last executing test programs:

1.970560994s ago: executing program 1 (id=2621):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r7, 0x0)
mmap(&(0x7f000090d000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0xae9fe000)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
sendfile(r5, r8, 0x0, 0x9cba)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r9, 0x29, 0xd0, &(0x7f0000000040), 0x4)
r10 = accept4(r3, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.701057049s ago: executing program 1 (id=2625):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x6e21, 0x7, @mcast2, 0x3}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
syz_emit_ethernet(0xffffffffffffffac, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd605ad3af00080000fe8000000000000000000000000000aaff020000000000000000000000000001730001010000009b045c66"], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2503fe0000000000000016000000140001808c9b0cf31ef3af153284cc00040e0001"], 0x28}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xba92}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x1, 0x3, 0x0, 0x7, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0xfffffffffffffff7, 0xfffffffffffffffd, 0xfb}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "f57de0eb74757e1d"}, 0x3}}]}, 0x154}}, 0x404c004)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r8, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4)
recvmmsg(r8, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/83, 0x53}, 0x2}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x40)
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0x6bb}], 0x1, 0x40000103, 0x0)

1.63979822s ago: executing program 2 (id=2628):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x183980, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d12", 0x5}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
shutdown(r2, 0x1)
getpeername(r2, 0x0, &(0x7f00000002c0))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
getsockname$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r5], 0x20}}, 0x4000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x183980, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) (async)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d12", 0x5}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) (async)
shutdown(r2, 0x1) (async)
getpeername(r2, 0x0, &(0x7f00000002c0)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
getsockname$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x2}) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r5], 0x20}}, 0x4000) (async)

1.381770459s ago: executing program 2 (id=2631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
listen(r7, 0x0)
mmap(&(0x7f000090d000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0xae9fe000)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
sendfile(r5, r8, 0x0, 0x9cba)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r9, 0x29, 0xd0, &(0x7f0000000040), 0x4)
r10 = accept4(r3, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.32138054s ago: executing program 0 (id=2633):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xbce}, 0x8)

1.261410208s ago: executing program 0 (id=2634):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a80100001900010028bd7000fbdbdf251d010900500012804c00d5804500cd804b2f4058ee43e9c8ed94431e2f1d57e3ad39148a6107256938f2f8f2ad25690e8fcf14fa110708387d9119de25eadf839f7130586836f1e818d079d089f8b19dc3a718000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0xc0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3100000000280004800800024000000000080001400000000514000300"], 0xf4}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x30, 0xffffffffffffffff, 0x0)
sendto$inet(r4, &(0x7f0000000000)="050105001617007e", 0x8, 0x0, &(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)}, 0x4040000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x7, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x4}}]}, 0x38}, 0x1, 0x7}, 0x0)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x200000000000000, 0x1}}, 0x40)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))

1.181200413s ago: executing program 0 (id=2635):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x38}}, 0x884)

1.108297607s ago: executing program 2 (id=2636):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd53}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x66)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44e3eeff0f00030500"/20, @ANYRES32=0x0, @ANYBLOB="0001000000500000240012800b00010067656e65766500001400028005000800010000000500090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20010)

1.040396332s ago: executing program 2 (id=2637):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async, rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r5, r5, 0x2f}, 0x20) (async, rerun: 32)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r5, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x40) (async, rerun: 32)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfefffdfc, {0x0, 0x0, 0x0, r8, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 64)
close(0x4) (rerun: 64)

1.034271334s ago: executing program 0 (id=2638):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r6], 0x1c}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r7 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
socket(0x23, 0x3, 0x200)
close(r8)
r9 = socket$unix(0x1, 0x2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x160, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_FEATURES_WANTED={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "9aa426faccf4a9ca1cc13bb30cf16de2b3f3ee708aae0ba412ba87c78c910ad31fb5e3153d4acfecf77e6d92b3e70a9f07ce2680210948942936642be5dc09ea3749bca88618db72d80e2eb2b6b9181a64e6470e413bd04d97dbed9d7c65199920e358e4866fb618ed69646cfcabef4e4cc1231a65b304a7699c2340dfe5ba4b90fd4a5d7d5beaa0c467656e458b6bc9a1bd413e088e9ab48107e0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x8840)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

981.26622ms ago: executing program 2 (id=2639):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000008b0000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x14, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6400000010003904fdffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0198050043130500440012800b000100677265746170000034000280080004000600000006000e00020000000500160002000000060010004e230000060018000200000006000f"], 0x64}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r3, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r3, 0xd3)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x800)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x11, 0x3, 0x10)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000140))
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x0, 0x0, @empty}}}}}, 0x0)
sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r9 = socket$unix(0x1, 0x2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r12, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xfe80, @empty}, 0x71, &(0x7f0000001080)=[{&(0x7f0000001980)="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", 0x1004}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x12, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0xff00)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x3, 0x3, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008804)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0)

911.522339ms ago: executing program 0 (id=2640):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x48, 0x0, 0x0, &(0x7f0000004040)}, 0x1}], 0x1, 0x40010002, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x2000)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x4)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r5, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r5, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000700)={r5, 0x94, "9b637ac76f750421b18a54e1a2428de8e83687a2a97f5e6738d425a031037fd65f8f0dd1dbde28272c9ce72b3c3cc25d505c6286397387b8de0bcfe0d16343ff03f0c5c79bfe905c94efd680bae0fb0c4ec2691f8f3da35bb10e88511de77346fc1431c13689dac455778f1e0787c882662676d45a52a6178371fd348560b8fb0b11f2871807db67e79adf9c402e73fe2a2fe46e"}, &(0x7f00000007c0)=0x9c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x21, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x20000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x0, 0x2, 0x2, 0x8, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x68}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x72, &(0x7f0000000680)=""/114, 0x41000, 0x63, '\x00', 0x0, @xdp, r3, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x2, &(0x7f00000008c0)=[r3], &(0x7f0000000900)=[{0x5, 0x3, 0x4}, {0x0, 0x5, 0x8, 0x5}], 0x10, 0x8}, 0x94)
write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=<r8=>r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r12 = socket(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYRES8=r10, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

819.705755ms ago: executing program 1 (id=2641):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newsa={0x158, 0x10, 0x633, 0x0, 0x200000, {{@in=@local, @in=@remote, 0xffff, 0x3ffc, 0x5e21, 0x8001, 0x0, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d5, 0x32}, @in=@rand_addr=0x64010102, {0x326, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x7efffffe}, {0x0, 0x0, 0x0, 0x20000000004}, {0x7, 0x0, 0x2}, 0x70bd21, 0x3500, 0x2, 0x1, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1-ce\x00'}, 0x0, 0x80}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x40}}}]}, 0x158}}, 0x24008800)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}})
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'})
r5 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="0f3c562e", @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
close(r0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$NL80211_CMD_GET_WOWLAN(r13, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r11, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1a}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xf, 0x74}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r16}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r15}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

750.837223ms ago: executing program 2 (id=2642):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x19, &(0x7f0000001fc0)=""/4096, &(0x7f0000000000)=0x1000)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000340)='b', 0x1}], 0x1}}], 0x2, 0x10)
shutdown(r1, 0x1) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xffffffff}, 0xc) (async, rerun: 32)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
ioctl$NS_GET_PARENT(r4, 0xb702, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) (async)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x170bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0xb881}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844)
sendto$packet(r2, &(0x7f0000000640)="e8b77052a9", 0x5, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000100), &(0x7f00000001c0)=0x4)

661.469596ms ago: executing program 1 (id=2643):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1)
sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001000000000000000300d6d8fe137a41cba80000180000000100000000000000040000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x9c)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
write(r4, 0x0, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="726177007d68000004456e373119eef1000000a08900000000ff000000000000030000000000000000000000000000000000000000003e00000000000000000000000057070bb55779fd5f7f00000000000000d62e6bfb8cd778bf9354e119ef00000000003e10c87f84a77b744c50d6052c146a488d38d7d3e5af749333f13a09705b117c1e821edcca4ad2597ef5bc396f9a733f3bf8e2a3a94b62a7e4fd7be304d50ea8e53cf2b2670da7776b19a491d3e831045ce9319169796bc52b867a58"], 0x58)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000b000000000000bdab2ce6f4152da300"/36], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r8], 0x40}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000080), &(0x7f0000000a40)=@udp=r8}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x110, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@rand_addr=0x64010101, @loopback, 0x0, 0xffffff00, 'geneve0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x32, 0x3, 0x2}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x3, 0x4, 0x2, 0x4], 0x5, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x4, 0x2, [0x20, 0x3f, 0x36, 0x30, 0x32, 0x7, 0x20, 0x7, 0x3c, 0x24, 0x16, 0x4, 0x1b, 0x14, 0x33, 0x40], 0x2, 0x1, 0x7}}}, {{@ip={@private=0xa010102, @private=0xa010102, 0xffffffff, 0x0, 'veth0_virt_wifi\x00', 'veth1_virt_wifi\x00', {}, {}, 0x5e, 0x3, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "900f"}}, @common=@ttl={{0x28}, {0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x5, 0x7, 0x1, 0x1, 0x4], 0x2, 0x7}, {0x2, [0x3, 0x4, 0x3, 0x5, 0x4, 0x1], 0x4, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)

388.804088ms ago: executing program 1 (id=2644):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000040))
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r2, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0xc, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x28}, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xd86, 0x6, 0x4, 0x0, 'syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x7fff, 0x8, 0x1ff, 'syz1\x00', 'syz1\x00', {0x4ef0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000100004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900020000000000180012800eea0000697036677265746170000000040002800a0001000078000000000000000c18b98faf53eb55d406b0507d14da8fb00a05ea3a659e1d17883c1509bb29fb3c4f78054fb9f69687488129b01e1562a6238a017845d545bb2616201d9ea6608a21cc51a7bfcf7170a651864dfda13baf83c3e283c954"], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))
pipe(&(0x7f0000000440))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000480))
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80001, 0x0)

283.464625ms ago: executing program 1 (id=2645):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
gettid()
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000280)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x5c, r9, 0x11, 0x70bd2e, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x5c}, 0x1, 0x400000000000000, 0x0, 0x20040084}, 0x0)
socket(0x2, 0xa, 0x379)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x64, 0x6, 0x580, 0x0, 0x4b8, 0x4b8, 0x140, 0x140, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x6, 0x0, {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x0, 0x2, 0x9, 0x9911, 0x6, 0x7, 0x32, 0xe8, 0x0, 0x1ff, 0x7, 0x2, 0xd, 0x2, 0x4, 0x84], 0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_to_bond\x00', 'ip6tnl0\x00', {0xff}, {}, 0x6, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x3ff, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [0xffffff00, 0x0, 0x0, 0xffffff00], 'veth0_to_team\x00', 'team_slave_1\x00', {}, {0xff}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000001001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)

