][ T9433] bond19: (slave geneve5): Enslaving as an active interface with an up link
[  132.315299][ T5681] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  132.317923][ T5681] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  132.320484][ T5681] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  132.322999][ T5681] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  132.353646][ T9437] tipc: Disabling bearer <eth:syzkaller0>
[  132.489241][ T9460] netlink: 'syz.0.847': attribute type 13 has an invalid length.
[  132.509244][ T9460] netlink: 'syz.0.847': attribute type 17 has an invalid length.
[  132.538364][ T9460] 8021q: adding VLAN 0 to HW filter on device team0
[  132.541211][ T9460] batman_adv: batadv0: Interface activated: dummy0
[  132.543683][ T9460] batadv0: mtu less than device minimum
[  132.546500][ T9460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.550646][ T9460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.554723][ T9460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.558749][ T9460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.562718][ T9460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.566638][ T9460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.570530][ T9460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.575523][ T9460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  132.672706][ T9474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.757493][ T9467] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR
[  132.789548][ T9469] vxcan1 speed is unknown, defaulting to 1000
[  133.844535][ T9521] vxcan1 speed is unknown, defaulting to 1000
[  133.939770][ T9529] Bluetooth: MGMT ver 1.23
[  134.354206][ T9553] vxcan7: entered allmulticast mode
[  134.653857][ T9567] 8021q: adding VLAN 0 to HW filter on device bond20
[  134.657728][ T9567] bond20: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  134.669624][ T9567] bond20: entered allmulticast mode
[  134.701248][ T9573] vlan0: entered promiscuous mode
[  134.720347][ T9575] bridge0: port 1(batadv5) entered blocking state
[  134.723231][ T9575] bridge0: port 1(batadv5) entered disabled state
[  134.733047][ T9575] batadv5: entered allmulticast mode
[  134.743680][ T9575] batadv5: entered promiscuous mode
[  134.817408][ T9573] vlan0: entered promiscuous mode
[  134.985698][ T9595] __nla_validate_parse: 76 callbacks suppressed
[  134.985709][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'.
[  134.990667][ T9595] netlink: 32 bytes leftover after parsing attributes in process `syz.3.880'.
[  134.995753][ T9597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.880'.
[  134.999306][ T9597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.880'.
[  135.026535][ T9599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.881'.
[  135.082429][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'.
[  135.112777][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'.
[  135.131588][ T9616] 8021q: adding VLAN 0 to HW filter on device bond19
[  135.140590][ T9616] bond19: (slave vlan1): Error -34 calling dev_set_mtu
[  135.153846][ T9617] vxcan1 speed is unknown, defaulting to 1000
[  135.175180][ T9616] netlink: 156 bytes leftover after parsing attributes in process `syz.2.886'.
[  135.196833][ T9625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'.
[  135.199691][ T9616] bond20: entered promiscuous mode
[  135.201841][ T9616] 8021q: adding VLAN 0 to HW filter on device bond20
[  135.204449][ T9625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.885'.
[  135.224119][ T8133] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled
[  135.227113][ T8133] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled
[  135.314955][ T9632] macvtap4: entered promiscuous mode
[  135.316710][ T9632] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  135.448286][ T9640] 8021q: adding VLAN 0 to HW filter on device bond21
[  135.462333][ T9644] bond10: entered promiscuous mode
[  135.464489][ T9644] 8021q: adding VLAN 0 to HW filter on device bond10
[  135.492282][ T9640] 8021q: adding VLAN 0 to HW filter on device bond21
[  135.495189][ T9640] bond21: (slave vxcan9): The slave device specified does not support setting the MAC address
[  135.498668][ T9640] bond21: (slave vxcan9): Error -95 calling set_mac_address
[  135.507380][ T9647] bond10: entered allmulticast mode
[  135.542137][ T9649] veth7: entered promiscuous mode
[  135.686018][ T9654] bond21: (slave bridge_slave_0): Device is not bonding slave
[  135.688848][ T9654] bond21: option active_slave: invalid value (bridge_slave_0)
[  135.695081][ T9654] bond21 (unregistering): Released all slaves
[  135.790506][ T9667] bond22: (slave vxcan9): The slave device specified does not support setting the MAC address
[  135.794449][ T9667] bond22: (slave vxcan9): Error -95 calling set_mac_address
[  136.112961][ T9699] vxcan1 speed is unknown, defaulting to 1000
[  136.122184][ T9702] validate_nla: 16 callbacks suppressed
[  136.122195][ T9702] netlink: 'syz.0.910': attribute type 3 has an invalid length.
[  136.128626][ T9701] netlink: 'syz.0.910': attribute type 1 has an invalid length.
[  136.224345][ T9708] netlink: 'syz.0.911': attribute type 4 has an invalid length.
[  136.262923][ T9705] netlink: 'syz.3.909': attribute type 17 has an invalid length.
[  136.270158][ T9705] net_ratelimit: 14 callbacks suppressed
[  136.270167][ T9705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.769807][ T9740] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  136.852195][ T9748] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  137.007170][ T9768] netlink: 'syz.2.920': attribute type 14 has an invalid length.
[  137.015974][ T5681] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.016049][ T9768] netlink: 'syz.2.920': attribute type 14 has an invalid length.
[  137.018567][ T5681] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.023791][ T5681] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.034180][ T5681] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.156756][ T9792] dvmrp1: left allmulticast mode
[  137.522601][ T9847] bond0: (slave gre0): Error: Device type is different from other slaves
[  137.539444][ T9847] netlink: 'syz.0.928': attribute type 39 has an invalid length.
[  137.597295][ T9850] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.600269][ T9850] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  137.641097][ T9850] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.644611][ T9850] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  137.667912][ T9850] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.671057][ T9850] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  137.701703][ T9864] bond23: option arp_validate: invalid value (18446744073491447809)
[  137.705845][ T9864] bond23 (unregistering): Released all slaves
[  137.729244][ T9850] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.732365][ T9850] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  137.756344][ T9864] netlink: 'syz.0.933': attribute type 13 has an invalid length.
[  137.777456][ T9864] batman_adv: batadv0: Interface deactivated: dummy0
[  137.792796][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.799313][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  137.804977][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.808375][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  137.812203][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.815707][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  137.819683][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  137.822552][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  137.831392][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.835721][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  137.843638][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.846545][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  137.855318][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.858364][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  137.869850][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.872626][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  138.099125][ T9887] pim6reg1: entered promiscuous mode
[  138.101278][ T9887] pim6reg1: entered allmulticast mode
[  138.762888][ T9902] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.766292][ T9902] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  138.883079][ T9910] bond23: invalid ARP target 0.0.0.0 specified for addition
[  138.885796][ T9910] bond23: option arp_ip_target: invalid value (0)
[  138.889205][ T9910] bond23 (unregistering): Released all slaves
[  139.095543][ T9918] vxcan1 speed is unknown, defaulting to 1000
[  139.242126][ T9922] netlink: 'syz.0.947': attribute type 4 has an invalid length.
[  139.245886][ T9923] netlink: 'syz.0.947': attribute type 4 has an invalid length.
[  139.355652][ T9931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.386706][ T9931] tipc: Disabling bearer <eth:syzkaller0>
[  139.494395][ T9939] 8021q: adding VLAN 0 to HW filter on device bond23
[  139.503301][ T9939] vlan2: entered promiscuous mode
[  139.505368][ T9939] bond23: entered promiscuous mode
[  139.507073][ T9939] vlan2: entered allmulticast mode
[  139.508805][ T9939] bond23: entered allmulticast mode
[  139.517678][ T9939] bond23: (slave gretap1): making interface the new active one
[  139.520058][ T9939] gretap1: entered promiscuous mode
[  139.521904][ T9939] gretap1: entered allmulticast mode
[  139.525719][ T9939] bond23: (slave gretap1): Enslaving as an active interface with an up link
[  139.694601][ T9960] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  139.749394][ T9971] 8021q: adding VLAN 0 to HW filter on device bond11
[  139.966651][ T9989] 8021q: adding VLAN 0 to HW filter on device bond24
[  139.986718][ T9987] bond24: (slave veth9): Enslaving as an active interface with a down link
[  140.012108][ T9996] vxcan1 speed is unknown, defaulting to 1000
[  140.058044][ T9998] __nla_validate_parse: 34 callbacks suppressed
[  140.058054][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.964'.
[  140.084662][ T9998] bond12: entered promiscuous mode
[  140.086911][ T9998] 8021q: adding VLAN 0 to HW filter on device bond12
[  140.129875][ T9998] 8021q: adding VLAN 0 to HW filter on device bond12
[  140.132488][ T9998] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address
[  140.138882][ T9998] bond12: (slave wireguard0): Error -95 calling set_mac_address
[  140.202870][T10008] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.208262][T10008] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  140.246652][T10010] vxcan1 speed is unknown, defaulting to 1000
[  140.281001][T10008] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.292017][T10008] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  140.396711][T10008] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.400488][T10008] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  140.457931][T10019] bond13: (slave geneve3): making interface the new active one
[  140.461737][T10019] bond13: (slave geneve3): Enslaving as an active interface with an up link
[  140.465413][   T12] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[  140.468710][   T12] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  140.474503][   T12] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  140.482193][   T12] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  140.491241][T10008] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  140.504319][T10008] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  140.588396][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.591181][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  140.597832][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.600746][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  140.700192][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.702595][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  140.737989][T10025] veth5: entered promiscuous mode
[  140.748034][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.751200][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  140.867548][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.972'.
[  140.923348][T10037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.973'.
[  140.926759][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'.
[  140.930605][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'.
[  140.986397][T10039] netlink: 44 bytes leftover after parsing attributes in process `syz.3.974'.
[  140.989190][T10039] netlink: 35 bytes leftover after parsing attributes in process `syz.3.974'.
[  140.991951][T10039] netlink: 35 bytes leftover after parsing attributes in process `syz.3.974'.
[  141.106772][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'.
[  141.149607][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'.
[  141.263789][T10057] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  141.286746][T10057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.496152][T10073] validate_nla: 9 callbacks suppressed
[  141.496167][T10073] netlink: 'syz.3.981': attribute type 2 has an invalid length.
[  141.554480][T10076] netlink: 'syz.0.982': attribute type 1 has an invalid length.
[  141.622550][T10079] pim6reg: entered allmulticast mode
[  141.637927][T10080] bond27: (slave vxcan9): The slave device specified does not support setting the MAC address
[  141.642813][T10080] bond27: (slave vxcan9): Error -95 calling set_mac_address
[  141.670894][   T40] smc: removing ib device syz2
[  142.102206][T10087] No such timeout policy "syz1"
[  142.104339][T10087] batadv5: left allmulticast mode
[  142.105877][T10087] batadv5: left promiscuous mode
[  142.114213][T10087] bridge0: port 1(batadv5) entered disabled state
[  142.399045][T10099] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  142.518478][T10107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.521735][T10107] syzkaller0: entered promiscuous mode
[  142.525147][T10107] syzkaller0: entered allmulticast mode
[  142.570357][T10107] tipc: Resetting bearer <eth:syzkaller0>
[  142.576306][T10106] tipc: Resetting bearer <eth:syzkaller0>
[  142.587412][T10106] tipc: Disabling bearer <eth:syzkaller0>
[  142.602083][T10109] netlink: 'syz.3.991': attribute type 10 has an invalid length.
[  142.605330][T10109] batman_adv: batadv0: Removing interface: dummy0
[  142.613121][T10109] netlink: 'syz.3.991': attribute type 1 has an invalid length.
[  142.677738][T10111] syz_tun (unregistering): left allmulticast mode
[  142.680343][T10111] syz_tun (unregistering): left promiscuous mode
[  142.682861][T10111] bridge0: port 2(syz_tun) entered disabled state
[  142.732644][T10115] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  142.744056][T10115] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  143.567385][T10143] ip6gre2: entered promiscuous mode
[  143.628194][T10145] xt_CT: You must specify a L4 protocol and not use inversions on it
[  143.732985][T10151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.736560][T10151] syzkaller0: entered promiscuous mode
[  143.738549][T10151] syzkaller0: entered allmulticast mode
[  143.743009][T10151] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  143.762775][T10157] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[  143.768357][T10151] tipc: Resetting bearer <eth:syzkaller0>
[  143.775041][T10150] tipc: Resetting bearer <eth:syzkaller0>
[  143.782477][T10150] tipc: Disabling bearer <eth:syzkaller0>
[  143.960889][T10175] netlink: 'syz.3.1011': attribute type 12 has an invalid length.
[  144.033697][T10184] netlink: 'syz.3.1014': attribute type 10 has an invalid length.
[  144.036319][T10186] netlink: 'syz.0.1015': attribute type 9 has an invalid length.
[  144.279377][T10215] bond28: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  144.287344][T10215] bond28 (unregistering): Released all slaves
[  144.510677][T10241] bridge11: entered promiscuous mode
[  144.512838][T10241] bridge11: entered allmulticast mode
[  144.580034][T10243] pim6reg1: entered promiscuous mode
[  144.581778][T10243] pim6reg1: entered allmulticast mode
[  144.649330][T10246] chnl_net:caif_netlink_parms(): no params data found
[  144.693345][T10250] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.702086][T10248] netlink: 'syz.3.1036': attribute type 3 has an invalid length.
[  144.761372][T10252] gretap2: entered promiscuous mode
[  144.798648][T10250] netlink: 'syz.0.1035': attribute type 10 has an invalid length.
[  144.801770][T10250] veth1_vlan: entered allmulticast mode
[  144.966753][T10281] bond14: option primary_reselect: invalid value (6)
[  144.970739][T10281] bond14 (unregistering): Released all slaves
[  145.012289][T10275] bond28: entered promiscuous mode
[  145.016164][T10275] 8021q: adding VLAN 0 to HW filter on device bond28
[  145.036483][T10286] 8021q: adding VLAN 0 to HW filter on device bond28
[  145.038846][T10286] bond28: (slave wireguard0): The slave device specified does not support setting the MAC address
[  145.047706][T10286] bond28: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  145.063357][T10286] bond28: (slave wireguard0): making interface the new active one
[  145.068894][T10275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.071438][T10275] IPv6: NLM_F_CREATE should be set when creating new route
[  145.073875][T10275] IPv6: NLM_F_CREATE should be set when creating new route
[  145.077710][T10286] wireguard0: entered promiscuous mode
[  145.078389][T10291] __nla_validate_parse: 23 callbacks suppressed
[  145.078407][T10291] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1046'.
[  145.081031][T10286] bond28: (slave wireguard0): Enslaving as an active interface with an up link
[  145.087835][T10275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.100253][T10275] bond28: (slave wireguard1): The slave device specified does not support setting the MAC address
[  145.108547][T10275] bond28: (slave wireguard1): Enslaving as a backup interface with an up link
[  145.167705][T10289] bond22: option arp_all_targets: invalid value (3)
[  145.172518][T10289] bond22 (unregistering): Released all slaves
[  145.211506][T10297] bond29: (slave bridge8): making interface the new active one
[  145.214988][T10297] bond29: (slave bridge8): Enslaving as an active interface with an up link
[  145.415867][T10311] bond_slave_0: mtu less than device minimum
[  145.450596][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'.
[  145.469645][T10316] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1050'.
[  145.474484][T10307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1050'.
[  145.666384][T10327] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1054'.
[  145.753389][T10336] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1057'.
[  145.796964][T10337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1056'.
[  145.869842][T10340] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  145.928633][T10347] IPv6: sit3: Disabled Multicast RS
[  146.012982][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'.
[  146.083440][T10357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1063'.
[  146.083593][T10351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.161670][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'.
[  146.178185][T10350] tipc: Disabling bearer <eth:syzkaller0>
[  146.187175][T10359] macvlan3: entered promiscuous mode
[  146.189051][T10359] macvlan3: entered allmulticast mode
[  146.460458][T10382] syzkaller0: entered promiscuous mode
[  146.462154][T10382] syzkaller0: entered allmulticast mode
[  146.723283][T10390] vlan1: entered allmulticast mode
[  146.726657][T10390] batadv0: entered allmulticast mode
[  146.975119][T10418] validate_nla: 7 callbacks suppressed
[  146.975128][T10418] netlink: 'syz.2.1080': attribute type 33 has an invalid length.
[  147.007674][T10424] netlink: 'syz.2.1081': attribute type 1 has an invalid length.
[  147.017394][T10425] vlan3: entered allmulticast mode
[  147.019203][T10425] bridge_slave_0: entered allmulticast mode
[  148.391646][T10451] team0 (uninitialized): Failed to send options change via netlink (err -105)
[  148.426674][T10451] team0: entered promiscuous mode
[  148.428634][T10451] team0: entered allmulticast mode
[  148.599836][T10467] netlink: 'syz.2.1091': attribute type 1 has an invalid length.
[  148.627326][T10467] 8021q: adding VLAN 0 to HW filter on device bond22
[  148.668365][T10467] 8021q: adding VLAN 0 to HW filter on device bond22
[  148.671462][T10467] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address
[  148.676241][T10467] bond22: (slave vxcan1): Error -95 calling set_mac_address
[  148.712101][T10469] : renamed from bond_slave_0
[  148.741427][T10471] veth11: entered promiscuous mode
[  148.746635][T10471] bond22: (slave veth11): Enslaving as an active interface with a down link
[  149.286145][T10488] netlink: 'syz.2.1095': attribute type 29 has an invalid length.
[  149.432582][T10496] x_tables: ip_tables: dccp match: only valid for protocol 33
[  149.471608][T10501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.474692][T10501] syzkaller0: entered promiscuous mode
[  149.477182][T10501] syzkaller0: entered allmulticast mode
[  149.506151][T10505] 8021q: adding VLAN 0 to HW filter on device bond30
[  149.509323][T10501] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  149.524429][T10501] tipc: Resetting bearer <eth:syzkaller0>
[  149.528230][T10500] tipc: Resetting bearer <eth:syzkaller0>
[  149.539117][T10500] tipc: Disabling bearer <eth:syzkaller0>
[  149.593576][T10505] 8021q: adding VLAN 0 to HW filter on device bond30
[  149.597050][T10505] bond30: (slave sit3): The slave device specified does not support setting the MAC address
[  149.601655][T10505] bond30: (slave sit3): Error -95 calling set_mac_address
[  149.688945][T10512] netlink: 'syz.2.1101': attribute type 5 has an invalid length.
[  149.791918][T10523] veth1_vlan: left allmulticast mode
[  149.795269][T10523] vlan0: left promiscuous mode
[  149.797111][T10523] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[  149.799794][T10523] veth1: left promiscuous mode
[  149.802106][T10523] macvlan2: left promiscuous mode
[  149.804427][T10523] macvlan2: left allmulticast mode
[  149.808141][T10523] vxcan7: left allmulticast mode
[  149.810220][T10523] bond20: left allmulticast mode
[  149.812457][T10523] veth7: left promiscuous mode
[  149.819915][T10523] vlan2: left promiscuous mode
[  149.821816][T10523] bond23: left promiscuous mode
[  149.823731][T10523] gretap1: left promiscuous mode
[  149.826909][T10523] vlan2: left allmulticast mode
[  149.828972][T10523] bond23: left allmulticast mode
[  149.830817][T10523] gretap1: left allmulticast mode
[  149.849078][T10523] bond28: left promiscuous mode
[  149.850798][T10523] wireguard0: left promiscuous mode
[  149.881112][T10525] syzkaller0: entered promiscuous mode
[  149.883077][T10525] syzkaller0: entered allmulticast mode
[  149.957485][T10528] bond0: (slave gre0): Error: Device type is different from other slaves
[  149.962478][T10528] netlink: 'syz.3.1106': attribute type 39 has an invalid length.
[  150.000879][T10531] netlink: 'syz.0.1107': attribute type 1 has an invalid length.
[  151.204898][T10531] workqueue: Failed to create a rescuer kthread for wq "bond31": -EINTR
[  151.214193][T10540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.225533][T10541] syzkaller0: entered promiscuous mode
[  151.227433][T10541] syzkaller0: entered allmulticast mode
[  151.249474][T10541] tipc: Resetting bearer <eth:syzkaller0>
[  151.280638][T10541] tipc: Disabling bearer <eth:syzkaller0>
[  151.303265][T10546] __nla_validate_parse: 22 callbacks suppressed
[  151.303281][T10546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1109'.
[  151.349195][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'.
[  151.352157][T10552] dummy0: left promiscuous mode
[  151.355623][T10552] erspan0: left promiscuous mode
[  151.404348][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'.
[  151.410394][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'.
[  151.476670][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'.
[  151.499524][T10570] netlink: 'syz.3.1116': attribute type 1 has an invalid length.
[  151.505377][T10567] bond31 (unregistering): Released all slaves
[  151.586206][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'.
[  151.601612][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'.
[  151.682152][T10580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1118'.
[  151.857218][T10580] can: request_module (can-proto-0) failed.
[  151.896241][T10604] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1122'.
[  151.904560][T10604] IPv6: sit4: Disabled Multicast RS
[  151.907561][T10604] sit4: entered allmulticast mode
[  151.913565][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1124'.
[  152.026835][T10620] x_tables: duplicate underflow at hook 1
[  152.054233][T10624] : renamed from batadv_slave_1
[  152.111759][T10626] x_tables: duplicate underflow at hook 2
[  152.230292][T10650] vlan3: entered promiscuous mode
[  152.232187][T10650] bridge_slave_0: entered promiscuous mode
[  152.235341][T10650] vlan3: entered allmulticast mode
[  152.237096][T10650] bridge_slave_0: entered allmulticast mode
[  152.516087][T10666] netlink: 'syz.0.1138': attribute type 1 has an invalid length.
[  152.531247][T10668] IPv6: sit6: Disabled Multicast RS
[  152.535796][T10668] sit6: entered allmulticast mode
[  152.664602][T10676] tap0: tun_chr_ioctl cmd 1074025673
[  152.671046][T10676] tap0: tun_chr_ioctl cmd 1074025677
[  152.673287][T10676] tap0: linktype set to 804
[  152.679339][T10675] tap0: tun_chr_ioctl cmd 1074025677
[  152.681268][T10675] tap0: linktype set to 804
[  152.758492][T10687] netlink: 'syz.0.1145': attribute type 1 has an invalid length.
[  152.842517][T10687] bond31: (slave veth11): Enslaving as an active interface with a down link
[  152.866392][T10690] bond31: (slave veth13): Enslaving as an active interface with a down link
[  152.993574][T10705] netlink: 'syz.0.1149': attribute type 1 has an invalid length.
[  153.131832][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  153.134663][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  153.145471][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  153.149991][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  153.191833][T10723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.253162][T10723] tipc: Disabling bearer <eth:syzkaller0>
[  153.258070][T10727] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  153.461343][T10739] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.512212][T10741] netlink: 'syz.2.1158': attribute type 12 has an invalid length.
[  153.542433][T10747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.548933][T10742] tipc: Disabling bearer <eth:syzkaller0>
[  153.571678][T10749] syzkaller0: entered promiscuous mode
[  153.573324][T10749] syzkaller0: entered allmulticast mode
[  153.624821][T10754] netlink: 'syz.0.1162': attribute type 1 has an invalid length.
[  153.721069][T10759] veth13: entered promiscuous mode
[  153.759881][T10769] sctp: [Deprecated]: syz.0.1167 (pid 10769) Use of int in max_burst socket option deprecated.
[  153.759881][T10769] Use struct sctp_assoc_value instead
[  153.801267][T10775] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  153.807112][T10775] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  153.813812][T10775] bridge11: entered promiscuous mode
[  153.815994][T10775] bridge11: entered allmulticast mode
[  153.958686][T10786] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  153.962472][T10786] netlink: 'syz.0.1172': attribute type 33 has an invalid length.
[  153.988813][T10788] batman_adv: batadv0: Removing interface: dummy0
[  153.992906][T10788] bond19: (slave geneve5): Releasing active interface
[  153.997749][T10788] bond23: (slave gretap1): Releasing active interface
[  154.002305][T10788] bond24: (slave veth9): Releasing active interface
[  154.002551][T10790] netlink: 'syz.2.1174': attribute type 1 has an invalid length.
[  154.009034][T10788] bond28: (slave wireguard0): Releasing backup interface
[  154.011432][T10788] bond28: (slave wireguard1): making interface the new active one
[  154.017573][T10788] bond28: (slave wireguard1): Releasing backup interface
[  154.021082][T10788] bond29: (slave bridge8): Releasing active interface
[  154.027068][T10788] bond31: (slave veth11): Releasing active interface
[  154.029153][T10788] bond31: (slave veth11): the permanent HWaddr of slave - 6e:61:be:d0:aa:6a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  154.036283][T10788] bond31: (slave veth13): Releasing active interface
[  154.425423][T10824] netlink: 'syz.0.1181': attribute type 6 has an invalid length.
[  154.453282][T10830] netlink: 'syz.0.1182': attribute type 1 has an invalid length.
[  154.456080][T10829] netlink: 'syz.0.1182': attribute type 1 has an invalid length.
[  154.470705][T10830] 8021q: adding VLAN 0 to HW filter on device bond33
[  154.480832][T10829] vlan3: entered promiscuous mode
[  154.482381][T10829] bond33: entered promiscuous mode
[  154.484776][T10829] vlan3: entered allmulticast mode
[  154.486519][T10829] bond33: entered allmulticast mode
[  154.519074][T10818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.522425][T10818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  154.527551][T10818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  154.532598][T10818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  154.613191][T10818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.621819][T10818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  154.626237][T10818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  154.631480][T10818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  154.683384][T10818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.687727][T10818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  154.690718][T10818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  154.693771][T10818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  154.737409][T10818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.741090][T10818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  154.744693][T10818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  154.749095][T10818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  154.807275][T10845] bond35: (slave vxcan13): The slave device specified does not support setting the MAC address
[  154.811764][T10845] bond35: (slave vxcan13): Error -95 calling set_mac_address
[  154.847904][   T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.850778][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  154.853712][   T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  154.857157][   T13] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 20001 - 0
[  154.868787][   T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.871905][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  154.875125][   T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  154.877773][   T13] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 20001 - 0
[  154.890008][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.893041][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  154.896905][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  154.899816][   T12] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 20001 - 0
[  154.913799][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.917683][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  154.920555][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  154.923543][   T12] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 20001 - 0
[  154.937346][T10846] bond35: (slave bridge9): Enslaving as an active interface with a down link
[  154.948803][T10846] gretap2: entered promiscuous mode
[  154.950960][T10846] gretap2: entered allmulticast mode
[  154.955995][T10846] bond35: (slave gretap2): making interface the new active one
[  154.959836][T10846] bond35: (slave gretap2): Enslaving as an active interface with an up link
[  155.083888][T10855] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.088681][T10855] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  155.092267][T10855] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  155.148621][T10855] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.152312][T10855] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  155.155677][T10855] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  155.195106][T10855] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.199011][T10855] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  155.211471][T10855] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  155.272315][T10855] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.280718][T10855] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  155.284193][T10855] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  155.330340][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.333899][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  155.337533][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  155.350125][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.353011][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  155.357041][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  155.369316][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.372317][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  155.375280][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  155.383228][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.386401][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  155.389159][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  155.466472][T10883] bond24: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  155.505291][   T13] bond24: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  155.511156][T10883] 8021q: adding VLAN 0 to HW filter on device bond24
[  155.523089][T10883] veth15: entered promiscuous mode
[  155.527432][T10883] bond24: (slave veth15): Enslaving as a backup interface with a down link
[  155.625085][   T12] bond24: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  155.638397][T10892] vlan0: entered promiscuous mode
[  155.788071][T10905] pim6reg1: entered promiscuous mode
[  155.795170][T10905] pim6reg1: entered allmulticast mode
[  156.451162][T10917] __nla_validate_parse: 23 callbacks suppressed
[  156.451175][T10917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1203'.