0s ago: executing program 0 (id=2646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000308000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000e30002000c002b80080003000300000008001b0000000000"], 0x34}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) (async)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000380)=0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, <r6=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000580), &(0x7f0000000080)=@udp6, 0x1}, 0x20)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) (async)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000400)={0x0, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, @phonet={0x23, 0x40, 0x0, 0x90}, @phonet={0x23, 0x6, 0xd, 0x2}, 0x3, 0x0, 0x0, 0x0, 0xa, &(0x7f00000003c0)='ip6tnl0\x00', 0x5, 0xe, 0x9}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x14, r8, 0x2, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x5)

kernel console output (not intermixed with test programs):

istering): Released all slaves
[  235.982041][T12585] netlink: 'syz.1.1670': attribute type 9 has an invalid length.
[  235.996190][ T5668] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.999639][ T5668] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.068546][ T5668] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.082508][ T5668] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.168384][T12595] __nla_validate_parse: 21 callbacks suppressed
[  236.168401][T12595] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1673'.
[  236.254001][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'.
[  236.258178][T12600] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.260908][T12600] 8021q: adding VLAN 0 to HW filter on device team0
[  236.263671][T12600] tipc: Resetting bearer <ib:team0>
[  236.266497][T12600] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.290012][T12600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  236.294322][T12600] veth1_macvtap: left promiscuous mode
[  236.296803][T12600] veth0_macvtap: left promiscuous mode
[  236.299105][T12600] veth0_macvtap: entered promiscuous mode
[  236.302125][T12600] veth1_macvtap: entered promiscuous mode
[  236.307141][T12600] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  236.326390][ T5668] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.328982][ T5668] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.331453][ T5668] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.351924][ T5668] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.374463][T12606] netlink: 'syz.1.1677': attribute type 1 has an invalid length.
[  236.390158][T12606] 8021q: adding VLAN 0 to HW filter on device bond49
[  236.465916][T12613] netlink: 'syz.2.1679': attribute type 1 has an invalid length.
[  236.490610][T12613] bond45: (slave vxcan3): The slave device specified does not support setting the MAC address
[  236.495753][T12613] bond45: (slave vxcan3): Error -95 calling set_mac_address
[  236.534427][T12619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1679'.
[  236.551251][T12619] bond45: (slave bridge21): Enslaving as an active interface with a down link
[  236.620757][T12619] macvlan5: entered promiscuous mode
[  236.625658][T12619] macvlan5: entered allmulticast mode
[  236.627800][T12619] bond45: entered promiscuous mode
[  236.632160][T12619] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  236.636678][T12619] bond45: left promiscuous mode
[  236.802754][T12634] syzkaller0: entered promiscuous mode
[  236.812460][T12634] syzkaller0: entered allmulticast mode
[  237.015438][T12638] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1687'.
[  237.178137][T12649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1689'.
[  237.539277][T12664] lo speed is unknown, defaulting to 1000
[  237.564809][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1692'.
[  237.574287][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1692'.
[  237.665338][T12675] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1694'.
[  237.736549][T12678] gre0: left promiscuous mode
[  237.744142][T12678] tipc: Resetting bearer <ib:team0>
[  237.747742][T12678] wg1: left promiscuous mode
[  237.760484][T12678] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  237.866367][T12689] validate_nla: 1 callbacks suppressed
[  237.866378][T12689] netlink: 'syz.1.1698': attribute type 1 has an invalid length.
[  237.909785][T12689] 8021q: adding VLAN 0 to HW filter on device bond50
[  237.938250][T12689] macvlan4: entered promiscuous mode
[  237.950362][T12689] macvlan4: entered allmulticast mode
[  237.977777][T12689] bond50: entered allmulticast mode
[  237.979564][T12689] bond50: entered promiscuous mode
[  237.997284][T12689] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  238.027329][T12689] team0: Device macvlan4 is of different type
[  238.062159][T12689] bond50: left allmulticast mode
[  238.076374][T12689] bond50: left promiscuous mode
[  238.086371][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'.
[  238.089174][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'.
[  238.140963][T12701] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  238.427348][T12739] xt_l2tp: v2 doesn't support IP mode
[  239.129191][T12790] netlink: 'syz.1.1709': attribute type 1 has an invalid length.
[  239.149265][T12790] workqueue: Failed to create a rescuer kthread for wq "bond51": -EINTR
[  239.240859][T12799] syzkaller1: entered promiscuous mode
[  239.247371][T12799] syzkaller1: entered allmulticast mode
[  239.274550][T12783] gre6: entered promiscuous mode
[  239.357172][T12803] lo speed is unknown, defaulting to 1000
[  239.368333][T12806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.409074][T12811] gre0: left allmulticast mode
[  239.416880][T12811] tipc: Resetting bearer <ib:team0>
[  239.419215][T12811] tipc: Resetting bearer <ib:team0>
[  239.425712][T12811] wg1: left allmulticast mode
[  239.435054][T12811] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  239.535532][T12808] netlink: 'syz.0.1711': attribute type 39 has an invalid length.
[  239.593594][T12823] bridge0: port 1(erspan0) entered blocking state
[  239.596356][T12823] bridge0: port 1(erspan0) entered disabled state
[  239.598528][T12823] erspan0: entered allmulticast mode
[  239.601576][T12823] erspan0: entered promiscuous mode
[  239.610065][T12823] erspan0: left allmulticast mode
[  239.611794][T12823] erspan0: left promiscuous mode
[  239.614237][T12823] bridge0: port 1(erspan0) entered disabled state
[  239.738433][T12826] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.753115][T12829] netlink: 'syz.0.1718': attribute type 1 has an invalid length.
[  239.781925][T12832] tipc: New replicast peer: 172.20.20.170
[  239.805435][T12832] tipc: Enabled bearer <udp:syz2>, priority 10
[  239.817588][T12826] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.921199][T12830] veth15: entered allmulticast mode
[  239.971370][T12826] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.058937][T12826] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.156997][ T5668] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.169386][ T5668] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.183943][ T5668] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.210200][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.345777][T12845] syzkaller1: entered promiscuous mode
[  240.350300][T12845] syzkaller1: entered allmulticast mode
[  240.765894][T12868] bridge18: port 1(veth0_to_bond) entered disabled state
[  240.853903][T12868] tipc: Resetting bearer <eth:vlan0>
[  240.959692][T12880] bridge_slave_0 (unregistering): left allmulticast mode
[  240.962591][T12880] bridge_slave_0 (unregistering): left promiscuous mode
[  240.965367][T12880] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.006542][T12883] bond59: entered allmulticast mode
[  241.017311][T12885] macvlan0: entered promiscuous mode
[  241.019327][T12885] macvlan0: entered allmulticast mode
[  241.022110][T12885] bond59: entered promiscuous mode
[  241.026394][T12885] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  241.033427][T12885] bond59: left promiscuous mode
[  241.047733][ T5668] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.051079][ T5668] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.054541][ T5668] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.058609][ T5668] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.063158][ T5668] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.066922][ T5668] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.070505][ T5668] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.078386][ T5668] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.085063][T12891] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.147734][T12891] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.231315][T12891] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.307734][T12891] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.533436][ T5668] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.547915][ T5668] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.565624][ T5668] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.578921][ T5668] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.699478][T12898] __nla_validate_parse: 12 callbacks suppressed
[  241.699493][T12898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1736'.
[  241.770997][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'.
[  241.777212][T12905] openvswitch: netlink: Message has 4 unknown bytes.
[  241.813038][T12905] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode
[  241.815887][T12905] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode
[  241.864886][T12909] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1739'.
[  241.903701][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'.
[  241.918051][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'.
[  256.108675][T12922] dvmrp6: entered allmulticast mode
[  256.118253][T12932] netlink: 'syz.1.1743': attribute type 1 has an invalid length.
[  256.126905][T12930] netlink: 'syz.1.1743': attribute type 1 has an invalid length.
[  256.132597][T12922] xt_connbytes: Forcing CT accounting to be enabled
[  256.168763][T12932] 8021q: adding VLAN 0 to HW filter on device bond51
[  256.261260][T12940] netlink: 'syz.2.1747': attribute type 1 has an invalid length.
[  256.264675][T12940] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1747'.
[  256.335346][T12950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1748'.
[  256.344122][T12948] bond30: (slave lo): Releasing backup interface
[  256.347396][T12948] bond30: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  256.351892][T12948] bond60: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  256.365059][T12948] bond60: (slave lo): Enslaving as an active interface with an up link
[  256.368446][T12948] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  256.443842][T12958] lo speed is unknown, defaulting to 1000
[  256.746806][T12971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.750590][T12972] syzkaller0: entered promiscuous mode
[  256.755314][T12972] syzkaller0: entered allmulticast mode
[  256.769278][T12971] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1755'.
[  256.773220][T12966] lo speed is unknown, defaulting to 1000
[  256.821162][T12972] tipc: Resetting bearer <eth:syzkaller0>
[  256.854198][T12972] tipc: Disabling bearer <eth:syzkaller0>
[  256.940538][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'.
[  257.053774][T12977] 8021q: adding VLAN 0 to HW filter on device bond48
[  257.351431][T12989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.355229][T12990] syzkaller0: entered promiscuous mode
[  257.357815][T12990] syzkaller0: entered allmulticast mode
[  257.378411][T12990] tipc: Resetting bearer <eth:syzkaller0>
[  257.398045][T12990] tipc: Disabling bearer <eth:syzkaller0>