[  156.569165][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'.
[  156.832222][T10943] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1207'.
[  156.975913][T10950] Cannot find del_set index 4 as target
[  157.050052][T10953] syzkaller0: entered promiscuous mode
[  157.052154][T10953] syzkaller0: entered allmulticast mode
[  157.288269][T10964] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1214'.
[  157.433894][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'.
[  157.539652][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'.
[  157.542585][T10967] validate_nla: 7 callbacks suppressed
[  157.542620][T10967] netlink: 'syz.0.1215': attribute type 30 has an invalid length.
[  157.552878][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.561528][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.566065][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.575341][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.657811][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'.
[  157.662209][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'.
[  157.719543][T10978] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1217'.
[  157.824395][T10982] netlink: 'syz.0.1219': attribute type 1 has an invalid length.
[  157.977216][T10982] macvlan3: entered promiscuous mode
[  157.980238][T10982] macvlan3: entered allmulticast mode
[  158.146783][T10999] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  158.151604][T10999] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  158.239976][T11012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1228'.
[  158.245754][T11012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.249237][T11012] syzkaller0: entered promiscuous mode
[  158.251507][T11012] syzkaller0: entered allmulticast mode
[  158.269939][T11012] tipc: Resetting bearer <eth:syzkaller0>
[  158.274651][T11011] tipc: Resetting bearer <eth:syzkaller0>
[  158.286851][T11011] tipc: Disabling bearer <eth:syzkaller0>
[  159.073144][ T5681] syzkaller0: tun_net_xmit 76
[  159.075644][ T5681] syzkaller0: tun_net_xmit 48
[  159.080206][T11025] syzkaller0: create flow: hash 3804801074 index 2
[  159.104325][   T10] syzkaller0: tun_net_xmit 76
[  159.142327][T11025] syzkaller0: delete flow: hash 3804801074 index 2
[  160.410469][T11042] syzkaller0: entered promiscuous mode
[  160.412329][T11042] syzkaller0: entered allmulticast mode
[  160.526720][T11041] bridge_slave_1: entered promiscuous mode
[  160.579945][T11056] syzkaller1: tun_chr_ioctl cmd 1074025677
[  160.594309][T11056] syzkaller1: Refused to change device type
[  160.853204][T11083] gtp0: entered promiscuous mode
[  160.858252][T11084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.036400][T11098] veth0: entered promiscuous mode
[  161.045322][T11098] veth0 (unregistering): left promiscuous mode
[  161.403156][T11115] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  161.482226][T11120] __nla_validate_parse: 5 callbacks suppressed
[  161.482241][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1260'.
[  161.514544][T11120] tipc: Trying to set illegal importance in message
[  161.545494][T11126] bond3: option mode: unable to set because the bond device has slaves
[  161.549585][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'.
[  161.555106][T11128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1262'.
[  161.559665][T11128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1262'.
[  161.559762][T11126] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  161.570443][T11126] bond3: (slave macvlan1): Enslaving as an active interface with a down link
[  161.579700][T11126] bond4: (slave bridge3): Releasing backup interface
[  161.584621][T11126] bond5: (slave gre2): Releasing backup interface
[  161.588178][T11126] bond6: (slave bond7): Releasing backup interface
[  161.591677][T11126] bond9: (slave gretap2): Releasing active interface
[  161.596059][T11126] bond14: (slave gretap3): Releasing active interface
[  161.599092][T11126] batadv4: left allmulticast mode
[  161.600706][T11126] batadv4: left promiscuous mode
[  161.602380][T11126] bridge0: port 1(batadv4) entered disabled state
[  161.607880][T11126] bond3: (slave macvlan0): Releasing active interface
[  161.609891][T11126] bond3: (slave macvlan0): the permanent HWaddr of slave - 76:5f:62:59:9b:89 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  161.617120][T11126] bond18: (slave geneve0): Releasing active interface
[  161.627507][T11126] bond22: (slave veth11): Releasing active interface
[  161.633177][T11126] bond24: (slave ip6gretap4): Removing an active aggregator
[  161.636407][T11126] bond24: (slave ip6gretap4): Releasing backup interface
[  161.638668][T11126] bond24: (slave ip6gretap4): the permanent HWaddr of slave - 86:6c:33:8d:c5:2c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  161.648483][T11126] bond24: (slave veth15): Releasing backup interface
[  161.653172][T11126] bond3: (slave macvlan1): Releasing active interface
[  161.673646][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  161.676348][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  161.682619][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  161.691815][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  161.695302][T11128] syzkaller0: entered promiscuous mode
[  161.697221][T11128] syzkaller0: entered allmulticast mode
[  161.716719][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'.
[  161.742624][T11134] team0: entered promiscuous mode
[  161.744468][T11134] team0: entered allmulticast mode
[  161.746447][T11134] 8021q: adding VLAN 0 to HW filter on device team0
[  161.863635][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'.
[  161.909512][T11139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.912634][T11139] syzkaller0: entered promiscuous mode
[  161.914835][T11139] syzkaller0: entered allmulticast mode
[  161.931743][T11138] tipc: Resetting bearer <eth:syzkaller0>
[  161.945303][T11138] tipc: Disabling bearer <eth:syzkaller0>
[  162.109822][T11156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1271'.
[  162.117039][T11153] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  162.124222][T11155] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  162.131901][T11153] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  162.257229][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1274'.
[  162.261696][T11167] netlink: 'syz.2.1274': attribute type 1 has an invalid length.
[  162.329736][T11167] bond25: entered promiscuous mode
[  162.332102][T11167] 8021q: adding VLAN 0 to HW filter on device bond25
[  162.338122][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'.
[  162.341994][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1274'.
[  162.380940][T11176] sctp: [Deprecated]: syz.2.1275 (pid 11176) Use of int in max_burst socket option.
[  162.380940][T11176] Use struct sctp_assoc_value instead
[  162.929045][T11209] dvmrp0: entered allmulticast mode
[  163.240047][T11226] x_tables: duplicate underflow at hook 1
[  163.243279][T11226] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  163.254325][T11226] x_tables: duplicate underflow at hook 1
[  163.373248][T11229] bond17: entered promiscuous mode
[  163.377151][T11229] bond17: entered allmulticast mode
[  163.387584][T11229] 8021q: adding VLAN 0 to HW filter on device bond17
[  163.407501][T11235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.410832][T11235] syzkaller0: entered promiscuous mode
[  163.413031][T11235] syzkaller0: entered allmulticast mode
[  163.421263][T11235] tipc: Resetting bearer <eth:syzkaller0>
[  163.425661][T11232] tipc: Resetting bearer <eth:syzkaller0>
[  163.440230][T11232] tipc: Disabling bearer <eth:syzkaller0>
[  163.453499][T11247] macvlan0: entered promiscuous mode
[  163.458356][T11247] batadv0: entered promiscuous mode
[  163.462980][T11247] debugfs: 'hsr0' already exists in 'hsr'
[  163.465459][T11247] Cannot create hsr debugfs directory
[  163.467807][T11247] hsr0: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  163.471894][T11247] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  163.478214][T11247] hsr0: entered allmulticast mode
[  163.479947][T11247] macvlan0: entered allmulticast mode
[  163.481882][T11247] 8021q: adding VLAN 0 to HW filter on device hsr0
[  163.494926][T11247] macvlan0: left promiscuous mode
[  163.498279][T11247] batadv0: left promiscuous mode
[  163.667687][T11271] sctp: [Deprecated]: syz.2.1299 (pid 11271) Use of struct sctp_assoc_value in delayed_ack socket option.
[  163.667687][T11271] Use struct sctp_sack_info instead
[  163.696424][T11273] bond39: option arp_validate: invalid value (18446744073709551615)
[  163.700984][T11273] bond39 (unregistering): Released all slaves
[  163.945286][T11291] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  163.950962][T11291] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  163.988373][T11296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.991207][T11296] syzkaller0: entered promiscuous mode
[  163.993015][T11296] syzkaller0: entered allmulticast mode
[  164.008899][T11296] tipc: Resetting bearer <eth:syzkaller0>
[  164.012985][T11295] tipc: Resetting bearer <eth:syzkaller0>
[  164.027930][T11295] tipc: Disabling bearer <eth:syzkaller0>
[  164.096144][T11298] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  164.101381][T11298] netlink: 'syz.0.1306': attribute type 1 has an invalid length.
[  164.298688][  T793] IPVS: starting estimator thread 0...
[  164.333087][T11304] bond39: entered promiscuous mode
[  164.335598][T11304] bond39: entered allmulticast mode
[  164.338206][T11304] 8021q: adding VLAN 0 to HW filter on device bond39
[  164.395408][T11305] IPVS: using max 79 ests per chain, 189600 per kthread
[  164.570687][T11315] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  164.886958][T11327] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  164.978233][T11336] netlink: 'syz.3.1316': attribute type 32 has an invalid length.
[  164.999000][T11336] bond18: Setting coupled_control to off (0)
[  165.727864][T11358] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.734597][T11358] syzkaller0: entered promiscuous mode
[  165.736865][T11358] syzkaller0: entered allmulticast mode
[  165.823834][T11357] tipc: Resetting bearer <eth:syzkaller0>
[  165.838134][T11357] tipc: Disabling bearer <eth:syzkaller0>
[  165.970616][T11363] netlink: 'syz.3.1323': attribute type 7 has an invalid length.
[  165.982309][T11363] netlink: 'syz.3.1323': attribute type 8 has an invalid length.
[  165.990695][T11368] batadv_slave_0: entered allmulticast mode
[  166.086741][T11377] netlink: 'syz.2.1327': attribute type 1 has an invalid length.
[  166.102260][T11377] 8021q: adding VLAN 0 to HW filter on device bond27
[  166.106854][ T9834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.109275][ T9834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.109324][T11382] netlink: 'syz.0.1328': attribute type 1 has an invalid length.
[  166.114510][T11383] netlink: 'syz.0.1328': attribute type 1 has an invalid length.
[  166.142164][T11382] 8021q: adding VLAN 0 to HW filter on device bond40
[  166.159412][T11387] vlan4: entered promiscuous mode
[  166.161093][T11387] bond40: entered promiscuous mode
[  166.162640][T11387] vlan4: entered allmulticast mode
[  166.165740][T11387] bond40: entered allmulticast mode
[  166.313068][T11394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  166.518190][T11425] __nla_validate_parse: 26 callbacks suppressed
[  166.518202][T11425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1336'.
[  166.543326][T11427] netlink: 'syz.0.1337': attribute type 1 has an invalid length.
[  166.546752][T11427] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1337'.
[  166.588969][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'.
[  166.591815][T11431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1338'.
[  166.693161][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1340'.
[  166.698703][T11435] 8021q: adding VLAN 0 to HW filter on device bond3
[  166.710996][T11435] pim6reg1: entered allmulticast mode
[  166.713782][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'.
[  166.720796][T11437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.736348][T11438] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.739914][T11438] syzkaller0: entered promiscuous mode
[  166.741684][T11438] syzkaller0: entered allmulticast mode
[  166.757550][T11437] tipc: Resetting bearer <eth:syzkaller0>
[  166.762382][T11436] tipc: Resetting bearer <eth:syzkaller0>
[  166.773153][T11436] tipc: Disabling bearer <eth:syzkaller0>
[  166.906919][T11444] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  166.952918][T11453] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1345'.
[  167.070402][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'.
[  167.086312][T11459] macvtap1: entered promiscuous mode
[  167.088501][T11459] erspan0: entered promiscuous mode
[  167.090953][T11459] macvtap1: entered allmulticast mode
[  167.093110][T11459] erspan0: entered allmulticast mode
[  167.101144][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'.
[  167.121121][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'.
[  167.130425][T11458] bond0: Device is already in use.
[  167.179146][T11472] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  167.272960][T11476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.277296][T11476] syzkaller0: entered promiscuous mode
[  167.279609][T11476] syzkaller0: entered allmulticast mode
[  167.286852][T11476] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  167.302805][T11476] tipc: Resetting bearer <eth:syzkaller0>
[  167.307640][T11474] tipc: Resetting bearer <eth:syzkaller0>
[  167.321257][T11474] tipc: Disabling bearer <eth:syzkaller0>
[  167.402905][T11493] syzkaller0: entered promiscuous mode
[  167.407981][T11493] syzkaller0: entered allmulticast mode
[  167.464664][T11500] dvmrp8: entered allmulticast mode
[  167.496876][T11500] netlink: 'syz.2.1357': attribute type 12 has an invalid length.
[  167.527737][T11505] A link change request failed with some changes committed already. Interface ׌s~ may have been left with an inconsistent configuration, please check.
[  167.533071][T11506] A link change request failed with some changes committed already. Interface ׌s~ may have been left with an inconsistent configuration, please check.
[  167.576628][T11508] bond28: option fail_over_mac: invalid value (253)
[  167.579691][T11508] bond28 (unregistering): Released all slaves
[  168.329227][T11526] netlink: 'syz.0.1364': attribute type 30 has an invalid length.
[  168.426225][T11528] 8021q: adding VLAN 0 to HW filter on device bond41
[  168.519810][T11531] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  168.664276][T11533] 8021q: adding VLAN 0 to HW filter on device bond42
[  168.686023][T11533] ipvlan4: entered allmulticast mode
[  168.688361][T11533] bond42: entered allmulticast mode
[  168.693251][T11533] bond0: option mode: unable to set because the bond device is up
[  168.710533][T11533] bond42: (slave ip6gretap4): making interface the new active one
[  168.714153][T11533] ip6gretap4: entered allmulticast mode
[  168.717391][T11533] bond42: (slave ip6gretap4): Enslaving as an active interface with an up link
[  168.764706][T11536] team0 (uninitialized): Failed to send options change via netlink (err -105)
[  168.785389][T11536] team0: entered promiscuous mode
[  168.787497][T11536] team0: entered allmulticast mode
[  169.125102][T11548] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  169.388931][T11565] ip6gre0: left allmulticast mode
[  169.397385][T11565] bridge_slave_1: left promiscuous mode
[  169.418314][T11565] vlan0: left promiscuous mode
[  169.419859][T11565] bond12: left promiscuous mode
[  169.421599][T11565] macvtap3: left promiscuous mode
[  169.423613][T11565] bond13: left promiscuous mode
[  169.449179][T11565] bond20: left promiscuous mode
[  169.454457][T11565] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  169.456957][T11565] macvtap4: left promiscuous mode
[  169.475096][T11565] vlan1: left allmulticast mode
[  169.479804][T11565] veth11: left promiscuous mode
[  169.482104][T11565] vlan3: left promiscuous mode
[  169.484853][T11565] bridge_slave_0: left promiscuous mode
[  169.487696][T11565] vlan3: left allmulticast mode
[  169.489870][T11565] bridge_slave_0: left allmulticast mode
[  169.494956][T11565] sit6: left allmulticast mode
[  169.513141][T11565] veth13: left promiscuous mode
[  169.525159][T11565] veth15: left promiscuous mode
[  169.532024][T11565] team0: left promiscuous mode
[  169.533536][T11565] team0: left allmulticast mode
[  169.539305][T11565] bond25: left promiscuous mode
[  169.660118][ T5681] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.662849][ T5681] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  169.666226][ T5681] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.668884][ T5681] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  169.672843][T11568] wg1: entered promiscuous mode
[  169.675382][T11568] wg1: entered allmulticast mode
[  169.679814][ T5681] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.683167][ T5681] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  169.694321][ T5681] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  169.697665][ T5681] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  170.289977][T11580] 8021q: adding VLAN 0 to HW filter on device bond45
[  170.293271][T11580] bond0: (slave bond45): Enslaving as an active interface with a down link
[  170.627940][T11613] bridge_slave_0: entered promiscuous mode
[  171.191906][T11638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.195026][T11638] syzkaller0: entered promiscuous mode
[  171.196773][T11638] syzkaller0: entered allmulticast mode
[  171.202124][T11638] tipc: Resetting bearer <eth:syzkaller0>
[  171.219007][T11641] tipc: Resetting bearer <eth:syzkaller0>
[  171.232409][T11641] tipc: Disabling bearer <eth:syzkaller0>
[  171.470322][T11647] bond46: entered promiscuous mode
[  171.472284][T11647] 8021q: adding VLAN 0 to HW filter on device bond46
[  171.671594][T11654] __nla_validate_parse: 15 callbacks suppressed
[  171.671606][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'.
[  171.781511][T11662] validate_nla: 3 callbacks suppressed
[  171.781522][T11662] netlink: 'syz.2.1395': attribute type 9 has an invalid length.
[  172.131074][T11688] vxcan0: entered allmulticast mode
[  172.198337][T11692] netlink: 'syz.2.1401': attribute type 1 has an invalid length.
[  172.504557][T11701] netlink: 'syz.2.1402': attribute type 1 has an invalid length.
[  172.527288][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'.
[  172.706278][T11704] veth19: entered promiscuous mode
[  172.778597][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1403'.
[  172.877731][T11708] ipvlan0: entered promiscuous mode
[  173.306736][T11736] sctp: [Deprecated]: syz.2.1408 (pid 11736) Use of struct sctp_assoc_value in delayed_ack socket option.
[  173.306736][T11736] Use struct sctp_sack_info instead
[  173.362813][T11739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1409'.
[  173.520954][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'.
[  173.524796][T11743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'.
[  173.790537][T11750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.793524][T11751] syzkaller0: entered promiscuous mode
[  173.796600][T11751] syzkaller0: entered allmulticast mode
[  173.818166][T11751] tipc: Resetting bearer <eth:syzkaller0>
[  173.830273][T11749] tipc: Resetting bearer <eth:syzkaller0>
[  173.846044][T11749] tipc: Disabling bearer <eth:syzkaller0>
[  173.921770][T11756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1413'.
[  173.929860][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'.
[  174.042385][T11760] : renamed from geneve1
[  174.117097][T11762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1416'.
[  174.258292][T11769] netlink: 'syz.0.1417': attribute type 13 has an invalid length.
[  174.297410][T11768] Set syz1 is full, maxelem 6117 reached
[  174.413108][T11769] erspan0: left allmulticast mode
[  174.419558][T11769] erspan0: left promiscuous mode
[  174.506680][ T5681] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.510647][ T5681] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.514438][ T5681] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.517803][ T5681] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  174.636460][T11781] wg1: left promiscuous mode
[  174.638479][T11781] wg1: left allmulticast mode
[  174.640310][T11781] bridge_slave_0: left promiscuous mode
[  174.642225][T11781] batadv_slave_0: left allmulticast mode
[  174.649108][T11781] vlan3: left promiscuous mode
[  174.651129][T11781] bond33: left promiscuous mode
[  174.653108][T11781] vlan3: left allmulticast mode
[  174.655407][T11781] bond33: left allmulticast mode
[  174.657415][T11781] gretap2: left promiscuous mode
[  174.659069][T11781] gretap2: left allmulticast mode
[  174.661062][T11781] macvlan3: left promiscuous mode
[  174.662758][T11781] macvlan3: left allmulticast mode
[  174.668642][T11781] bond39: left promiscuous mode
[  174.670629][T11781] bond39: left allmulticast mode
[  174.672832][T11781] vlan4: left promiscuous mode
[  174.674914][T11781] bond40: left promiscuous mode
[  174.676973][T11781] vlan4: left allmulticast mode
[  174.679003][T11781] bond40: left allmulticast mode
[  174.684134][T11781] macvtap1: left promiscuous mode
[  174.687016][T11781] macvtap1: left allmulticast mode
[  174.689629][T11781] ipvlan4: left allmulticast mode
[  174.691628][T11781] bond42: left allmulticast mode
[  174.693598][T11781] ip6gretap4: left allmulticast mode
[  174.698869][T11781] team0: left promiscuous mode
[  174.700605][T11781] team0: left allmulticast mode
[  174.702604][T11781] bond46: left promiscuous mode
[  174.722559][T11784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.728670][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'.
[  174.732616][T11784] syzkaller0: entered promiscuous mode
[  174.735837][T11784] syzkaller0: entered allmulticast mode
[  174.763507][T11784] tipc: Resetting bearer <eth:syzkaller0>
[  174.767109][T11782] tipc: Resetting bearer <eth:syzkaller0>
[  174.783498][T11782] tipc: Disabling bearer <eth:syzkaller0>
[  175.466467][T11815] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  175.529502][T11821] sit5: entered promiscuous mode
[  175.712747][T11834] dvmrp12: entered allmulticast mode
[  175.714878][T11833] dvmrp12: left allmulticast mode
[  175.741359][T11837] netlink: 'syz.3.1435': attribute type 1 has an invalid length.
[  175.771836][T11842] netlink: 'syz.3.1436': attribute type 1 has an invalid length.
[  175.795510][T11842] bond19: (slave veth7): Enslaving as an active interface with a down link
[  175.810932][T11842] bond19: (slave veth9): Enslaving as an active interface with a down link
[  176.055932][T11867] netlink: 'syz.3.1442': attribute type 2 has an invalid length.
[  176.129394][T11867] netlink: 'syz.3.1442': attribute type 4 has an invalid length.
[  176.141459][T11873] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.146465][T11873] 8021q: adding VLAN 0 to HW filter on device `
[  176.150092][T11873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.290473][T11882] netlink: 'syz.3.1447': attribute type 1 has an invalid length.
[  176.381312][T11893] tipc: Can't bind to reserved service type 1
[  176.383849][T11893] netlink: 'syz.3.1450': attribute type 39 has an invalid length.
[  176.406664][T11893] vlan0: entered allmulticast mode
[  176.408464][T11893] bridge_slave_0: entered allmulticast mode
[  176.463069][T11895] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  176.510041][T11900] 9: entered promiscuous mode
[  176.673584][T11924] bond48: entered promiscuous mode
[  176.675969][T11924] 8021q: adding VLAN 0 to HW filter on device bond48
[  176.691119][T11922] __nla_validate_parse: 12 callbacks suppressed
[  176.691132][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'.
[  176.752508][T11937] macsec1: entered allmulticast mode
[  176.756377][T11937] macsec0: entered allmulticast mode
[  176.781661][T11941] erspan0: left allmulticast mode
[  176.784835][T11941] wg1: left promiscuous mode
[  176.786346][T11941] wg1: left allmulticast mode
[  176.794815][T11941] macvlan2: left promiscuous mode
[  176.796413][T11941] macvlan2: left allmulticast mode
[  176.798520][T11941] macvlan0: left promiscuous mode
[  176.800045][T11941] macvlan0: left allmulticast mode
[  176.806308][T11941] batadv4: left allmulticast mode
[  176.809417][T11941] macvlan1: left promiscuous mode
[  176.811064][T11941] macvlan1: left allmulticast mode
[  176.820045][T11941] nicvf0: left promiscuous mode
[  176.828836][T11941] geneve2: left promiscuous mode
[  176.830608][T11941] geneve2: left allmulticast mode
[  176.839157][T11941] bond9: left promiscuous mode
[  176.845034][T11941] bond10: left promiscuous mode
[  176.846715][T11941] bond10: left allmulticast mode
[  176.853147][T11941] veth5: left promiscuous mode
[  176.858151][T11941] ip6gre2: left promiscuous mode
[  176.863472][T11941] macvlan3: left promiscuous mode
[  176.865921][T11941] macvlan3: left allmulticast mode
[  176.868173][T11941] team0: left promiscuous mode
[  176.870305][T11941] team0: left allmulticast mode
[  176.875154][T11941] sit4: left allmulticast mode
[  176.881409][T11941] bond17: left promiscuous mode
[  176.883155][T11941] bond17: left allmulticast mode
[  176.887052][T11941] sit5: left promiscuous mode
[  176.895834][T11941] macsec0: left allmulticast mode
[  176.897568][T11941] macsec1: left allmulticast mode
[  176.900083][ T5836] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  176.909872][ T5836] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  176.914152][ T5836] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  176.918171][ T5836] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 20001 - 0
[  176.920893][ T5836] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  176.923452][ T5836] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  176.926476][ T5836] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  176.929111][ T5836] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 20001 - 0
[  176.947289][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'.
[  176.953284][T11943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.960741][ T5836] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  176.967150][ T5836] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  176.969756][ T5836] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  176.972912][ T5836] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 20001 - 0
[  176.985181][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  176.993418][ T5836] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  176.996563][ T5836] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  176.999251][ T5836] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  177.001769][ T5836] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 20001 - 0
[  177.003201][T11949] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  177.018074][T11947] bond29: option broadcast_neighbor: invalid value (5)
[  177.022361][T11947] bond29 (unregistering): Released all slaves
[  177.035352][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  177.153244][T11959] validate_nla: 4 callbacks suppressed
[  177.153257][T11959] netlink: 'syz.2.1463': attribute type 10 has an invalid length.
[  177.177935][T11959] dummy0: entered promiscuous mode
[  177.201642][T11959] `: Failed to send options change via netlink (err -105)
[  177.216912][T11959] `: Port device dummy0 added
[  177.219261][T11961] netlink: 'syz.2.1463': attribute type 10 has an invalid length.
[  177.235927][T11961] dummy0: left promiscuous mode
[  177.241034][T11961] `: Failed to send options change via netlink (err -105)
[  177.251032][T11961] `: Failed to send port change of device dummy0 via netlink (err -105)
[  177.255404][T11961] `: Port device dummy0 removed
[  177.314794][T11966] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1464'.
[  177.317745][T11966] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1464'.
[  177.320518][T11966] netlink: 'syz.2.1464': attribute type 6 has an invalid length.
[  177.322971][T11966] netlink: 'syz.2.1464': attribute type 5 has an invalid length.
[  177.326775][T11966] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1464'.
[  177.331002][T11966] netlink: 'syz.2.1464': attribute type 4 has an invalid length.
[  177.341015][T11966] netlink: 'syz.2.1464': attribute type 4 has an invalid length.
[  177.495602][ T8133] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  177.534694][ T5836] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  177.707367][T11980] Unsupported ieee802154 address type: 0
[  177.757839][T11987] Cannot find del_set index 4 as target
[  177.773512][T11987] bridge13: entered promiscuous mode
[  177.776116][T11987] bridge13: entered allmulticast mode
[  177.781331][T11987] team0: Port device bridge13 added
[  177.786211][T11987] bridge0: port 1(team0) entered blocking state
[  177.789196][T11987] bridge0: port 1(team0) entered disabled state
[  177.792148][T11987] team0: entered allmulticast mode
[  177.796574][T11987] team0: entered promiscuous mode
[  177.822213][T11989] lo: entered promiscuous mode
[  177.825533][T11989] tunl0: entered promiscuous mode
[  177.827933][T11989] gre0: entered promiscuous mode
[  177.830970][T11989] gretap0: entered promiscuous mode
[  177.833645][T11989] erspan0: entered promiscuous mode
[  177.839204][T11989] ip_vti0: entered promiscuous mode
[  177.841580][T11989] ip6_vti0: entered promiscuous mode
[  177.844051][T11989] sit0: entered promiscuous mode
[  177.848375][T11989] ip6tnl0: entered promiscuous mode
[  177.850706][T11989] ip6gre0: entered promiscuous mode
[  177.853169][T11989] ip6gretap0: entered promiscuous mode
[  177.859126][T11989] dummy0: entered promiscuous mode
[  177.861136][T11989] nlmon0: entered promiscuous mode
[  177.873586][T11989] caif0: entered promiscuous mode
[  177.878387][T11989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  177.917576][T11992] bond49: option arp_all_targets: invalid value (3)
[  177.932394][T11992] bond49 (unregistering): Released all slaves
[  177.969227][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1472'.