[  257.565851][ T5446] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.575236][ T5446] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.582611][ T5446] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.610151][ T5446] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  257.620316][T13002] netlink: 'syz.0.1762': attribute type 1 has an invalid length.
[  257.661492][T13002] bond61: (slave vxcan1): The slave device specified does not support setting the MAC address
[  257.665673][T13002] bond61: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  257.674119][T13002] bond61: (slave vxcan1): making interface the new active one
[  257.677697][T13002] bond61: (slave vxcan1): Enslaving as an active interface with an up link
[  257.740915][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1762'.
[  257.787774][T13015] xt_hashlimit: size too large, truncated to 1048576
[  257.789251][T13014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1765'.
[  257.957020][T13015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  258.085373][T13025] netlink: 'syz.2.1767': attribute type 9 has an invalid length.
[  258.088325][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'.
[  258.783905][T13035] 8021q: adding VLAN 0 to HW filter on device bond52
[  258.970310][T13043] netlink: 'syz.1.1773': attribute type 4 has an invalid length.
[  259.018046][T13054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1776'.
[  259.029850][T13055] netlink: 'syz.0.1776': attribute type 22 has an invalid length.
[  259.040156][T13054] netlink: 'syz.0.1776': attribute type 22 has an invalid length.
[  259.043220][T13054] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1776'.
[  259.076307][T13058] netlink: 'syz.2.1777': attribute type 10 has an invalid length.
[  259.086598][T13058] `: Port device dummy0 added
[  259.089111][T13060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1778'.
[  259.130686][T13068] netlink: 'syz.1.1780': attribute type 30 has an invalid length.
[  259.177369][T13071] `: Port device dummy0 removed
[  259.186984][T13071] dummy0: entered promiscuous mode
[  259.189697][T13071] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  259.263394][T13074] bond63: (slave veth17): Enslaving as an active interface with a down link
[  259.289810][T13075] bond63: (slave veth19): Enslaving as an active interface with a down link
[  259.344639][T13058] nbd3: detected capacity change from 0 to 63
[  259.356239][   T54] block nbd3: Receive control failed (result -104)
[  259.359945][ T7833] block nbd3: Receive control failed (result -32)
[  259.375660][T13080] 8021q: adding VLAN 0 to HW filter on device team0
[  259.384312][T13080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.425909][T13080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  259.429881][T13080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  259.440437][T13080] veth1_macvtap: left promiscuous mode
[  259.444354][T13080] veth0_macvtap: left promiscuous mode
[  259.448435][T13080] veth0_macvtap: entered promiscuous mode
[  259.451713][T13080] veth1_macvtap: entered promiscuous mode
[  259.461238][T13080] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  259.479585][T11476] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  259.482430][T11476] bridge0: port 1(veth0_virt_wifi) entered listening state
[  259.510071][ T5783] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.517483][ T5783] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.523455][ T5783] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.528951][ T5783] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.749631][T13089] ip6gre2: entered promiscuous mode
[  259.751894][T13089] ip6gre2: entered allmulticast mode
[  260.029342][T13104] veth15: entered promiscuous mode
[  260.068794][T13101] bridge22: entered promiscuous mode
[  260.070434][T13101] bridge22: entered allmulticast mode
[  260.166899][T13101] bridge22: entered promiscuous mode
[  260.168579][T13101] bridge22: entered allmulticast mode
[  260.303263][T13116] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  260.307859][T13116] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  260.350980][T13123] macvlan4: entered promiscuous mode
[  260.354218][T13123] macvlan4: entered allmulticast mode
[  260.376667][T13123] syzkaller1: tun_chr_ioctl cmd 1074025677
[  260.379921][T13123] syzkaller1: Refused to change device type
[  260.449814][ T5668] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.453368][ T5668] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.477425][ T5668] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.481487][ T5668] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  260.530474][T13130] veth1_macvtap: left promiscuous mode
[  260.532251][T13130] macsec0: entered promiscuous mode
[  260.542811][T13130] veth1_macvtap: entered promiscuous mode
[  260.548354][T13130] macsec0: left promiscuous mode
[  260.721321][T13141] bond50: entered allmulticast mode
[  260.914047][T13158] bond57 (unregistering): Released all slaves
[  261.034584][T13163] syzkaller1: entered promiscuous mode
[  261.036878][T13163] syzkaller1: entered allmulticast mode
[  261.336886][T13178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.388948][T13179] bond51: entered promiscuous mode
[  261.394652][T13179] bond51: entered allmulticast mode
[  261.397407][T13179] 8021q: adding VLAN 0 to HW filter on device bond51
[  261.422948][T13190] __nla_validate_parse: 8 callbacks suppressed
[  261.422965][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'.
[  261.488234][T13183] bond66: entered promiscuous mode
[  261.491275][T13183] bond66: entered allmulticast mode
[  261.504651][T13183] team0: entered promiscuous mode
[  261.506693][T13183] bridge2: entered promiscuous mode
[  261.509727][T13183] bridge3: entered promiscuous mode
[  261.512688][T13183] bridge7: entered promiscuous mode
[  261.515289][T13183] bridge8: entered promiscuous mode
[  261.517503][T13183] bridge9: entered promiscuous mode
[  261.519859][T13183] bridge18: entered promiscuous mode
[  261.525940][T13183] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  261.535648][T13193] macsec0: entered promiscuous mode
[  261.539633][T13193] macsec0: left promiscuous mode
[  261.543921][T13193] validate_nla: 9 callbacks suppressed
[  261.543935][T13193] netlink: 'syz.2.1813': attribute type 1 has an invalid length.
[  261.585875][T13198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1812'.
[  261.595663][T13202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1815'.
[  261.646850][T13204] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  261.674332][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'.
[  261.717034][T13207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1817'.
[  261.720730][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'.
[  261.724267][T13207] openvswitch: : Dropping previously announced user features
[  261.731370][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'.
[  261.734885][T13207] openvswitch: : Dropping previously announced user features
[  262.173389][T13200] syz.0.1814 (13200) used greatest stack depth: 19712 bytes left
[  262.209426][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1821'.
[  262.213979][T13221] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1821'.
[  262.216880][T13221] 8021q: VLANs not supported on sit0
[  262.245009][T13226] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1822'.
[  262.247879][T13226] 0: renamed from hsr0 (while UP)
[  262.250663][T13226] 0: entered allmulticast mode
[  262.252243][T13226] hsr_slave_0: entered allmulticast mode
[  262.258854][T13226] hsr_slave_1: entered allmulticast mode
[  262.261394][T13226] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  262.640783][T13237] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  262.957339][ T5446] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.959974][ T5446] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.966799][ T5446] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.972585][ T5446] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.980409][T13245] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  263.049987][T13252] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.119952][T13252] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.172137][T13252] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.179675][T13263] veth1_to_bond: entered allmulticast mode
[  263.185605][T13263] veth1_to_bond (unregistering): left allmulticast mode
[  263.221338][T13252] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.290104][ T5783] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.301952][ T5783] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.315375][ T5783] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.330947][ T5783] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.378337][T13267] 0{X: entered promiscuous mode
[  263.381371][T13267] 0{X: left promiscuous mode
[  263.574299][T13273] tipc: Resetting bearer <ib:team0>
[  263.589969][T13273] tipc: Disabling bearer <ib:team0>
[  263.593387][T13273] team0 (unregistering): Port device ip6gre1 removed
[  263.907220][T13275] openvswitch: netlink: Missing valid actions attribute.
[  263.909681][T13275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.928253][T13275] bond52 (unregistering): Released all slaves
[  264.072901][T13280] netlink: 'syz.2.1838': attribute type 21 has an invalid length.
[  264.075444][T13281] netlink: 'syz.2.1838': attribute type 21 has an invalid length.
[  264.077964][T13280] IPv6: NLM_F_CREATE should be specified when creating new route
[  264.080319][T13281] IPv6: NLM_F_CREATE should be specified when creating new route
[  264.247170][T13287] lo speed is unknown, defaulting to 1000
[  264.670432][T13294] netlink: 'syz.2.1842': attribute type 1 has an invalid length.
[  264.983777][T13310] bridge22: entered promiscuous mode
[  264.988094][T13310] bridge22: entered allmulticast mode
[  265.062530][T13317] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  265.109921][T13320] bond57: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  265.117824][T13320] bond57 (unregistering): Released all slaves
[  265.151813][T13301] bridge22: entered promiscuous mode
[  265.154531][T13301] bridge22: entered allmulticast mode
[  265.341134][T13329] dvmrp1: tun_chr_ioctl cmd 1074025677
[  265.343837][T13329] dvmrp1: linktype set to 804
[  265.764709][T13306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  265.843368][T13333] netlink: 'syz.1.1849': attribute type 1 has an invalid length.
[  265.873657][T13333] 8021q: adding VLAN 0 to HW filter on device bond57
[  265.927940][T13346] netlink: 'syz.1.1851': attribute type 4 has an invalid length.
[  265.931302][T13346] netlink: 'syz.1.1851': attribute type 4 has an invalid length.
[  266.101636][T13358] netlink: 'syz.1.1851': attribute type 1 has an invalid length.
[  266.364063][T13350] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.369744][T13350] 8021q: adding VLAN 0 to HW filter on device `
[  266.374687][T13350] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.399813][T13350] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  266.422975][T13358] bond58: entered promiscuous mode
[  266.425341][T13358] 8021q: adding VLAN 0 to HW filter on device bond58
[  266.428831][T13362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  266.435689][ T5446] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.439021][ T5446] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.459425][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.462147][ T1111] bridge0: port 2(bridge_slave_1) entered listening state
[  266.490767][ T5446] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.497188][ T5446] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.512540][ T5000] Bluetooth: hci2: command 0x0405 tx timeout
[  266.515070][   T53] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  266.537779][T13369] nftables ruleset with unbound chain
[  266.563274][T13371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.568457][T13371] syzkaller0: entered promiscuous mode
[  266.570641][T13371] syzkaller0: entered allmulticast mode
[  266.596666][T13371] tipc: Resetting bearer <eth:syzkaller0>
[  266.601890][T13373] __nla_validate_parse: 12 callbacks suppressed
[  266.601901][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1858'.
[  266.607758][T13370] tipc: Resetting bearer <eth:syzkaller0>
[  266.626484][T13370] tipc: Disabling bearer <eth:syzkaller0>
[  266.653675][T13375] syzkaller1: entered promiscuous mode
[  266.655517][T13375] syzkaller1: entered allmulticast mode
[  266.857777][T13379] lo speed is unknown, defaulting to 1000
[  266.945232][T13384] xt_hashlimit: size too large, truncated to 1048576
[  267.127778][T13389] netlink: 'syz.2.1862': attribute type 1 has an invalid length.
[  267.182030][T13389] 8021q: adding VLAN 0 to HW filter on device bond52
[  267.282932][T13389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1862'.
[  267.516649][T13401] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1865'.
[  267.517081][T13400] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1865'.
[  267.519372][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'.
[  267.519382][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'.
[  267.525967][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1865'.
[  267.533546][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'.
[  267.770340][T13414] bond53: entered promiscuous mode
[  267.776514][T13414] bond53: entered allmulticast mode
[  267.782156][T13414] 8021q: adding VLAN 0 to HW filter on device bond53
[  267.992240][T13420] ipvlan0: entered promiscuous mode
[  268.041222][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1873'.
[  268.066565][T13426] bond59: entered promiscuous mode
[  268.068504][T13426] 8021q: adding VLAN 0 to HW filter on device bond59
[  268.219274][T13442] hsr0: entered promiscuous mode
[  268.233565][T13442] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1877'.
[  268.237886][T13442] hsr_slave_0: left promiscuous mode
[  268.241818][T13442] hsr0 (unregistering): left promiscuous mode
[  268.363945][T13447] lo speed is unknown, defaulting to 1000
[  268.503251][T13452] bridge0: port 5(erspan0) entered disabled state
[  268.513898][T13452] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.636647][T13460] netlink: 'syz.0.1882': attribute type 1 has an invalid length.
[  268.781489][T13469] workqueue: Failed to create a rescuer kthread for wq "bond67": -EINTR
[  268.813911][T13479] netlink: 'syz.0.1886': attribute type 1 has an invalid length.
[  271.632586][T13464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  271.695898][T13495] __nla_validate_parse: 1 callbacks suppressed
[  271.695914][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'.
[  271.735337][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'.
[  271.738409][T13498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1891'.
[  271.741358][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'.
[  271.744838][T13498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1891'.
[  271.813506][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'.
[  271.816631][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'.
[  271.819770][T13504] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1892'.
[  271.823732][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'.
[  271.830101][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'.
[  271.848337][T13506] netlink: 'syz.0.1893': attribute type 32 has an invalid length.
[  271.869914][T13506] bond68: option coupled_control: invalid value (12)
[  271.873490][T13506] bond68 (unregistering): Released all slaves
[  271.894826][T13511] netlink: 'syz.2.1895': attribute type 1 has an invalid length.
[  271.939025][T13511] bond54: entered promiscuous mode
[  271.941628][T13511] 8021q: adding VLAN 0 to HW filter on device bond54
[  271.968439][T13511] 8021q: adding VLAN 0 to HW filter on device bond54
[  271.971331][T13511] bond54: (slave wireguard1): The slave device specified does not support setting the MAC address
[  271.976506][T13511] bond54: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  271.987488][T13511] bond54: (slave wireguard1): making interface the new active one
[  271.990118][T13511] wireguard1: entered promiscuous mode
[  271.993038][T13511] bond54: (slave wireguard1): Enslaving as an active interface with an up link
[  272.037844][T13519] netlink: 'syz.0.1893': attribute type 32 has an invalid length.
[  272.041110][T13519] workqueue: Failed to create a rescuer kthread for wq "bond68": -EINTR
[  272.074212][T13524] vlan2: entered allmulticast mode
[  272.079056][T13524] bond0: entered allmulticast mode
[  272.179537][T13529] bond55: entered promiscuous mode
[  272.182053][T13529] 8021q: adding VLAN 0 to HW filter on device bond55
[  272.304446][T13536] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  272.671171][T13549] bond56: entered allmulticast mode
[  272.738495][T13557] netlink: 'syz.0.1907': attribute type 13 has an invalid length.
[  272.749137][T13557] netlink: 'syz.0.1907': attribute type 17 has an invalid length.
[  272.798484][T13557] bridge0: entered promiscuous mode
[  272.800232][T13557] team0: left promiscuous mode
[  272.801678][T13557] bridge2: left promiscuous mode
[  272.803873][T13557] bridge3: left promiscuous mode
[  272.805942][T13557] bridge7: left promiscuous mode
[  272.807564][T13557] bridge8: left promiscuous mode
[  272.809182][T13557] bridge9: left promiscuous mode
[  272.810815][T13557] bridge18: left promiscuous mode
[  272.813414][T13557] 8021q: adding VLAN 0 to HW filter on device team0
[  272.819889][T13557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.838286][T13557] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  272.841474][T13557] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  272.845667][T13557] 0: left allmulticast mode
[  272.847559][T13557] hsr_slave_0: left allmulticast mode
[  272.849426][T13557] hsr_slave_1: left allmulticast mode
[  272.876342][T13557] veth1_macvtap: left promiscuous mode
[  272.880072][T13557] veth0_macvtap: left promiscuous mode
[  272.883436][T13557] veth0_macvtap: entered promiscuous mode
[  272.885834][T13557] veth1_macvtap: entered promiscuous mode
[  272.890724][T13557] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  272.931378][ T8304] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  272.934460][ T8304] bridge0: port 1(veth0_virt_wifi) entered listening state
[  272.949895][ T5446] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.954309][ T5446] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.987952][T13559] syzkaller0: entered promiscuous mode
[  272.995931][ T5446] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.998737][ T5446] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.004793][T13559] netlink: 'syz.1.1909': attribute type 1 has an invalid length.
[  273.020924][T13559] bond60: entered promiscuous mode
[  273.023514][T13559] 8021q: adding VLAN 0 to HW filter on device bond60
[  273.035717][T13559] 8021q: adding VLAN 0 to HW filter on device bond60
[  273.037961][T13559] bond60: (slave vcan0): The slave device specified does not support setting the MAC address
[  273.040972][T13559] bond60: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  273.051452][T13559] bond60: (slave vcan0): making interface the new active one
[  273.053893][T13559] vcan0: entered promiscuous mode
[  273.056782][T13559] bond60: (slave vcan0): Enslaving as an active interface with an up link
[  275.570706][T13586] vlan1: entered allmulticast mode
[  275.575306][T13586] bond0: entered allmulticast mode
[  275.729906][T13605] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  275.950383][T13621] bridge14: entered promiscuous mode
[  275.955135][T13621] bridge14: entered allmulticast mode
[  276.064975][T13621] bridge14: entered promiscuous mode
[  276.067127][T13621] bridge14: entered allmulticast mode
[  276.121256][T13636] pim6reg1: entered promiscuous mode
[  276.123109][T13636] pim6reg1: entered allmulticast mode
[  276.176594][T13636] netlink: 'syz.2.1925': attribute type 11 has an invalid length.
[  276.182990][T13636] netlink: 'syz.2.1925': attribute type 5 has an invalid length.
[  276.560917][T13660] veth1_to_batadv: entered promiscuous mode
[  276.566902][T13660] veth1_to_batadv: entered allmulticast mode
[  276.759875][T13666] __nla_validate_parse: 21 callbacks suppressed
[  276.759891][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'.
[  276.768783][T13666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1931'.
[  276.776770][T13666] bond60: (slave lo): Releasing backup interface
[  276.780364][T13666] bond60: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  276.790542][T13666] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  276.795719][   T10] lo speed is unknown, defaulting to 1000
[  276.797507][   T10] sqz0: Port: 1 Link DOWN
[  276.805139][   T10] lo speed is unknown, defaulting to 1000
[  276.818614][T13668] netlink: 'syz.2.1932': attribute type 4 has an invalid length.
[  276.825018][T13668] netlink: 'syz.2.1932': attribute type 4 has an invalid length.
[  276.858863][T13670] netlink: 'syz.0.1933': attribute type 1 has an invalid length.
[  276.959734][T13678] netlink: 'syz.0.1935': attribute type 10 has an invalid length.
[  277.094316][T13687] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.141237][T13687] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.201024][T13687] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.276661][T13687] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.367271][ T5668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.380968][ T5668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.398726][ T5668] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.410514][ T5668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.673153][T13711] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  277.731181][T13716] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1944'.
[  277.735878][T13716] 0{X: entered promiscuous mode
[  277.739488][T13716] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1944'.
[  277.743383][T13716] 1{X: renamed from 30{X
[  277.751201][T13716] 1{X: left promiscuous mode
[  277.753680][T13716] 1{X: entered allmulticast mode
[  277.756760][T13716] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  277.908608][T13730] xt_cgroup: invalid path, errno=-2
[  277.995024][T13732] lo speed is unknown, defaulting to 1000
[  278.068593][T13752] netlink: 'syz.2.1952': attribute type 1 has an invalid length.
[  278.087062][T13752] workqueue: Failed to create a rescuer kthread for wq "bond57": -EINTR
[  278.156448][T13743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1949'.
[  278.164235][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'.
[  278.169829][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1954'.
[  278.210145][T13760] bond69 (unregistering): Released all slaves
[  278.228912][T13759] workqueue: Failed to create a rescuer kthread for wq "bond69": -EINTR
[  278.343686][T13779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.399921][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1960'.
[  278.432558][T13787] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1962'.
[  278.435843][T13787] 0{X: renamed from 31{X (while UP)
[  278.438986][T13787] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  278.504773][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1963'.
[  278.576476][T13803] netlink: 'syz.0.1965': attribute type 1 has an invalid length.
[  278.740584][T13815] bond70: Removing last ns target with arp_interval on
[  278.936666][T13835] netlink: 'syz.2.1974': attribute type 1 has an invalid length.
[  278.958748][T13835] bond57: (slave bridge22): Enslaving as a backup interface with an up link
[  278.963681][T13837] netlink: 'syz.2.1974': attribute type 1 has an invalid length.
[  279.139412][T13851] bond58: entered promiscuous mode
[  279.141495][T13851] 8021q: adding VLAN 0 to HW filter on device bond58
[  279.314818][T13863] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20000