[  177.975712][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.012315][T11999] netlink: 'syz.3.1473': attribute type 30 has an invalid length.
[  178.087253][ T6273] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.174607][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.237997][T12020] netlink: 'syz.0.1476': attribute type 83 has an invalid length.
[  178.241219][T12020] netlink: 'syz.0.1476': attribute type 1 has an invalid length.
[  178.263448][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'.
[  178.267015][T12019] netlink: 'syz.2.1477': attribute type 30 has an invalid length.
[  178.278896][ T5681] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.281659][ T5681] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.285201][ T5681] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.289038][ T5681] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.410377][T12010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1475'.
[  178.416793][T12010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  178.573138][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.581021][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.722463][T12041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.725516][T12041] syzkaller0: entered promiscuous mode
[  178.727835][T12041] syzkaller0: entered allmulticast mode
[  178.742260][T12041] tipc: Resetting bearer <eth:syzkaller0>
[  178.752155][T12040] tipc: Resetting bearer <eth:syzkaller0>
[  178.762548][T12040] tipc: Disabling bearer <eth:syzkaller0>
[  178.843708][T12051] bridge0: port 2(batadv0) entered blocking state
[  178.849303][T12051] bridge0: port 2(batadv0) entered disabled state
[  178.852157][T12051] batadv0: entered allmulticast mode
[  178.858777][T12051] batadv0: entered promiscuous mode
[  178.884424][ T5681] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.891613][T12053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1486'.
[  178.928348][T12057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1487'.
[  179.148994][T12075] bond21: option primary_reselect: invalid value (255)
[  179.152831][T12075] bond21 (unregistering): Released all slaves
[  179.344147][ T5681] batman_adv: batadv0: IGMP Querier appeared
[  179.346162][ T5681] batman_adv: batadv0: MLD Querier appeared
[  180.030137][T12093] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.123236][T12093] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.187899][T12093] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.243171][T12093] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  180.339618][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.367844][ T5681] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.408969][ T5681] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.427340][T12118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.430522][T12118] syzkaller0: entered promiscuous mode
[  180.438116][T12118] syzkaller0: entered allmulticast mode
[  180.448625][ T5681] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.487574][T12118] tipc: Resetting bearer <eth:syzkaller0>
[  180.494415][T12117] tipc: Resetting bearer <eth:syzkaller0>
[  180.512173][T12117] tipc: Disabling bearer <eth:syzkaller0>
[  180.722010][T12149] dummy0: left promiscuous mode
[  180.728713][T12151] : renamed from hsr0
[  180.808537][T12157] bond21: option updelay: invalid value (18446744073709551607)
[  180.811608][T12157] bond21: option updelay: allowed values 0 - 2147483647
[  180.816290][T12157] bond21 (unregistering): Released all slaves
[  180.834982][T12160] batadv6: entered promiscuous mode
[  180.837359][T12160] batadv6: entered allmulticast mode
[  180.846709][T12161] pim6reg1: entered promiscuous mode
[  180.848977][T12161] pim6reg1: entered allmulticast mode
[  180.989081][T12168] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  181.204124][   T56] Bluetooth: hci1: command 0x0406 tx timeout
[  181.569635][T12188] lo: entered promiscuous mode
[  181.572480][T12188] tunl0: entered promiscuous mode
[  181.577169][T12188] gre0: entered promiscuous mode
[  181.581819][T12188] gretap0: entered promiscuous mode
[  181.584688][T12188] erspan0: entered promiscuous mode
[  181.587452][T12188] ip_vti0: entered promiscuous mode
[  181.589878][T12188] ip6_vti0: entered promiscuous mode
[  181.592361][T12188] sit0: entered promiscuous mode
[  181.595628][T12188] ip6tnl0: entered promiscuous mode
[  181.597590][T12188] ip6gre0: entered promiscuous mode
[  181.601987][T12188] ip6gretap0: entered promiscuous mode
[  181.609063][T12188] dummy0: entered promiscuous mode
[  181.613305][T12188] nlmon0: entered promiscuous mode
[  181.617991][T12188] caif0: entered promiscuous mode
[  181.622427][T12188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.642277][T12191] bond21: option arp_all_targets: invalid value (3)
[  181.646174][T12191] bond21 (unregistering): Released all slaves
[  181.669581][T12193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.702492][T12193] tipc: Disabling bearer <eth:syzkaller0>
[  181.776518][T12215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.788549][T12215] veth0: entered promiscuous mode
[  181.794281][T12215] __nla_validate_parse: 10 callbacks suppressed
[  181.794298][T12215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1527'.
[  181.820262][T12214] veth0: left promiscuous mode
[  181.909295][T12234] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1531'.
[  181.913259][T12234] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1531'.
[  181.923749][T12236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1531'.
[  181.948522][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1532'.
[  182.061818][T12242] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1534'.
[  182.076423][T12242] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1534'.
[  182.079282][T12242] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  182.087794][T12244] lo: left promiscuous mode
[  182.091395][T12244] tunl0: left promiscuous mode
[  182.093877][T12244] gre0: left promiscuous mode
[  182.100761][T12244] gretap0: left promiscuous mode
[  182.104616][T12244] erspan0: left promiscuous mode
[  182.108186][T12244] ip_vti0: left promiscuous mode
[  182.111842][T12244] ip6_vti0: left promiscuous mode
[  182.118092][T12244] sit0: left promiscuous mode
[  182.123454][T12244] ip6tnl0: left promiscuous mode
[  182.127444][T12244] ip6gre0: left promiscuous mode
[  182.130687][T12244] ip6gretap0: left promiscuous mode
[  182.136334][T12244] dummy0: left promiscuous mode
[  182.143210][T12244] nlmon0: left promiscuous mode
[  182.147373][T12244] caif0: left promiscuous mode
[  182.161717][T12247] geneve4: entered promiscuous mode
[  182.164742][ T5681] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0
[  182.169613][ T5681] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  182.172147][ T5681] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  182.184036][ T5681] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  182.202781][T12251] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1538'.
[  182.244464][T12254] validate_nla: 8 callbacks suppressed
[  182.244484][T12254] netlink: 'syz.3.1537': attribute type 1 has an invalid length.
[  182.267104][T12254] bond21: entered promiscuous mode
[  182.269468][T12254] 8021q: adding VLAN 0 to HW filter on device bond21
[  182.278892][T12254] bond21: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  182.283766][T12254] bond21: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  182.287368][T12254] bond21: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  182.291222][T12254] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  182.710430][T12260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.714098][T12260] syzkaller0: entered promiscuous mode
[  182.716244][T12260] syzkaller0: entered allmulticast mode
[  182.737337][T12260] tipc: Resetting bearer <eth:syzkaller0>
[  182.742185][T12259] tipc: Resetting bearer <eth:syzkaller0>
[  182.753572][T12259] tipc: Disabling bearer <eth:syzkaller0>
[  182.835749][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'.
[  182.971558][T12266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1543'.
[  183.024660][T12249] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  183.027747][T12249] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  183.038190][T12249] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  183.042043][T12249] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  183.145552][T12278] syzkaller1: entered promiscuous mode
[  183.147434][T12278] syzkaller1: entered allmulticast mode
[  183.192474][T12278] bond49: option primary_reselect: invalid value (255)
[  183.203836][T12278] bond49 (unregistering): Released all slaves
[  183.218103][T12287] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  183.473215][T12286] syz.3.1548: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  183.478336][T12286] CPU: 0 UID: 0 PID: 12286 Comm: syz.3.1548 Not tainted syzkaller #0 PREEMPT(full) 
[  183.478348][T12286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.478354][T12286] Call Trace:
[  183.478358][T12286]  <TASK>
[  183.478362][T12286]  dump_stack_lvl+0x189/0x250
[  183.478377][T12286]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.478387][T12286]  ? __pfx__printk+0x10/0x10
[  183.478395][T12286]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  183.478406][T12286]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  183.478416][T12286]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  183.478430][T12286]  warn_alloc+0x214/0x310
[  183.478441][T12286]  ? stack_depot_save_flags+0x40/0x860
[  183.478455][T12286]  ? __pfx_warn_alloc+0x10/0x10
[  183.478465][T12286]  ? kasan_save_track+0x3e/0x80
[  183.478475][T12286]  ? __kasan_kmalloc+0x93/0xb0
[  183.478486][T12286]  ? xsk_setsockopt+0x4dc/0x8d0
[  183.478494][T12286]  ? do_sock_setsockopt+0x17c/0x1b0
[  183.478505][T12286]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  183.478511][T12286]  ? do_syscall_64+0xfa/0xfa0
[  183.478519][T12286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.478530][T12286]  __vmalloc_node_range_noprof+0x125/0x12d0
[  183.478552][T12286]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  183.478563][T12286]  ? __kasan_kmalloc+0x93/0xb0
[  183.478575][T12286]  vmalloc_user_noprof+0xad/0xf0
[  183.478586][T12286]  ? xskq_create+0xbf/0x170
[  183.478594][T12286]  xskq_create+0xbf/0x170
[  183.478603][T12286]  xsk_init_queue+0xb0/0x110
[  183.478611][T12286]  xsk_setsockopt+0x4dc/0x8d0
[  183.478619][T12286]  ? __pfx_xsk_setsockopt+0x10/0x10
[  183.478649][T12286]  ? __pfx_aa_sk_perm+0x10/0x10
[  183.478661][T12286]  ? aa_sock_opt_perm+0xff/0x1b0
[  183.478672][T12286]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  183.478680][T12286]  ? __pfx_xsk_setsockopt+0x10/0x10
[  183.478688][T12286]  do_sock_setsockopt+0x17c/0x1b0
[  183.478701][T12286]  __x64_sys_setsockopt+0x13f/0x1b0
[  183.478710][T12286]  do_syscall_64+0xfa/0xfa0
[  183.478717][T12286]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.478726][T12286]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.478732][T12286]  ? exc_page_fault+0xab/0x100
[  183.478741][T12286]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.478748][T12286] RIP: 0033:0x7fea0638efc9
[  183.478756][T12286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.478762][T12286] RSP: 002b:00007fea072e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  183.478771][T12286] RAX: ffffffffffffffda RBX: 00007fea065e5fa0 RCX: 00007fea0638efc9
[  183.478776][T12286] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d
[  183.478780][T12286] RBP: 00007fea06411f91 R08: 0000000000000004 R09: 0000000000000000
[  183.478785][T12286] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.478789][T12286] R13: 00007fea065e6038 R14: 00007fea065e5fa0 R15: 00007ffc1fa0ddb8
[  183.478801][T12286]  </TASK>
[  183.478809][T12286] Mem-Info:
[  183.581220][T12286] active_anon:9364 inactive_anon:8 isolated_anon:0
[  183.581220][T12286]  active_file:2998 inactive_file:43050 isolated_file:0
[  183.581220][T12286]  unevictable:1768 dirty:18 writeback:0
[  183.581220][T12286]  slab_reclaimable:11791 slab_unreclaimable:180590
[  183.581220][T12286]  mapped:22188 shmem:5284 pagetables:1224
[  183.581220][T12286]  sec_pagetables:0 bounce:0
[  183.581220][T12286]  kernel_misc_reclaimable:0
[  183.581220][T12286]  free:1032572 free_pcp:24508 free_cma:0
[  183.614791][T12286] Node 0 active_anon:12364kB inactive_anon:32kB active_file:8584kB inactive_file:140072kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42716kB dirty:36kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6984kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  183.628670][T12286] Node 1 active_anon:25092kB inactive_anon:0kB active_file:3408kB inactive_file:32128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46036kB dirty:36kB writeback:0kB shmem:16280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8100kB pagetables:2372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  183.638222][T12286] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  183.654024][T12286] lowmem_reserve[]: 0 1597 2129 2129 2129
[  183.664110][T12286] Node 0 DMA32 free:1335104kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:772kB inactive_anon:0kB active_file:7936kB inactive_file:3716kB unevictable:0kB writepending:4kB zspages:0kB present:2080636kB managed:1635844kB mlocked:0kB bounce:0kB free_pcp:52616kB local_pcp:39444kB free_cma:0kB
[  183.684384][T12286] lowmem_reserve[]: 0 0 531 531 531
[  183.686220][T12286] Node 0 Normal free:25472kB boost:14336kB min:22852kB low:24980kB high:27108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11724kB inactive_anon:32kB active_file:648kB inactive_file:136356kB unevictable:3536kB writepending:32kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:2464kB local_pcp:2344kB free_cma:0kB
[  183.729939][T12286] lowmem_reserve[]: 0 0 0 0 0
[  183.731480][T12286] Node 1 Normal free:2738452kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28092kB inactive_anon:0kB active_file:3408kB inactive_file:32128kB unevictable:9736kB writepending:36kB zspages:0kB present:3670012kB managed:3594692kB mlocked:6300kB bounce:0kB free_pcp:49920kB local_pcp:28176kB free_cma:0kB
[  183.754369][T12286] lowmem_reserve[]: 0 0 0 0 0
[  183.755876][T12286] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  183.759770][T12286] Node 0 DMA32: 302*4kB (UM) 217*8kB (UME) 340*16kB (UME) 43*32kB (ME) 116*64kB (UM) 116*128kB (UME) 74*256kB (UM) 74*512kB (UME) 61*1024kB (UME) 24*2048kB (UM) 277*4096kB (UM) = 1335072kB
[  183.790585][T12286] Node 0 Normal: 197*4kB (M) 228*8kB (UME) 231*16kB (UME) 79*32kB (UME) 49*64kB (UME) 35*128kB (U) 15*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 24900kB
[  183.800162][T12286] Node 1 Normal: 23*4kB (U) 312*8kB (UE) 227*16kB (UE) 364*32kB (UE) 557*64kB (UME) 310*128kB (UME) 51*256kB (UME) 31*512kB (UM) 7*1024kB (UME) 4*2048kB (UME) 635*4096kB (M) = 2738444kB
[  183.807368][T12286] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  183.812473][T12286] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  183.815696][T12286] 50882 total pagecache pages
[  183.817239][T12286] 0 pages in swap cache
[  183.818850][T12286] Free swap  = 124996kB
[  183.820339][T12286] Total swap = 124996kB
[  183.821988][T12286] 1834877 pages RAM
[  183.823272][T12286] 0 pages HighMem/MovableOnly
[  183.825200][T12286] 387242 pages reserved
[  183.826826][T12286] 0 pages cma reserved
[  184.050581][T12339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.053003][T12339] syzkaller0: entered promiscuous mode
[  184.056482][T12339] syzkaller0: entered allmulticast mode
[  184.070908][T12339] netlink: 'syz.3.1554': attribute type 1 has an invalid length.
[  184.075888][T12337] tipc: Resetting bearer <eth:syzkaller0>
[  184.084644][    C1] ip6_tnl_xmit_ctl: 5 callbacks suppressed
[  184.084657][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  184.084999][T12337] tipc: Disabling bearer <eth:syzkaller0>
[  184.123859][T12343] netlink: 'syz.0.1556': attribute type 1 has an invalid length.
[  184.147998][T12343] 8021q: adding VLAN 0 to HW filter on device bond49
[  184.185969][T12343] 8021q: adding VLAN 0 to HW filter on device bond49
[  184.191768][T12343] bond49: (slave vxcan17): The slave device specified does not support setting the MAC address
[  184.200849][T12343] bond49: (slave vxcan17): Error -95 calling set_mac_address
[  184.219576][T12349] netlink: 'syz.2.1555': attribute type 58 has an invalid length.
[  184.229857][T12357] veth17: entered promiscuous mode
[  184.234711][T12357] bond49: (slave veth17): Enslaving as an active interface with a down link
[  184.536238][T12392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.569258][T12391] tipc: Disabling bearer <eth:syzkaller0>
[  184.768520][T12405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.798613][T12403] tipc: Disabling bearer <eth:syzkaller0>
[  185.405839][T12456] netlink: 'syz.3.1577': attribute type 4 has an invalid length.
[  185.461281][T12457] netlink: 'syz.3.1577': attribute type 4 has an invalid length.
[  185.739038][T12474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.775847][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  185.798547][T12478] A link change request failed with some changes committed already. Interface ׌s~ may have been left with an inconsistent configuration, please check.
[  185.995486][T12496] netlink: 'syz.0.1589': attribute type 64 has an invalid length.
[  186.033240][T12498] netlink: 'syz.0.1590': attribute type 1 has an invalid length.
[  186.059028][T12498] bond50: (slave bridge13): making interface the new active one
[  186.062418][T12498] bond50: (slave bridge13): Enslaving as an active interface with an up link
[  186.065589][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  186.076253][T12502] syzkaller0: entered promiscuous mode
[  186.079348][T12502] syzkaller0: entered allmulticast mode
[  186.087743][T12501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.102135][T12502] tipc: Resetting bearer <eth:syzkaller0>
[  186.120077][T12502] tipc: Disabling bearer <eth:syzkaller0>
[  186.128828][T12506] syzkaller1: entered promiscuous mode
[  186.130540][T12506] syzkaller1: entered allmulticast mode
[  186.279329][T12520] netlink: 'syz.0.1595': attribute type 1 has an invalid length.
[  186.309895][T12520] vlan0: entered allmulticast mode
[  186.312047][T12520] bond51: entered allmulticast mode
[  186.804222][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  186.871121][T12565] __nla_validate_parse: 31 callbacks suppressed
[  186.871131][T12565] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1605'.
[  186.877326][T12565] 0X: renamed from caif0
[  186.880298][T12565] 0X: entered allmulticast mode
[  186.882050][T12565] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  186.912542][T12568] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1606'.
[  186.916578][T12568] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1606'.
[  186.919701][T12568] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1606'.
[  186.951670][T12572] netlink: 'syz.2.1607': attribute type 1 has an invalid length.
[  186.958787][T12572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1607'.
[  186.990583][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'.
[  187.003498][T12574] bond31: option lp_interval: invalid value (0)
[  187.005734][T12574] bond31: option lp_interval: allowed values 1 - 2147483647
[  187.009003][T12574] bond31 (unregistering): Released all slaves
[  187.120034][T12579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1609'.
[  187.125788][T12579] 8021q: adding VLAN 0 to HW filter on device bond31
[  187.128532][ T5681] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  187.131630][ T5681] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  187.393069][T12585] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1611'.
[  187.467888][T12594] validate_nla: 1 callbacks suppressed
[  187.467903][T12594] netlink: 'syz.3.1613': attribute type 1 has an invalid length.
[  187.488345][T12594] 8021q: adding VLAN 0 to HW filter on device bond22
[  187.500314][T12597] bond52: option fail_over_mac: invalid value (253)
[  187.503888][T12597] bond52 (unregistering): Released all slaves
[  187.518701][T12594] bond22: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  187.522126][T12594] bond22: entered allmulticast mode
[  187.536651][T12594] bond22: (slave ip6gretap2): Enslaving as an active interface with an up link
[  187.606872][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1614'.
[  187.742325][T12607] netlink: 'syz.0.1616': attribute type 8 has an invalid length.
[  187.743811][T12606] netlink: 'syz.0.1616': attribute type 8 has an invalid length.
[  187.745829][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'.
[  187.809674][T12616] netlink: 'syz.0.1618': attribute type 12 has an invalid length.
[  187.812157][T12616] netlink: 'syz.0.1618': attribute type 11 has an invalid length.
[  187.817940][T12617] netlink: 'syz.0.1618': attribute type 12 has an invalid length.
[  187.820750][T12617] netlink: 'syz.0.1618': attribute type 11 has an invalid length.
[  188.168890][T12635] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  188.176076][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  188.262289][T12646] vlan1: entered promiscuous mode
[  188.264627][T12646] bond0: entered promiscuous mode
[  188.266691][T12646] vlan1: entered allmulticast mode
[  188.268669][T12646] bond0: entered allmulticast mode
[  188.569355][T12672] netlink: 'syz.2.1630': attribute type 1 has an invalid length.
[  188.583802][T12672] 8021q: adding VLAN 0 to HW filter on device bond32
[  188.596189][T12672] bond32: (slave geneve6): making interface the new active one
[  188.600337][T12672] bond32: (slave geneve6): Enslaving as an active interface with an up link
[  188.603856][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.607570][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.611768][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.616565][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.227831][T12684] netlink: 'syz.0.1632': attribute type 1 has an invalid length.
[  189.312720][T12688] netlink: 'syz.3.1633': attribute type 1 has an invalid length.
[  189.315726][T12687] macvlan0: entered promiscuous mode
[  189.315738][T12687] macvlan0: entered allmulticast mode
[  189.361061][T12690] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  189.802572][T12735] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR
[  189.803571][T12734] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR
[  190.236117][T12779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.242389][T12779] syzkaller0: entered promiscuous mode
[  190.244693][T12779] syzkaller0: entered allmulticast mode
[  190.261088][T12779] tipc: Resetting bearer <eth:syzkaller0>
[  190.266239][T12778] tipc: Resetting bearer <eth:syzkaller0>
[  190.285816][T12778] tipc: Disabling bearer <eth:syzkaller0>
[  190.688052][T12803] bond54: entered promiscuous mode
[  190.691047][T12803] 8021q: adding VLAN 0 to HW filter on device bond54
[  190.718557][T12803] 8021q: adding VLAN 0 to HW filter on device bond54
[  190.721124][T12803] bond54: (slave wireguard2): The slave device specified does not support setting the MAC address
[  190.725499][T12803] bond54: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  190.731643][T12803] bond54: (slave wireguard2): making interface the new active one
[  190.734673][T12803] wireguard2: entered promiscuous mode
[  190.737077][T12803] bond54: (slave wireguard2): Enslaving as an active interface with an up link
[  190.797149][T12820] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.800049][T12820] syzkaller0: entered promiscuous mode
[  190.801892][T12820] syzkaller0: entered allmulticast mode
[  190.822013][T12820] tipc: Resetting bearer <eth:syzkaller0>
[  190.835292][T12820] tipc: Resetting bearer <eth:syzkaller0>
[  190.846319][T12820] tipc: Disabling bearer <eth:syzkaller0>
[  190.931198][T12833] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  190.935344][T12833] tipc: Enabled bearer <udp:syz0>, priority 10
[  190.978670][T12836] syzkaller1: entered promiscuous mode
[  190.981041][T12836] syzkaller1: entered allmulticast mode
[  191.055875][T12842] 8021q: adding VLAN 0 to HW filter on device bond23
[  191.101040][T12842] 8021q: adding VLAN 0 to HW filter on device batadv6
[  191.106204][T12842] bond23: (slave batadv6): making interface the new active one
[  191.110282][T12842] bond23: (slave batadv6): Enslaving as an active interface with an up link
[  191.222449][T12842] bond23 (unregistering): (slave batadv6): Releasing active interface
[  191.227772][T12842] bond23 (unregistering): Released all slaves
[  191.247929][T12848] 8021q: adding VLAN 0 to HW filter on device bond33
[  191.257090][T12853] bond33: (slave vlan4): Enslaving as an active interface with an up link
[  191.311352][T12858] batadv_slave_1: entered promiscuous mode
[  191.327667][T12858] batadv_slave_1 (unregistering): left promiscuous mode
[  191.364143][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  191.602557][T12869] svc: failed to register nfsdv3 RPC service (errno 111).
[  191.609830][T12869] svc: failed to register nfsaclv3 RPC service (errno 111).
[  191.669732][T12876] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  192.001619][T12898] x_tables: duplicate underflow at hook 1
[  192.054468][   T10] tipc: Node number set to 9427108
[  192.105787][T12900] dvmrp0: left allmulticast mode
[  192.107841][T12900] dvmrp1: left allmulticast mode
[  192.139405][T12905] __nla_validate_parse: 28 callbacks suppressed
[  192.139429][T12905] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1691'.
[  192.147450][T12903] netlink: 'syz.3.1690': attribute type 11 has an invalid length.
[  192.150798][T12903] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1690'.
[  192.337390][T12925] syzkaller0: entered promiscuous mode
[  192.339507][T12925] syzkaller0: entered allmulticast mode
[  192.354869][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1696'.
[  192.479643][T12942] validate_nla: 8 callbacks suppressed
[  192.479654][T12942] netlink: 'syz.2.1699': attribute type 39 has an invalid length.
[  192.491652][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1698'.
[  192.522844][T12944] bond55: entered promiscuous mode
[  192.525041][T12944] 8021q: adding VLAN 0 to HW filter on device bond55
[  192.566779][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  192.627253][T12944] bond55 (unregistering): Released all slaves
[  192.694496][T12958] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  192.783247][T12965] netlink: 'syz.3.1704': attribute type 1 has an invalid length.
[  192.823351][T12965] bond24: (slave geneve5): making interface the new active one
[  192.833955][T12965] bond24: (slave geneve5): Enslaving as an active interface with an up link
[  192.839873][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  192.842354][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  192.852012][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  192.855824][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  192.863876][T12968] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  192.905747][T12976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.908446][T12976] syzkaller0: entered promiscuous mode
[  192.910595][T12976] syzkaller0: entered allmulticast mode
[  192.921648][T12978] netlink: 'syz.3.1708': attribute type 1 has an invalid length.
[  192.973796][T12976] tipc: Resetting bearer <eth:syzkaller0>
[  192.977750][T12973] tipc: Resetting bearer <eth:syzkaller0>
[  192.981485][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1709'.
[  193.002303][T12973] tipc: Disabling bearer <eth:syzkaller0>
[  193.008762][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1709'.
[  193.012135][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1709'.
[  193.016511][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1709'.
[  193.019282][T12988] netlink: 'syz.3.1710': attribute type 1 has an invalid length.
[  193.019391][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1709'.
[  193.035438][T12988] 8021q: adding VLAN 0 to HW filter on device bond25
[  193.041182][T12984] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1709'.
[  193.097943][T12997] netlink: 'syz.0.1712': attribute type 8 has an invalid length.
[  193.128577][T12997] openvswitch: netlink: Message has -2 unknown bytes.