[  279.616331][T13878] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[  280.219847][T13899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.485824][T13924] bond71: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  283.495339][T13924] bond71: (slave lo): Enslaving as an active interface with an up link
[  283.499376][T13924] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  283.504351][ T6586] lo speed is unknown, defaulting to 1000
[  283.508672][ T6586] sqz0: Port: 1 Link ACTIVE
[  283.512571][ T6586] lo speed is unknown, defaulting to 1000
[  283.544161][T13927] __nla_validate_parse: 11 callbacks suppressed
[  283.544180][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'.
[  284.092396][T13950] netlink: 'syz.0.2004': attribute type 1 has an invalid length.
[  284.130554][T13950] bond72: entered promiscuous mode
[  284.132710][T13950] 8021q: adding VLAN 0 to HW filter on device bond72
[  284.137677][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2004'.
[  284.140538][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'.
[  284.200451][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2006'.
[  284.272999][T13961] netlink: 'syz.2.2007': attribute type 10 has an invalid length.
[  284.277366][T13961] 8021q: adding VLAN 0 to HW filter on device `
[  284.280671][T13961] `: entered promiscuous mode
[  284.282264][T13961] team_slave_1: entered promiscuous mode
[  284.289891][T13961] bond0: (slave `): Enslaving as an active interface with an up link
[  284.329114][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2008'.
[  284.517225][T13975] netlink: 'syz.1.2012': attribute type 1 has an invalid length.
[  284.539895][T13975] 8021q: adding VLAN 0 to HW filter on device bond62
[  284.591689][T13980] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2014'.
[  284.895954][T13991] netlink: 'syz.2.2018': attribute type 1 has an invalid length.
[  284.917362][T13993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.932104][T13991] 8021q: adding VLAN 0 to HW filter on device bond59
[  284.981557][T13991] netlink: 'syz.2.2018': attribute type 13 has an invalid length.
[  285.067024][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2019'.
[  285.090297][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2019'.
[  285.095083][T13997] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode
[  285.100985][T13999] netlink: 'syz.2.2020': attribute type 29 has an invalid length.
[  285.145617][T13999] netlink: 'syz.2.2020': attribute type 3 has an invalid length.
[  285.148075][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'.
[  285.176226][T14002] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2021'.
[  285.223819][T14006] hm3): entered promiscuous mode
[  285.241259][T13999] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  285.291352][T14010] netlink: 'syz.1.2023': attribute type 4 has an invalid length.
[  285.385650][T14019] lo speed is unknown, defaulting to 1000
[  285.517941][T14034] netlink: 'syz.1.2028': attribute type 1 has an invalid length.
[  285.604190][T14040] netlink: 'syz.0.2029': attribute type 228 has an invalid length.
[  285.969924][T14070] workqueue: Failed to create a rescuer kthread for wq "bond74": -EINTR
[  286.079893][T14082] bond0: entered promiscuous mode
[  286.091462][T14082] gretap0: entered promiscuous mode
[  286.094150][T14082] team0: entered promiscuous mode
[  286.095758][T14082] bridge2: entered promiscuous mode
[  286.097511][T14082] bridge3: entered promiscuous mode
[  286.099259][T14082] bridge7: entered promiscuous mode
[  286.101089][T14082] bridge8: entered promiscuous mode
[  286.103878][T14082] bridge9: entered promiscuous mode
[  286.105709][T14082] bridge18: entered promiscuous mode
[  286.115457][T14082] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  286.119283][T14082] hsr0: Interlink (team0) is not up; please bring it up to get a fully working HSR network
[  286.124417][T14082] hsr0: entered promiscuous mode
[  286.220989][T14093] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.227711][T14093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.265861][T14093] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  286.269562][T14093] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  286.273252][T14093] 0: left allmulticast mode
[  286.275021][T14093] hsr_slave_0: left allmulticast mode
[  286.278299][T14093] hsr_slave_1: left allmulticast mode
[  286.285360][T14093] veth1_vlan: left promiscuous mode
[  286.287777][T14093] veth0_vlan: left promiscuous mode
[  286.289836][T14093] veth0_vlan: entered promiscuous mode
[  286.296277][T14093] tipc: Resetting bearer <eth:vlan0>
[  286.298451][T14093] tipc: Resetting bearer <eth:vlan0>
[  286.301097][T14093] veth1_vlan: entered promiscuous mode
[  286.307146][T14093] veth1_macvtap: left promiscuous mode
[  286.310298][T14093] veth0_macvtap: left promiscuous mode
[  286.314278][T14093] veth0_macvtap: entered promiscuous mode
[  286.317583][T14093] veth1_macvtap: entered promiscuous mode
[  286.324197][T14093] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  286.332782][T11476] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.335204][T11476] bridge0: port 2(bridge_slave_1) entered listening state
[  286.360435][T11476] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  286.363327][T11476] bridge0: port 3(veth0_virt_wifi) entered listening state
[  286.375171][T11476] bridge0: port 4(veth1_virt_wifi) entered blocking state
[  286.378085][T11476] bridge0: port 4(veth1_virt_wifi) entered listening state
[  286.419778][ T5446] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.422567][ T5446] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.425246][ T5446] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.428025][ T5446] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.446053][T14104] bond60: entered promiscuous mode
[  286.448030][T14104] 8021q: adding VLAN 0 to HW filter on device bond60
[  286.470510][T14104] ipvlan3: entered allmulticast mode
[  286.472200][T14104] bond60: entered allmulticast mode
[  286.494119][T14104] bond60: (slave bridge23): making interface the new active one
[  286.496876][T14104] bridge23: entered promiscuous mode
[  286.504889][T14104] bridge23: entered allmulticast mode
[  286.515090][T14104] bond60: (slave bridge23): Enslaving as an active interface with an up link
[  286.591049][T14112] 8021q: adding VLAN 0 to HW filter on device bond63
[  286.629360][T14112] 8021q: adding VLAN 0 to HW filter on device bond64
[  286.634015][T14112] bond63: (slave bond64): Enslaving as an active interface with an up link
[  286.660193][T14120] bond74: option lacp_active: invalid value (8)
[  286.664555][T14120] bond74 (unregistering): Released all slaves
[  286.699278][T14112] bond63 (unregistering): (slave bond64): Releasing backup interface
[  286.705518][T14112] bond63 (unregistering): Released all slaves
[  287.058718][T14151] bond63: option ad_select: invalid value (34)
[  287.062063][T14151] bond63 (unregistering): Released all slaves
[  287.194488][T14159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  287.266219][T14161] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  287.271521][T14161] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  287.377334][T14163] 8021q: adding VLAN 0 to HW filter on device bond61
[  287.539350][T14173] pim6reg: entered allmulticast mode
[  288.015079][T14175] 8021q: adding VLAN 0 to HW filter on device bond75
[  288.023203][T14175] bond74: (slave bond75): making interface the new active one
[  288.027366][T14175] bond74: (slave bond75): Enslaving as an active interface with an up link
[  288.153634][T14184] bond71: (slave lo): Releasing backup interface
[  288.157068][T14184] bond71: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  288.164037][T14184] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  288.169990][ T6586] lo speed is unknown, defaulting to 1000
[  288.173894][ T6586] sqz0: Port: 1 Link DOWN
[  288.177861][ T6586] lo speed is unknown, defaulting to 1000
[  288.504764][   T53] Bluetooth: hci2: link tx timeout
[  288.507454][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  288.564892][   T53] Bluetooth: hci2: link tx timeout
[  288.567973][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  288.606836][   T53] Bluetooth: hci2: link tx timeout
[  288.608648][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  288.746235][T14232] xt_CT: You must specify a L4 protocol and not use inversions on it
[  288.832861][    C1] bridge0: port 4(veth1_virt_wifi) entered blocking state
[  288.866882][T14243] __nla_validate_parse: 14 callbacks suppressed
[  288.866900][T14243] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2075'.
[  288.945929][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2079'.
[  289.029163][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2078'.
[  289.251180][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'.
[  289.260566][T14278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2084'.
[  289.338155][T14289] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2087'.
[  289.451307][T14298] bridge0: port 3(vlan6) entered blocking state
[  289.454807][T14298] bridge0: port 3(vlan6) entered disabled state
[  289.458347][T14298] vlan6: entered allmulticast mode
[  289.460504][T14298] geneve0: entered allmulticast mode
[  289.465490][T14298] vlan6: entered promiscuous mode
[  289.468968][T14298] geneve0: entered promiscuous mode
[  289.481624][   T53] Bluetooth: hci2: link tx timeout
[  289.486224][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  289.507779][T14302] netlink: 492 bytes leftover after parsing attributes in process `syz.2.2090'.
[  289.526291][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'.
[  289.555512][   T53] Bluetooth: hci2: link tx timeout
[  289.557596][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  289.562199][T14305] validate_nla: 4 callbacks suppressed
[  289.562215][T14305] netlink: 'syz.0.2091': attribute type 1 has an invalid length.
[  289.582006][T14308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2090'.
[  289.585983][T14302] hsr_slave_1 (unregistering): left promiscuous mode
[  289.661118][T14310] 8021q: adding VLAN 0 to HW filter on device bond78
[  289.674151][T14310] bond77: (slave bond78): making interface the new active one
[  289.680886][T14310] bond77: (slave bond78): Enslaving as an active interface with an up link
[  289.687283][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'.
[  289.869787][T14342] lo speed is unknown, defaulting to 1000
[  289.954597][   T99] block nbd3: Connection timed out, retrying (0/2 alive)
[  289.960564][   T99] block nbd3: Connection timed out, retrying (0/2 alive)
[  289.963020][   T99] block nbd3: Connection timed out, retrying (0/2 alive)
[  289.965659][   T99] block nbd3: Connection timed out, retrying (0/2 alive)
[  289.967976][   T99] block nbd3: Dead connection, failed to find a fallback
[  289.970145][   T99] block nbd3: shutting down sockets
[  289.971697][   T99] blk_print_req_error: 138 callbacks suppressed
[  289.971706][   T99] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.977070][   T99] buffer_io_error: 138 callbacks suppressed
[  289.977084][   T99] Buffer I/O error on dev nbd3, logical block 3, async page read
[  289.981546][   T99] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.984714][   T99] Buffer I/O error on dev nbd3, logical block 2, async page read
[  289.987620][   T99] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.990496][   T99] Buffer I/O error on dev nbd3, logical block 1, async page read
[  289.993541][   T99] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.996679][   T99] Buffer I/O error on dev nbd3, logical block 0, async page read
[  290.002630][T13033] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.005837][T13033] Buffer I/O error on dev nbd3, logical block 0, async page read
[  290.008747][T13033] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.011449][T13033] Buffer I/O error on dev nbd3, logical block 1, async page read
[  290.015695][T13033] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.018423][T13033] Buffer I/O error on dev nbd3, logical block 2, async page read