[  193.130686][T12997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.158953][T12997] bond55: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  193.163102][T12997] bond55 (unregistering): Released all slaves
[  193.297758][T13009] 8021q: adding VLAN 0 to HW filter on device bond3
[  193.393699][T13016] bridge0: port 1(batadv6) entered blocking state
[  193.414322][T13016] bridge0: port 1(batadv6) entered disabled state
[  193.417665][T13016] batadv6: entered allmulticast mode
[  193.420080][T13016] batadv6: entered promiscuous mode
[  193.490895][T13026] chnl_net:caif_netlink_parms(): no params data found
[  193.545374][T13027] chnl_net:caif_netlink_parms(): no params data found
[  193.577675][T13032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.592242][T13032] syzkaller0: entered promiscuous mode
[  193.594467][T13032] syzkaller0: entered allmulticast mode
[  193.597333][T13033] syzkaller1: entered promiscuous mode
[  193.599604][T13033] syzkaller1: entered allmulticast mode
[  193.611891][T13032] tipc: Resetting bearer <eth:syzkaller0>
[  193.665900][T13031] tipc: Resetting bearer <eth:syzkaller0>
[  193.666774][T13043] netlink: 'syz.3.1725': attribute type 1 has an invalid length.
[  193.691853][T13031] tipc: Disabling bearer <eth:syzkaller0>
[  193.697726][T13046] netlink: 'syz.2.1726': attribute type 1 has an invalid length.
[  193.806891][T13058] dummy0 speed is unknown, defaulting to 1000
[  193.809605][T13058] dummy0 speed is unknown, defaulting to 1000
[  193.814790][T13058] dummy0 speed is unknown, defaulting to 1000
[  193.826812][T13058] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  193.839151][T13058] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  193.876589][T13058] dummy0 speed is unknown, defaulting to 1000
[  193.885874][T13058] dummy0 speed is unknown, defaulting to 1000
[  193.894338][ T8133] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled
[  193.897782][ T8133] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled
[  193.905592][T13058] dummy0 speed is unknown, defaulting to 1000
[  193.935253][T13063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  193.956991][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  193.982395][T13073] syzkaller1: entered promiscuous mode
[  193.984966][T13073] syzkaller1: entered allmulticast mode
[  193.988256][T13073] netlink: 'syz.2.1733': attribute type 1 has an invalid length.
[  193.997814][T13073] netlink: 'syz.2.1733': attribute type 11 has an invalid length.
[  194.003516][T13073] netlink: 'syz.2.1733': attribute type 1 has an invalid length.
[  194.337521][T13103] ipvlan1: entered promiscuous mode
[  194.400836][T13113] IPv6: sit7: Disabled Multicast RS
[  194.402891][T13113] sit7: entered allmulticast mode
[  194.530612][T13131] 8021q: adding VLAN 0 to HW filter on device bond55
[  194.641140][T13143] dummy0 speed is unknown, defaulting to 1000
[  194.645743][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.684700][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  194.775916][T13144] dummy0 speed is unknown, defaulting to 1000
[  195.614132][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.801355][T13213] bond57: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  195.805881][T13213] bond57 (unregistering): Released all slaves
[  195.880446][T13222] dummy0 speed is unknown, defaulting to 1000
[  195.936110][T13231] dvmrp0: left allmulticast mode
[  195.937878][T13231] dvmrp8: left allmulticast mode
[  196.296298][T13251] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.299965][T13251] syzkaller0: entered promiscuous mode
[  196.302378][T13251] syzkaller0: entered allmulticast mode
[  196.317368][T13251] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  196.330331][T13251] tipc: Resetting bearer <eth:syzkaller0>
[  196.339852][T13243] tipc: Resetting bearer <eth:syzkaller0>
[  196.357721][T13243] tipc: Disabling bearer <eth:syzkaller0>
[  196.433043][T13256] syzkaller0: entered promiscuous mode
[  196.434906][T13256] syzkaller0: entered allmulticast mode
[  196.449924][T13256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.452760][T13255] tipc: Resetting bearer <eth:syzkaller0>
[  196.470973][T13255] tipc: Disabling bearer <eth:syzkaller0>
[  196.522651][T13258] dummy0 speed is unknown, defaulting to 1000
[  196.593062][T13265] vlan0: entered promiscuous mode
[  196.595835][T13265] bond0: entered promiscuous mode
[  196.597896][T13265] bond45: entered promiscuous mode
[  196.607246][T13266] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  196.611185][T13266] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  197.483089][T13295] __nla_validate_parse: 78 callbacks suppressed
[  197.483105][T13295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1792'.
[  197.523364][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1793'.
[  197.535002][T13300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1794'.
[  197.544057][T13297] 8021q: adding VLAN 0 to HW filter on device bond26
[  197.578383][T13302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1795'.
[  197.646233][T13297] bond26 (unregistering): Released all slaves
[  197.656916][T13302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1795'.
[  197.668034][T13304] bridge17: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  197.822991][T13313] geneve4: left promiscuous mode
[  197.831760][T13313] bond21: left promiscuous mode
[  197.835212][T13313] bond22: left allmulticast mode
[  197.853812][ T8133] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20002 - 0
[  197.856687][ T8133] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  197.862250][ T8133] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20002 - 0
[  197.869565][ T8133] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  197.875394][ T8133] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20002 - 0
[  197.878704][ T8133] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  197.881922][ T8133] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20002 - 0
[  197.895231][ T8133] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  197.929190][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'.
[  197.939240][T13324] validate_nla: 4 callbacks suppressed
[  197.939254][T13324] netlink: 'syz.0.1799': attribute type 1 has an invalid length.
[  197.961765][T13324] bond57: entered promiscuous mode
[  197.963564][T13324] 8021q: adding VLAN 0 to HW filter on device bond57
[  197.976911][T13324] 8021q: adding VLAN 0 to HW filter on device bond57
[  197.979670][T13324] bond57: (slave gre6): The slave device specified does not support setting the MAC address
[  197.983508][T13324] bond57: (slave gre6): Setting fail_over_mac to active for active-backup mode
[  197.987970][T13324] bond57: (slave gre6): Opening slave failed
[  198.021152][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'.
[  198.026078][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1799'.
[  198.553126][T13306] delete_channel: no stack
[  198.707947][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1807'.
[  198.709687][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'.
[  198.819065][T13361] bond36: option arp_validate: invalid value (18446744073491447809)
[  198.824289][T13361] bond36 (unregistering): Released all slaves
[  199.079558][T13369] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.083420][T13369] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.130065][T13369] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.133338][T13369] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.143658][T13378] lo: left promiscuous mode
[  199.191455][T13369] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.206716][T13369] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.267408][T13369] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.275235][T13369] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.349065][ T5836] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  199.352454][ T5836] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.370754][ T5836] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  199.377745][ T5836] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.386169][ T5836] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  199.393738][ T5836] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.416080][ T5836] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.421561][ T5836] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.432112][T13371] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.437565][T13371] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.449563][ T5836] ==================================================================
[  199.452748][ T5836] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  199.455677][ T5836] Read of size 8 at addr ffff8881616b24b0 by task kworker/u8:3/5836
[  199.459420][ T5836] 
[  199.460801][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  199.460817][ T5836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.460827][ T5836] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  199.460845][ T5836] Call Trace:
[  199.460851][ T5836]  <TASK>
[  199.460858][ T5836]  dump_stack_lvl+0x189/0x250
[  199.460876][ T5836]  ? __kasan_check_byte+0x12/0x40
[  199.460890][ T5836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.460905][ T5836]  ? lock_release+0x4b/0x3e0
[  199.460919][ T5836]  ? __virt_addr_valid+0x4a5/0x5c0
[  199.460937][ T5836]  print_report+0xca/0x240
[  199.460951][ T5836]  ? __mutex_lock+0x147/0x1350
[  199.460965][ T5836]  kasan_report+0x118/0x150
[  199.460975][ T5836]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  199.460989][ T5836]  ? __mutex_lock+0x147/0x1350
[  199.461005][ T5836]  __mutex_lock+0x147/0x1350
[  199.461021][ T5836]  ? __mutex_lock+0x5bb/0x1350
[  199.461037][ T5836]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  199.461050][ T5836]  ? __pfx___mutex_lock+0x10/0x10
[  199.461066][ T5836]  ? __lock_acquire+0xab9/0xd20
[  199.461081][ T5836]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  199.461095][ T5836]  ? process_scheduled_works+0x9ef/0x17b0
[  199.461109][ T5836]  ? process_scheduled_works+0x9ef/0x17b0
[  199.461121][ T5836]  process_scheduled_works+0xae1/0x17b0
[  199.461142][ T5836]  ? __pfx_process_scheduled_works+0x10/0x10
[  199.461159][ T5836]  worker_thread+0x8a0/0xda0
[  199.461179][ T5836]  kthread+0x711/0x8a0
[  199.461195][ T5836]  ? __pfx_worker_thread+0x10/0x10
[  199.461207][ T5836]  ? __pfx_kthread+0x10/0x10
[  199.461222][ T5836]  ? _raw_spin_unlock_irq+0x23/0x50
[  199.461234][ T5836]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.461247][ T5836]  ? __pfx_kthread+0x10/0x10
[  199.461262][ T5836]  ret_from_fork+0x4bc/0x870
[  199.461275][ T5836]  ? __pfx_ret_from_fork+0x10/0x10
[  199.461289][ T5836]  ? __switch_to_asm+0x39/0x70
[  199.461298][ T5836]  ? __switch_to_asm+0x33/0x70
[  199.461308][ T5836]  ? __pfx_kthread+0x10/0x10
[  199.461322][ T5836]  ret_from_fork_asm+0x1a/0x30
[  199.461338][ T5836]  </TASK>
[  199.461342][ T5836] 
[  199.542342][ T5836] Allocated by task 13369:
[  199.544140][ T5836]  kasan_save_track+0x3e/0x80
[  199.546041][ T5836]  __kasan_kmalloc+0x93/0xb0
[  199.547906][ T5836]  __kmalloc_noprof+0x411/0x7f0
[  199.549894][ T5836]  udp_tunnel_nic_netdevice_event+0x4c3/0x1810
[  199.552346][ T5836]  notifier_call_chain+0x1b6/0x3e0
[  199.554420][ T5836]  register_netdevice+0x1608/0x1ae0
[  199.556531][ T5836]  nsim_create+0xb3f/0x1050
[  199.558382][ T5836]  __nsim_dev_port_add+0x6b6/0xb10
[  199.560372][ T5836]  nsim_dev_port_add_all+0x37/0xf0
[  199.562431][ T5836]  nsim_dev_reload_up+0x451/0x780
[  199.564436][ T5836]  devlink_reload+0x4ec/0x8d0
[  199.566296][ T5836]  devlink_nl_reload_doit+0xb35/0xd50
[  199.568444][ T5836]  genl_family_rcv_msg_doit+0x215/0x300
[  199.570700][ T5836]  genl_rcv_msg+0x60e/0x790
[  199.572468][ T5836]  netlink_rcv_skb+0x208/0x470
[  199.574406][ T5836]  genl_rcv+0x28/0x40
[  199.576044][ T5836]  netlink_unicast+0x82f/0x9e0
[  199.577996][ T5836]  netlink_sendmsg+0x805/0xb30
[  199.579919][ T5836]  __sock_sendmsg+0x21c/0x270
[  199.581764][ T5836]  ____sys_sendmsg+0x505/0x830
[  199.583639][ T5836]  ___sys_sendmsg+0x21f/0x2a0
[  199.585533][ T5836]  __x64_sys_sendmsg+0x19b/0x260
[  199.587538][ T5836]  do_syscall_64+0xfa/0xfa0
[  199.589373][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.591724][ T5836] 
[  199.592696][ T5836] Freed by task 13371:
[  199.594332][ T5836]  kasan_save_track+0x3e/0x80
[  199.596199][ T5836]  __kasan_save_free_info+0x46/0x50
[  199.598327][ T5836]  __kasan_slab_free+0x5c/0x80
[  199.600269][ T5836]  kfree+0x19a/0x6d0
[  199.601869][ T5836]  udp_tunnel_nic_netdevice_event+0x11ab/0x1810
[  199.604336][ T5836]  notifier_call_chain+0x1b6/0x3e0
[  199.606423][ T5836]  unregister_netdevice_many_notify+0x1860/0x2390
[  199.609019][ T5836]  unregister_netdevice_queue+0x33c/0x380
[  199.611248][ T5836]  nsim_destroy+0x1e5/0x680
[  199.613071][ T5836]  __nsim_dev_port_del+0x14d/0x1b0
[  199.615099][ T5836]  nsim_dev_reload_destroy+0x288/0x490
[  199.617284][ T5836]  nsim_dev_reload_down+0x8a/0xc0
[  199.619250][ T5836]  devlink_reload+0x1b6/0x8d0
[  199.621146][ T5836]  devlink_nl_reload_doit+0xb35/0xd50
[  199.623222][ T5836]  genl_family_rcv_msg_doit+0x215/0x300
[  199.625347][ T5836]  genl_rcv_msg+0x60e/0x790
[  199.627202][ T5836]  netlink_rcv_skb+0x208/0x470
[  199.629072][ T5836]  genl_rcv+0x28/0x40
[  199.630706][ T5836]  netlink_unicast+0x82f/0x9e0
[  199.632635][ T5836]  netlink_sendmsg+0x805/0xb30
[  199.634492][ T5836]  __sock_sendmsg+0x21c/0x270
[  199.636379][ T5836]  ____sys_sendmsg+0x505/0x830
[  199.638342][ T5836]  ___sys_sendmsg+0x21f/0x2a0
[  199.640235][ T5836]  __x64_sys_sendmsg+0x19b/0x260
[  199.642214][ T5836]  do_syscall_64+0xfa/0xfa0
[  199.644074][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.646445][ T5836] 
[  199.647435][ T5836] Last potentially related work creation:
[  199.649746][ T5836]  kasan_save_stack+0x3e/0x60
[  199.651663][ T5836]  kasan_record_aux_stack+0xbd/0xd0
[  199.653777][ T5836]  insert_work+0x3d/0x330
[  199.655534][ T5836]  __queue_work+0xbaf/0xfb0
[  199.657339][ T5836]  queue_work_on+0x181/0x270
[  199.659163][ T5836]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  199.661374][ T5836]  udp_tunnel_push_rx_port+0x180/0x200
[  199.663485][ T5836]  geneve_offload_rx_ports+0xd7/0x160
[  199.665452][ T5836]  geneve_netdevice_event+0x6a/0x80
[  199.667350][ T5836]  notifier_call_chain+0x1b6/0x3e0
[  199.668895][ T5836]  call_netdevice_notifiers+0x88/0xc0
[  199.670542][ T5836]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  199.672417][ T5836]  notifier_call_chain+0x1b6/0x3e0
[  199.674303][ T5836]  register_netdevice+0x1608/0x1ae0
[  199.675960][ T5836]  nsim_create+0xb3f/0x1050
[  199.677492][ T5836]  __nsim_dev_port_add+0x6b6/0xb10
[  199.679136][ T5836]  nsim_dev_port_add_all+0x37/0xf0
[  199.680794][ T5836]  nsim_dev_reload_up+0x451/0x780
[  199.682526][ T5836]  devlink_reload+0x4ec/0x8d0
[  199.683942][ T5836]  devlink_nl_reload_doit+0xb35/0xd50
[  199.685583][ T5836]  genl_family_rcv_msg_doit+0x215/0x300
[  199.687252][ T5836]  genl_rcv_msg+0x60e/0x790
[  199.688630][ T5836]  netlink_rcv_skb+0x208/0x470
[  199.690236][ T5836]  genl_rcv+0x28/0x40
[  199.691684][ T5836]  netlink_unicast+0x82f/0x9e0
[  199.693373][ T5836]  netlink_sendmsg+0x805/0xb30
[  199.694974][ T5836]  __sock_sendmsg+0x21c/0x270
[  199.696707][ T5836]  ____sys_sendmsg+0x505/0x830
[  199.698182][ T5836]  ___sys_sendmsg+0x21f/0x2a0
[  199.699844][ T5836]  __x64_sys_sendmsg+0x19b/0x260
[  199.701657][ T5836]  do_syscall_64+0xfa/0xfa0
[  199.703216][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.705019][ T5836] 
[  199.705744][ T5836] Second to last potentially related work creation:
[  199.707680][ T5836]  kasan_save_stack+0x3e/0x60
[  199.709249][ T5836]  kasan_record_aux_stack+0xbd/0xd0
[  199.711057][ T5836]  insert_work+0x3d/0x330
[  199.712627][ T5836]  __queue_work+0xcd2/0xfb0
[  199.714338][ T5836]  queue_work_on+0x181/0x270
[  199.716106][ T5836]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  199.718376][ T5836]  udp_tunnel_push_rx_port+0x180/0x200
[  199.720560][ T5836]  vxlan_offload_rx_ports+0x139/0x200
[  199.722705][ T5836]  vxlan_netdevice_event+0x111/0x470
[  199.724829][ T5836]  notifier_call_chain+0x1b6/0x3e0
[  199.726889][ T5836]  call_netdevice_notifiers+0x88/0xc0
[  199.729037][ T5836]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  199.731426][ T5836]  notifier_call_chain+0x1b6/0x3e0
[  199.733372][ T5836]  register_netdevice+0x1608/0x1ae0
[  199.735466][ T5836]  nsim_create+0xb3f/0x1050
[  199.737267][ T5836]  __nsim_dev_port_add+0x6b6/0xb10
[  199.739203][ T5836]  nsim_dev_port_add_all+0x37/0xf0
[  199.741182][ T5836]  nsim_dev_reload_up+0x451/0x780
[  199.743103][ T5836]  devlink_reload+0x4ec/0x8d0
[  199.744965][ T5836]  devlink_nl_reload_doit+0xb35/0xd50
[  199.747119][ T5836]  genl_family_rcv_msg_doit+0x215/0x300
[  199.749226][ T5836]  genl_rcv_msg+0x60e/0x790
[  199.751005][ T5836]  netlink_rcv_skb+0x208/0x470
[  199.752899][ T5836]  genl_rcv+0x28/0x40
[  199.754529][ T5836]  netlink_unicast+0x82f/0x9e0
[  199.756435][ T5836]  netlink_sendmsg+0x805/0xb30
[  199.758389][ T5836]  __sock_sendmsg+0x21c/0x270
[  199.760280][ T5836]  ____sys_sendmsg+0x505/0x830
[  199.762178][ T5836]  ___sys_sendmsg+0x21f/0x2a0
[  199.764068][ T5836]  __x64_sys_sendmsg+0x19b/0x260
[  199.766012][ T5836]  do_syscall_64+0xfa/0xfa0
[  199.767845][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.770209][ T5836] 
[  199.771173][ T5836] The buggy address belongs to the object at ffff8881616b2400
[  199.771173][ T5836]  which belongs to the cache kmalloc-256 of size 256
[  199.776633][ T5836] The buggy address is located 176 bytes inside of
[  199.776633][ T5836]  freed 256-byte region [ffff8881616b2400, ffff8881616b2500)
[  199.781871][ T5836] 
[  199.782817][ T5836] The buggy address belongs to the physical page:
[  199.785205][ T5836] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1616b2
[  199.788541][ T5836] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  199.791704][ T5836] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  199.794607][ T5836] page_type: f5(slab)
[  199.796142][ T5836] raw: 057ff00000000040 ffff888100041b40 ffffea0005ce3280 dead000000000004
[  199.799361][ T5836] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  199.802663][ T5836] head: 057ff00000000040 ffff888100041b40 ffffea0005ce3280 dead000000000004
[  199.805897][ T5836] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  199.809195][ T5836] head: 057ff00000000001 ffffea000585ac81 00000000ffffffff 00000000ffffffff
[  199.812476][ T5836] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  199.815684][ T5836] page dumped because: kasan: bad access detected
[  199.818119][ T5836] page_owner tracks the page as allocated
[  199.820301][ T5836] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5950, tgid 5949 (syz.1.18), ts 60365471095, free_ts 60335113879
[  199.827235][ T5836]  post_alloc_hook+0x240/0x2a0
[  199.828748][ T5836]  get_page_from_freelist+0x2365/0x2440
[  199.830426][ T5836]  __alloc_frozen_pages_noprof+0x181/0x370
[  199.832247][ T5836]  allocate_slab+0x71/0x3a0
[  199.833715][ T5836]  ___slab_alloc+0xe94/0x18a0
[  199.835389][ T5836]  __slab_alloc+0x65/0x100
[  199.836862][ T5836]  __kmalloc_node_noprof+0x5cc/0x800
[  199.838725][ T5836]  allocate_slab+0x179/0x3a0
[  199.840273][ T5836]  ___slab_alloc+0xe94/0x18a0
[  199.841803][ T5836]  __slab_alloc+0x65/0x100
[  199.843391][ T5836]  __kvmalloc_node_noprof+0x6ba/0x910
[  199.845073][ T5836]  alloc_fdtable+0x169/0x2c0
[  199.846821][ T5836]  dup_fd+0x86c/0xb60
[  199.848328][ T5836]  ksys_unshare+0x450/0x8c0
[  199.850097][ T5836]  __x64_sys_unshare+0x38/0x50
[  199.851869][ T5836]  do_syscall_64+0xfa/0xfa0
[  199.853529][ T5836] page last free pid 47 tgid 47 stack trace:
[  199.855550][ T5836]  __free_frozen_pages+0xbc4/0xd30
[  199.857423][ T5836]  rcu_core+0xcab/0x1770
[  199.859055][ T5836]  handle_softirqs+0x286/0x870
[  199.860553][ T5836]  do_softirq+0xec/0x180
[  199.861932][ T5836]  __local_bh_enable_ip+0x17d/0x1c0
[  199.863529][ T5836]  ipv6_get_lladdr+0x2aa/0x3f0
[  199.865098][ T5836]  mld_newpack+0x420/0xc40
[  199.866472][ T5836]  add_grhead+0x5a/0x2a0
[  199.867778][ T5836]  add_grec+0x1452/0x1740
[  199.869108][ T5836]  mld_send_initial_cr+0x288/0x550
[  199.870696][ T5836]  mld_dad_work+0x46/0x490
[  199.872055][ T5836]  process_scheduled_works+0xae1/0x17b0
[  199.873730][ T5836]  worker_thread+0x8a0/0xda0
[  199.875140][ T5836]  kthread+0x711/0x8a0
[  199.876390][ T5836]  ret_from_fork+0x4bc/0x870
[  199.877967][ T5836]  ret_from_fork_asm+0x1a/0x30
[  199.879428][ T5836] 
[  199.880207][ T5836] Memory state around the buggy address:
[  199.881874][ T5836]  ffff8881616b2380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  199.884273][ T5836]  ffff8881616b2400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.886762][ T5836] >ffff8881616b2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.889454][ T5836]                                      ^
[  199.891162][ T5836]  ffff8881616b2500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  199.893578][ T5836]  ffff8881616b2580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  199.896081][ T5836] ==================================================================
[  199.911449][ T5836] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  199.913620][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  199.916342][ T5836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.919628][ T5836] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  199.922298][ T5836] Call Trace:
[  199.923573][ T5836]  <TASK>
[  199.924604][ T5836]  dump_stack_lvl+0x99/0x250
[  199.926180][ T5836]  ? __asan_memcpy+0x40/0x70
[  199.927639][ T5836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.929217][ T5836]  ? __pfx__printk+0x10/0x10
[  199.930649][ T5836]  vpanic+0x237/0x6d0
[  199.931858][ T5836]  ? __pfx_vpanic+0x10/0x10
[  199.933293][ T5836]  ? preempt_schedule+0xae/0xc0
[  199.935055][ T5836]  ? __pfx_preempt_schedule+0x10/0x10
[  199.937263][ T5836]  panic+0xb9/0xc0
[  199.938550][ T5836]  ? __pfx_panic+0x10/0x10
[  199.939945][ T5836]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  199.941941][ T5836]  ? __mutex_lock+0x147/0x1350
[  199.943459][ T5836]  check_panic_on_warn+0x89/0xb0
[  199.944951][ T5836]  ? __mutex_lock+0x147/0x1350
[  199.946377][ T5836]  end_report+0x78/0x160
[  199.947731][ T5836]  kasan_report+0x129/0x150
[  199.949298][ T5836]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  199.951369][ T5836]  ? __mutex_lock+0x147/0x1350
[  199.952842][ T5836]  __mutex_lock+0x147/0x1350
[  199.954251][ T5836]  ? __mutex_lock+0x5bb/0x1350
[  199.955779][ T5836]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  199.958020][ T5836]  ? __pfx___mutex_lock+0x10/0x10
[  199.959922][ T5836]  ? __lock_acquire+0xab9/0xd20
[  199.961524][ T5836]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  199.963360][ T5836]  ? process_scheduled_works+0x9ef/0x17b0
[  199.965088][ T5836]  ? process_scheduled_works+0x9ef/0x17b0
[  199.966809][ T5836]  process_scheduled_works+0xae1/0x17b0
[  199.968474][ T5836]  ? __pfx_process_scheduled_works+0x10/0x10
[  199.970278][ T5836]  worker_thread+0x8a0/0xda0
[  199.971726][ T5836]  kthread+0x711/0x8a0
[  199.972993][ T5836]  ? __pfx_worker_thread+0x10/0x10
[  199.974521][ T5836]  ? __pfx_kthread+0x10/0x10
[  199.975934][ T5836]  ? _raw_spin_unlock_irq+0x23/0x50
[  199.977528][ T5836]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.979104][ T5836]  ? __pfx_kthread+0x10/0x10
[  199.980523][ T5836]  ret_from_fork+0x4bc/0x870
[  199.981928][ T5836]  ? __pfx_ret_from_fork+0x10/0x10
[  199.983483][ T5836]  ? __switch_to_asm+0x39/0x70
[  199.984935][ T5836]  ? __switch_to_asm+0x33/0x70
[  199.986377][ T5836]  ? __pfx_kthread+0x10/0x10
[  199.987789][ T5836]  ret_from_fork_asm+0x1a/0x30
[  199.989236][ T5836]  </TASK>
[  199.990721][ T5836] Kernel Offset: disabled
[  199.992031][ T5836] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:18:10  Registers:
info registers vcpu 0

CPU#0
RAX=ffff8881a953ba00 RBX=ffffc9000ab26b40 RCX=ffffc9000ab26b10 RDX=ffff8881a953ba00
RSI=ffffc9000ab26b40 RDI=ffffffff81ac2cb0 RBP=ffffc9000ab26b10 RSP=ffffc9000ab26a88
R8 =ffffc9000ab26c7f R9 =0000000000000000 R10=ffffc9000ab26c00 R11=fffff52001564d90
R12=ffff8881a953ba00 R13=1ffff92001564d7c R14=ffffffff81ac2cb0 R15=0000000000000000
RIP=ffffffff816a2f8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fea072e96c0 ffffffff 00c00000
GS =0000 ffff88818eb41000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000004d5030 CR3=0000000112a24000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f09e081315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90005257110
R8 =ffff8881097e0237 R9 =1ffff110212fc046 R10=dffffc0000000000 R11=ffffffff8514ba60
R12=dffffc0000000000 R13=ffffffff997d38e4 R14=ffffffff99ae6f00 R15=0000000000000000
RIP=ffffffff8514badc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f41000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2f2b46 CR3=0000000174cba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fea065b7498 00007fea065b7470 XMM03=00007fea065b74a8 00007fea065b74a0
XMM04=00007fea0711d100 00007fea065b7460 XMM05=00007fea065b7478 00007fea065b74c0
XMM06=00007fea065b74b8 00007fea065b74b0 XMM07=00007fea065b74a8 00007fea065b74a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fea0641315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