[  290.020903][T13033] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.023987][T13033] Buffer I/O error on dev nbd3, logical block 3, async page read
[  290.027019][T13033] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.029927][T13033] Buffer I/O error on dev nbd3, logical block 0, async page read
[  290.033432][T13033] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.036354][T13033] Buffer I/O error on dev nbd3, logical block 1, async page read
[  290.040355][T13033] ldm_validate_partition_table(): Disk read failed.
[  290.047700][T13033] Dev nbd3: unable to read RDB block 0
[  290.050681][T13033]  nbd3: unable to read partition table
[  290.060098][T13033] ldm_validate_partition_table(): Disk read failed.
[  290.066092][T13033] Dev nbd3: unable to read RDB block 0
[  290.070199][T13033]  nbd3: unable to read partition table
[  290.213688][T14352] netlink: 'syz.0.2101': attribute type 11 has an invalid length.
[  290.357708][T14357] sctp: [Deprecated]: syz.0.2103 (pid 14357) Use of int in max_burst socket option deprecated.
[  290.357708][T14357] Use struct sctp_assoc_value instead
[  290.517628][   T53] Bluetooth: hci2: link tx timeout
[  290.519409][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  290.529368][   T53] Bluetooth: hci2: link tx timeout
[  290.531429][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  290.542599][   T53] Bluetooth: hci2: link tx timeout
[  290.544703][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  290.592661][   T53] Bluetooth: hci2: command 0x0405 tx timeout
[  292.744661][T14327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  292.936376][T14371] netlink: 'syz.2.2107': attribute type 4 has an invalid length.
[  293.117539][T14390] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  293.273117][T14402] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  293.291950][T14404] dummy0: Caught tx_queue_len zero misconfig
[  293.301781][T14404] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  293.371739][T14409] netlink: 'syz.0.2118': attribute type 1 has an invalid length.
[  293.377846][T14409] bridge28: entered promiscuous mode
[  293.379586][T14409] bridge28: entered allmulticast mode
[  293.414274][   T33] audit: type=1804 audit(1778612869.187:8): pid=14414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2120" name="/newroot/704/cgroup.controllers" dev="tmpfs" ino=3612 res=1 errno=0
[  293.425140][   T33] audit: type=1800 audit(1778612869.197:9): pid=14414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2120" name="cgroup.controllers" dev="tmpfs" ino=3612 res=0 errno=0
[  293.429908][T14415] netlink: 'syz.2.2119': attribute type 1 has an invalid length.
[  293.443256][   T33] audit: type=1804 audit(1778612869.227:10): pid=14414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2120" name="/newroot/704/cgroup.controllers" dev="tmpfs" ino=3612 res=1 errno=0
[  293.460994][T14415] bond62: entered promiscuous mode
[  293.463865][T14415] 8021q: adding VLAN 0 to HW filter on device bond62
[  293.492999][T14415] 8021q: adding VLAN 0 to HW filter on device bond62
[  293.504425][T14415] bond62: (slave vcan0): The slave device specified does not support setting the MAC address
[  293.511616][T14415] bond62: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  293.527462][T14415] bond62: (slave vcan0): making interface the new active one
[  293.529685][T14415] vcan0: entered promiscuous mode
[  293.535482][T14415] bond62: (slave vcan0): Enslaving as an active interface with an up link
[  293.650676][T14435] x_tables: duplicate underflow at hook 2
[  293.690488][T14437] pim6reg99999991: entered allmulticast mode
[  293.937049][T14454] __nla_validate_parse: 12 callbacks suppressed
[  293.937103][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2131'.
[  293.946418][T14454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2131'.
[  293.965203][T14454] vlan7: entered promiscuous mode
[  293.970346][T14454] vlan7: entered allmulticast mode
[  294.088886][T14462] netlink: 'syz.0.2133': attribute type 1 has an invalid length.
[  294.135972][T14462] bond79: (slave bridge29): making interface the new active one
[  294.139878][T14462] bond79: (slave bridge29): Enslaving as an active interface with an up link
[  294.159322][T14462] bond79: (slave vlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  294.196720][T14411] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  294.319320][T14467] erspan0: entered promiscuous mode
[  294.328360][T14467] 8021q: adding VLAN 0 to HW filter on device team0
[  294.345535][T14467] 8021q: adding VLAN 0 to HW filter on device bond1
[  294.348437][T14467] 8021q: adding VLAN 0 to HW filter on device bond2
[  294.351002][T14467] 8021q: adding VLAN 0 to HW filter on device bond3
[  294.354503][T14467] 8021q: adding VLAN 0 to HW filter on device bond4
[  294.357848][T14467] 8021q: adding VLAN 0 to HW filter on device bond5
[  294.360213][T14467] A link change request failed with some changes committed already. Interface d may have been left with an inconsistent configuration, please check.
[  294.365303][   T10] lo speed is unknown, defaulting to 1000
[  294.367122][   T10] sqz0: Port: 1 Link ACTIVE
[  294.374154][ T6586] lo speed is unknown, defaulting to 1000
[  294.379394][T14470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'.
[  294.725187][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'.
[  294.731437][T14492] netlink: 'syz.0.2139': attribute type 1 has an invalid length.
[  294.743554][T14494] netlink: 'syz.2.2141': attribute type 1 has an invalid length.
[  294.793700][T14492] bond80: entered promiscuous mode
[  294.795807][T14492] 8021q: adding VLAN 0 to HW filter on device bond80
[  294.797105][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'.
[  294.826781][T14498] ipvlan1: entered allmulticast mode
[  294.828560][T14498] bond80: entered allmulticast mode
[  294.831478][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'.
[  294.833307][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'.
[  294.871121][T14492] bond80: (slave bridge30): making interface the new active one
[  294.882550][T14492] bridge30: entered promiscuous mode
[  294.886097][T14492] bridge30: entered allmulticast mode
[  294.896736][T14492] bond80: (slave bridge30): Enslaving as an active interface with an up link
[  294.984487][T14511] sctp: [Deprecated]: syz.2.2144 (pid 14511) Use of struct sctp_assoc_value in delayed_ack socket option.
[  294.984487][T14511] Use struct sctp_sack_info instead
[  294.998053][T14508] lo speed is unknown, defaulting to 1000
[  295.027873][T14514] netlink: 'syz.0.2145': attribute type 4 has an invalid length.
[  295.040797][ T6570] lo speed is unknown, defaulting to 1000
[  295.043810][T14514] netlink: 'syz.0.2145': attribute type 4 has an invalid length.
[  295.049437][ T6570] sqz0: Port: 1 Link DOWN
[  295.054911][ T6570] lo speed is unknown, defaulting to 1000
[  295.067243][   T10] lo speed is unknown, defaulting to 1000
[  295.074852][   T10] sqz0: Port: 1 Link ACTIVE
[  295.097580][   T33] audit: type=1804 audit(1778612870.877:11): pid=14514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2145" name="/newroot/761/memory.events" dev="tmpfs" ino=3900 res=1 errno=0
[  295.122571][   T33] audit: type=1800 audit(1778612870.887:12): pid=14514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2145" name="memory.events" dev="tmpfs" ino=3900 res=0 errno=0
[  295.227823][T14521] sysfs: cannot create duplicate filename '/class/ieee80211/1^!Y
[  295.227823][T14521] 3UH5rBn\'
[  295.232119][T14521] CPU: 1 UID: 0 PID: 14521 Comm: syz.0.2147 Not tainted syzkaller #0 PREEMPT(full) 
[  295.232135][T14521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.232142][T14521] Call Trace:
[  295.232146][T14521]  <TASK>
[  295.232151][T14521]  dump_stack_lvl+0xe8/0x150
[  295.232170][T14521]  sysfs_warn_dup+0x8e/0xa0
[  295.232186][T14521]  sysfs_do_create_link_sd+0xc0/0x110
[  295.232200][T14521]  device_add_class_symlinks+0x1cf/0x240
[  295.232214][T14521]  device_add+0x475/0xbb0
[  295.232227][T14521]  wiphy_register+0x1fb1/0x2fe0
[  295.232245][T14521]  ? __pfx_wiphy_register+0x10/0x10
[  295.232254][T14521]  ? __pfx_netdev_run_todo+0x10/0x10
[  295.232265][T14521]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  295.232281][T14521]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  295.232314][T14521]  ieee80211_register_hw+0x3c53/0x4910
[  295.232330][T14521]  ? ieee80211_register_hw+0x1911/0x4910
[  295.232354][T14521]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  295.232365][T14521]  ? __asan_memset+0x22/0x50
[  295.232377][T14521]  ? __hrtimer_setup+0x1b7/0x260
[  295.232388][T14521]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  295.232401][T14521]  mac80211_hwsim_new_radio+0x3327/0x57e0
[  295.232427][T14521]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  295.232436][T14521]  ? kstrndup+0xbf/0x160
[  295.232450][T14521]  hwsim_new_radio_nl+0xe20/0x26e0
[  295.232460][T14521]  ? unwind_next_frame+0xa6/0x2550
[  295.232478][T14521]  ? is_bpf_text_address+0x26/0x2b0
[  295.232494][T14521]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  295.232506][T14521]  ? __kernel_text_address+0xd/0x30
[  295.232520][T14521]  ? unwind_get_return_address+0x4d/0x90
[  295.232530][T14521]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  295.232544][T14521]  ? arch_stack_walk+0xfb/0x150
[  295.232560][T14521]  ? stack_trace_save+0xa9/0x100
[  295.232572][T14521]  ? __pfx_stack_trace_save+0x10/0x10
[  295.232583][T14521]  ? finish_task_switch+0x41f/0xbe0
[  295.232593][T14521]  ? stack_depot_save_flags+0x33/0x810
[  295.232605][T14521]  ? rcu_is_watching+0x15/0xb0
[  295.232620][T14521]  ? __nla_validate_parse+0x2480/0x2dc0
[  295.232631][T14521]  ? ____sys_sendmsg+0x972/0x9f0
[  295.232643][T14521]  ? ___sys_sendmsg+0x2a5/0x360
[  295.232663][T14521]  ? __pfx___nla_validate_parse+0x10/0x10
[  295.232684][T14521]  ? rcu_is_watching+0x15/0xb0
[  295.232705][T14521]  ? trace_kmalloc+0x2a/0xf0
[  295.232721][T14521]  ? __nla_parse+0x40/0x60
[  295.232734][T14521]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  295.232745][T14521]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  295.232759][T14521]  genl_family_rcv_msg_doit+0x22a/0x330
[  295.232772][T14521]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  295.232788][T14521]  ? bpf_lsm_capable+0x9/0x20
[  295.232796][T14521]  ? security_capable+0x7e/0x2c0
[  295.232810][T14521]  genl_rcv_msg+0x61c/0x7a0
[  295.232822][T14521]  ? __pfx_genl_rcv_msg+0x10/0x10
[  295.232831][T14521]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  295.232842][T14521]  ? __pfx_ref_tracker_free+0x10/0x10
[  295.232858][T14521]  netlink_rcv_skb+0x232/0x4b0
[  295.232871][T14521]  ? __pfx_genl_rcv_msg+0x10/0x10
[  295.232881][T14521]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  295.232900][T14521]  ? down_read+0x270/0x2e0
[  295.232909][T14521]  ? genl_rcv+0xd/0x40
[  295.232918][T14521]  genl_rcv+0x28/0x40
[  295.232932][T14521]  netlink_unicast+0x75c/0x8e0
[  295.232948][T14521]  netlink_sendmsg+0x813/0xb40
[  295.232966][T14521]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.233006][T14521]  ? aa_sock_msg_perm+0xf1/0x1b0
[  295.233020][T14521]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  295.233036][T14521]  ____sys_sendmsg+0x972/0x9f0
[  295.233050][T14521]  ? __might_fault+0xaf/0x130
[  295.233064][T14521]  ? __pfx_____sys_sendmsg+0x10/0x10
[  295.233081][T14521]  ? import_iovec+0x73/0xa0
[  295.233095][T14521]  ___sys_sendmsg+0x2a5/0x360
[  295.233107][T14521]  ? __lock_acquire+0x6b5/0x2cf0
[  295.233118][T14521]  ? __pfx____sys_sendmsg+0x10/0x10
[  295.233134][T14521]  ? futex_wait+0x2a2/0x390
[  295.233159][T14521]  ? __fget_files+0x2a/0x420
[  295.233168][T14521]  ? __fget_files+0x3a0/0x420
[  295.233183][T14521]  __x64_sys_sendmsg+0x1bd/0x2a0
[  295.233197][T14521]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  295.233214][T14521]  ? rcu_is_watching+0x15/0xb0
[  295.233228][T14521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.233238][T14521]  do_syscall_64+0x15f/0xf80
[  295.233246][T14521]  ? trace_irq_disable+0x3b/0x140
[  295.233261][T14521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.233269][T14521] RIP: 0033:0x7f18b699cdd9
[  295.233280][T14521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.233287][T14521] RSP: 002b:00007f18b793c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.233298][T14521] RAX: ffffffffffffffda RBX: 00007f18b6c15fa0 RCX: 00007f18b699cdd9
[  295.233304][T14521] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  295.233310][T14521] RBP: 00007f18b6a32d69 R08: 0000000000000000 R09: 0000000000000000
[  295.233316][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.233321][T14521] R13: 00007f18b6c16038 R14: 00007f18b6c15fa0 R15: 00007ffef1f0fbc8
[  295.233336][T14521]  </TASK>
[  295.497302][T14525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2149'.
[  295.616195][T14531] netlink: 'syz.0.2150': attribute type 1 has an invalid length.
[  295.634570][T14531] 8021q: adding VLAN 0 to HW filter on device bond81
[  295.804474][T14540] netlink: 'syz.0.2152': attribute type 3 has an invalid length.
[  295.819405][T14540] netlink: 'syz.0.2152': attribute type 3 has an invalid length.
[  295.866536][T14546] netlink: 'syz.0.2152': attribute type 1 has an invalid length.
[  295.970174][T14552] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20003
[  295.980823][T14552] netlink: 'syz.2.2155': attribute type 1 has an invalid length.
[  295.983974][T14546] bond82: entered promiscuous mode
[  295.985857][T14546] 8021q: adding VLAN 0 to HW filter on device bond82
[  295.987296][T14556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2152'.
[  296.037553][T14552] bond64: entered promiscuous mode
[  296.041951][T14552] bond64: entered allmulticast mode
[  296.046772][T14552] 8021q: adding VLAN 0 to HW filter on device bond64
[  296.095511][T14546] bond82: (slave bridge31): making interface the new active one
[  296.098735][T14546] bridge31: entered promiscuous mode
[  296.102625][T14546] bond82: (slave bridge31): Enslaving as an active interface with an up link
[  296.160654][T14564] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2158'.
[  296.326523][T14578] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  296.409959][T14587] netlink: 'syz.1.2165': attribute type 20 has an invalid length.
[  296.623681][T14599] 8021q: adding VLAN 0 to HW filter on device bond83
[  296.661636][T14599] vlan7: entered promiscuous mode
[  296.664385][T14599] bond83: entered promiscuous mode
[  296.666417][T14599] vlan7: entered allmulticast mode
[  296.669255][T14599] bond83: entered allmulticast mode
[  296.737011][T14603] bond66: (slave bridge24): Enslaving as a backup interface with an up link
[  296.748336][T14599] lo speed is unknown, defaulting to 1000
[  296.755279][T14603] macvlan5: entered promiscuous mode
[  296.760556][T14603] macvlan5: entered allmulticast mode
[  296.765603][T14603] bond66: entered promiscuous mode
[  296.768455][T14606] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20000
[  296.768821][T14603] bridge24: entered promiscuous mode
[  296.777514][T14603] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  296.785100][T14606] IPVS: sh: FWM 3 0x00000003 - no destination available
[  296.796840][T14603] bond66: left promiscuous mode
[  296.798475][T14603] bridge24: left promiscuous mode
[  297.057279][    C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16
[  297.083186][T14610] bond62: (slave vcan0): Releasing backup interface
[  297.085851][T14610] vcan0 (unregistering): left promiscuous mode
[  297.088969][T14610] bond62: Destroying bond
[  297.094244][T14610] bond62 (unregistering): Released all slaves
[  297.309684][T14620] bridge0: port 5(erspan0) entered disabled state
[  297.358945][T14620] bridge0: port 4(veth1_virt_wifi) entered disabled state
[  297.361424][T14620] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  297.363876][T14620] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.573404][T14620] tipc: Resetting bearer <eth:vlan0>
[  297.992586][T14632] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.006850][T14632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.069689][T14632] veth1_to_batadv: left promiscuous mode
[  298.075941][T14632] veth1_macvtap: left promiscuous mode
[  298.078559][T14632] veth0_macvtap: left promiscuous mode
[  298.081135][T14632] veth0_macvtap: entered promiscuous mode
[  298.084333][T14632] veth1_macvtap: entered promiscuous mode
[  298.091975][T14632] 8021q: adding VLAN 0 to HW filter on device bond1
[  298.095092][T14632] 8021q: adding VLAN 0 to HW filter on device bond2
[  298.103215][T14632] 8021q: adding VLAN 0 to HW filter on device bond3
[  298.107643][T14632] 8021q: adding VLAN 0 to HW filter on device bond4
[  298.113544][T14632] 8021q: adding VLAN 0 to HW filter on device bond5
[  298.119964][T14632] 8021q: adding VLAN 0 to HW filter on device bond6
[  298.123733][T14632] 8021q: adding VLAN 0 to HW filter on device bond7
[  298.129729][T14632] 8021q: adding VLAN 0 to HW filter on device bond8
[  298.134425][T14632] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  298.139261][ T5783] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.141863][ T5783] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.183228][ T5783] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.193125][ T5783] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  298.198344][ T5783] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  298.204159][ T5783] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.207152][ T5783] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  298.210283][ T5783] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  298.215201][ T5783] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.218887][ T5783] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  298.228580][ T5783] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  298.235229][ T5783] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.238903][ T5783] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  298.245056][ T5783] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  298.248805][ T5783] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.252001][ T5783] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  298.306787][T14640] bond60: (slave vcan0): Releasing backup interface
[  298.309430][T14640] vcan0 (unregistering): left promiscuous mode
[  298.313934][T14640] bond60: Destroying bond
[  298.318257][T14640] bond60 (unregistering): Released all slaves
[  298.368272][T14647] ipip3: entered promiscuous mode
[  298.400878][T14643] lo speed is unknown, defaulting to 1000
[  298.876914][T14665] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  299.157823][T14670] bond60: entered promiscuous mode
[  299.159895][T14670] 8021q: adding VLAN 0 to HW filter on device bond60
[  299.165520][T14670] __nla_validate_parse: 20 callbacks suppressed
[  299.165531][T14670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2184'.
[  299.272255][T14682] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  299.494837][T14693] bridge17: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  299.572938][T14697] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2191'.
[  299.587360][T14697] 0{X: entered promiscuous mode
[  299.589536][T14697] 0{X: left allmulticast mode
[  299.596891][T14698] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2191'.
[  299.607160][T14698] 1{X: renamed from 30{X
[  299.609481][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'.
[  299.614954][T14698] 1{X: left promiscuous mode
[  299.616604][T14698] 1{X: entered allmulticast mode
[  299.618969][T14698] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  299.625412][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'.
[  299.630475][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'.
[  299.888934][T14718] lo: Caught tx_queue_len zero misconfig
[  300.181219][T14734] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2201'.
[  300.737748][T14737] veth0: entered promiscuous mode
[  300.746174][ T5783] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.753636][ T5783] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.761342][ T5783] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  300.768066][ T5783] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.773984][ T5783] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.779718][ T5783] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  300.787615][T14738] veth0: left promiscuous mode
[  300.801411][ T5783] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.808420][ T5783] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.816146][ T5783] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  300.824500][ T5783] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.829430][ T5783] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.835163][ T5783] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  300.851904][T14754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'.
[  300.953918][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2207'.
[  300.987174][T14762] vlan4: entered allmulticast mode
[  300.989320][T14762] macvtap0: entered allmulticast mode
[  300.995424][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2209'.
[  301.085021][T14773] bond62: entered promiscuous mode
[  301.086943][T14773] 8021q: adding VLAN 0 to HW filter on device bond62
[  301.178160][T14784] validate_nla: 5 callbacks suppressed
[  301.178178][T14784] netlink: 'syz.1.2213': attribute type 1 has an invalid length.
[  301.214401][T14784] workqueue: Failed to create a rescuer kthread for wq "bond63": -EINTR
[  301.291086][T14795] xt_hashlimit: size too large, truncated to 1048576
[  301.381743][T14800] netlink: 'syz.1.2216': attribute type 1 has an invalid length.
[  301.388031][ T7288] bond0: (slave bond_slave_0): interface is now down
[  301.399814][T14792] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.413960][ T7288] bond0: (slave dummy0): interface is now down
[  301.421018][ T7288] bond0: (slave `): interface is now down
[  301.460177][ T7288] bond0: now running without any active interface!
[  301.703861][T14815] netlink: 'syz.0.2218': attribute type 1 has an invalid length.
[  301.844918][T14826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.031260][T14835] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  302.161185][   T10] lo speed is unknown, defaulting to 1000
[  302.163979][ T5668] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.167339][   T10] sqz0: Port: 1 Link DOWN
[  302.264993][T14842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.267692][ T5668] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.271187][ T5668] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.275899][   T10] lo speed is unknown, defaulting to 1000
[  302.277089][ T5668] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  302.281682][T14840] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode
[  302.284840][T14840] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode
[  302.299720][T14840] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig
[  302.306043][T14840] tipc: Resetting bearer <eth:syzkaller0>
[  302.431806][T14853] netlink: 'syz.0.2225': attribute type 12 has an invalid length.
[  302.438527][T14853] netlink: 'syz.0.2225': attribute type 13 has an invalid length.
[  302.468535][T14859] erspan0: left allmulticast mode
[  302.472571][T14859] erspan0: left promiscuous mode
[  302.475250][T14859] bridge0: port 5(erspan0) entered disabled state
[  302.705267][T14874] netlink: 'syz.2.2230': attribute type 1 has an invalid length.
[  302.741981][T14874] bond67: (slave bridge25): making interface the new active one
[  302.746467][T14874] bond67: (slave bridge25): Enslaving as an active interface with an up link
[  302.761553][T14874] macvlan5: entered promiscuous mode
[  302.764341][T14874] macvlan5: entered allmulticast mode
[  302.767186][T14874] bond67: entered promiscuous mode
[  302.769178][T14874] bridge25: entered promiscuous mode
[  302.772106][T14874] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  302.776047][T14874] bond67: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  302.782240][T14874] bond67: left promiscuous mode
[  302.785655][T14874] bridge25: left promiscuous mode
[  303.580165][T14907] netlink: 'syz.2.2238': attribute type 11 has an invalid length.
[  303.586503][T14906] netlink: 'syz.2.2238': attribute type 11 has an invalid length.
[  303.590360][T14906] netlink: 'syz.2.2238': attribute type 11 has an invalid length.
[  303.593816][T14907] netlink: 'syz.2.2238': attribute type 11 has an invalid length.
[  303.643469][T14909] m1Ie5n: entered promiscuous mode
[  303.688467][T14912] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  304.196353][T14931] bond86: entered promiscuous mode
[  304.199115][T14931] 8021q: adding VLAN 0 to HW filter on device bond86
[  304.203814][T14931] bridge0: port 4(bond86) entered blocking state
[  304.206532][T14931] bridge0: port 4(bond86) entered disabled state
[  304.209402][T14931] bond86: entered allmulticast mode
[  304.260901][T14934] __nla_validate_parse: 22 callbacks suppressed
[  304.260922][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2246'.
[  304.293193][T14934] bond87: entered promiscuous mode
[  304.295786][T14934] 8021q: adding VLAN 0 to HW filter on device bond87
[  304.486227][   T33] audit: type=1804 audit(1778612880.267:13): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2248" name="/newroot/791/cgroup.controllers" dev="tmpfs" ino=4054 res=1 errno=0
[  304.491886][T14941] vxcan9: entered promiscuous mode
[  304.506613][   T33] audit: type=1800 audit(1778612880.267:14): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2248" name="cgroup.controllers" dev="tmpfs" ino=4054 res=0 errno=0
[  304.711759][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'.
[  304.773920][T14951] bond68: entered promiscuous mode
[  304.776413][T14951] 8021q: adding VLAN 0 to HW filter on device bond68
[  304.810360][T14954] bond63: Removing last arp target with arp_interval on
[  304.932066][T14967] bond65: (slave bridge18): making interface the new active one
[  304.943335][T14967] bond65: (slave bridge18): Enslaving as an active interface with an up link
[  304.956290][T14967] macvlan3: entered promiscuous mode
[  304.958446][T14967] macvlan3: entered allmulticast mode
[  304.970184][T14967] bond65: entered promiscuous mode
[  304.974781][T14967] bridge18: entered promiscuous mode
[  304.980648][T14967] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  304.993513][T14967] bond65: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  304.998796][T14967] bond65: left promiscuous mode
[  305.000772][T14967] bridge18: left promiscuous mode
[  305.096584][T14979] lo speed is unknown, defaulting to 1000
[  305.112017][T14977] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2258'.
[  305.200922][T14996] xt_hashlimit: max too large, truncated to 1048576
[  305.231740][T14993] 8021q: adding VLAN 0 to HW filter on device bond66
[  305.244991][T14996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'.
[  305.249444][T14996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'.
[  305.355802][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2265'.
[  305.373132][T15006] workqueue: Failed to create a rescuer kthread for wq "bond89": -EINTR
[  305.406237][T14974] lo speed is unknown, defaulting to 1000
[  305.668341][T15020] lo speed is unknown, defaulting to 1000
[  306.000319][T15040] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2273'.
[  306.255654][T15042] validate_nla: 4 callbacks suppressed
[  306.255671][T15042] netlink: 'syz.0.2274': attribute type 16 has an invalid length.
[  306.264866][T15042] netlink: 'syz.0.2274': attribute type 17 has an invalid length.
[  306.294440][T15042] erspan0: left promiscuous mode
[  306.326478][T15042] bridge0: left promiscuous mode
[  306.329226][T15042] 8021q: adding VLAN 0 to HW filter on device team0
[  306.339546][T15042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.365034][T15042] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  306.368793][T15042] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  306.377718][T15042] veth1_macvtap: left promiscuous mode
[  306.380464][T15042] veth0_macvtap: left promiscuous mode
[  306.383382][T15042] veth0_macvtap: entered promiscuous mode
[  306.386487][T15042] veth1_macvtap: entered promiscuous mode
[  306.396682][T15042] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  306.402673][   T10] lo speed is unknown, defaulting to 1000
[  306.409574][   T10] sqz0: Port: 1 Link ACTIVE
[  306.423955][ T8314] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  306.426328][ T8314] bridge0: port 1(veth0_virt_wifi) entered listening state
[  306.443520][ T8314] bridge0: port 3(vlan6) entered blocking state
[  306.445534][ T8314] bridge0: port 3(vlan6) entered listening state
[  306.447862][ T7288] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.451151][ T7288] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.497707][ T7288] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.498390][   T10] lo speed is unknown, defaulting to 1000
[  306.500849][ T7288] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.528667][T15051] openvswitch: netlink: IP tunnel dst address not specified
[  306.684686][T15059] xt_bpf: check failed: parse error
[  306.735847][T15059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2279'.
[  306.810837][T15065] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2281'.
[  306.866365][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2284'.
[  306.910243][T15075] netlink: 'syz.1.2282': attribute type 13 has an invalid length.
[  306.914834][T15075] netlink: 'syz.1.2282': attribute type 17 has an invalid length.
[  306.933840][T15075] 1{X: left allmulticast mode
[  306.975354][T15075] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.980789][T15075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.005571][T15075] veth1_to_batadv: left allmulticast mode
[  307.014903][T15075] veth1_macvtap: left promiscuous mode
[  307.018442][T15075] veth0_macvtap: left promiscuous mode
[  307.034431][T15075] veth0_macvtap: entered promiscuous mode
[  307.036503][T15075] veth0_macvtap: entered allmulticast mode
[  307.052987][T15075] veth1_macvtap: entered promiscuous mode
[  307.059125][T15075] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  307.099428][ T7288] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.105892][ T7288] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.115368][ T7288] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.122005][ T7288] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.303892][   T10] lo speed is unknown, defaulting to 1000
[  307.305783][   T10] sqz0: Port: 1 Link DOWN
[  307.307147][   T10] lo speed is unknown, defaulting to 1000
[  307.309227][T15097] netlink: 'syz.0.2291': attribute type 13 has an invalid length.
[  307.311587][T15097] netlink: 'syz.0.2291': attribute type 17 has an invalid length.
[  307.322558][T15097] gretap0: refused to change device tx_queue_len
[  307.328987][T15097] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  307.334564][ T6586] lo speed is unknown, defaulting to 1000
[  307.337077][ T6586] sqz0: Port: 1 Link ACTIVE
[  307.339103][ T6586] lo speed is unknown, defaulting to 1000
[  307.412223][T15105] bridge0: port 3(vlan6) entered disabled state
[  307.414355][T15105] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  307.441163][T15112] netlink: 'syz.0.2293': attribute type 13 has an invalid length.
[  307.497299][ T6586] lo speed is unknown, defaulting to 1000
[  307.501775][ T6586] sqz0: Port: 1 Link DOWN
[  307.504097][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.510469][ T6586] lo speed is unknown, defaulting to 1000
[  307.514302][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.524180][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.529342][T15102] lo speed is unknown, defaulting to 1000
[  307.529369][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.923676][T15126] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  308.394135][T15157] 8021q: adding VLAN 0 to HW filter on device bond69
[  308.760990][T15196] netlink: 'syz.2.2317': attribute type 9 has an invalid length.
[  308.816892][T15204] netlink: 'syz.2.2319': attribute type 1 has an invalid length.
[  308.834952][T15204] 8021q: adding VLAN 0 to HW filter on device bond70
[  308.866488][T15204] bond70: (slave geneve3): making interface the new active one
[  308.871673][T15204] bond70: (slave geneve3): Enslaving as an active interface with an up link
[  308.875829][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.888580][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.892180][T15204] syz.2.2319 (15204) used greatest stack depth: 18400 bytes left
[  308.894960][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.900811][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.951434][T15207] syzkaller0: entered promiscuous mode
[  308.953595][T15207] syzkaller0: entered allmulticast mode
[  309.163181][T15219] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.439257][T15243] netlink: 'syz.2.2329': attribute type 21 has an invalid length.
[  309.442968][T15243] __nla_validate_parse: 18 callbacks suppressed
[  309.442983][T15243] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2329'.
[  309.471668][T15243] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2329'.
[  309.598284][T15247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2330'.
[  309.628481][T15252] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  309.649195][T15252] tunl0: Caught tx_queue_len zero misconfig
[  309.664530][T15252] tipc: Resetting bearer <eth:syzkaller0>
[  309.724007][T15265] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2335'.
[  309.790890][T15269] bond71: (slave bridge26): Enslaving as a backup interface with an up link
[  309.806155][T15269] bond71: (slave bridge27): Enslaving as a backup interface with a down link
[  310.015591][T15289] ip6tnl0: Caught tx_queue_len zero misconfig
[  310.022955][T15287] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2342'.
[  310.189188][T15303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'.
[  310.192233][T15292] GUP no longer grows the stack in syz.0.2344 (15292): 200000003000-20000000a000 (200000001000)
[  310.192740][T15292] CPU: 0 UID: 0 PID: 15292 Comm: syz.0.2344 Not tainted syzkaller #0 PREEMPT(full) 
[  310.192757][T15292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  310.192766][T15292] Call Trace:
[  310.192771][T15292]  <TASK>
[  310.192777][T15292]  dump_stack_lvl+0xe8/0x150
[  310.192800][T15292]  __get_user_pages+0x2378/0x2720
[  310.192853][T15292]  ? __gup_longterm_locked+0xc4e/0x1630
[  310.192881][T15292]  ? __gup_longterm_locked+0xc4e/0x1630
[  310.192896][T15292]  ? down_read_killable+0x1bb/0x340
[  310.192916][T15292]  __gup_longterm_locked+0xdcf/0x1630
[  310.192934][T15292]  ? lock_acquire+0x106/0x350
[  310.192961][T15292]  gup_fast_fallback+0x1d84/0x20d0
[  310.192999][T15292]  ? __pfx_gup_fast_fallback+0x10/0x10
[  310.193016][T15292]  ? is_valid_gup_args+0x11f/0x200
[  310.193032][T15292]  ? get_user_pages_fast+0x4d/0xb0
[  310.193051][T15292]  __iov_iter_get_pages_alloc+0x370/0xa10
[  310.193076][T15292]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  310.193097][T15292]  iov_iter_get_pages2+0x5e/0xa0
[  310.193118][T15292]  __se_sys_vmsplice+0x7c7/0x1620
[  310.193148][T15292]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  310.193167][T15292]  ? __pfx_futex_wake+0x10/0x10
[  310.193190][T15292]  ? lockdep_hardirqs_on+0x7a/0x110
[  310.193248][T15292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.193263][T15292]  do_syscall_64+0x15f/0xf80
[  310.193274][T15292]  ? trace_irq_disable+0x3b/0x140
[  310.193297][T15292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.193310][T15292] RIP: 0033:0x7f18b699cdd9
[  310.193323][T15292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.193334][T15292] RSP: 002b:00007f18b793c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  310.193349][T15292] RAX: ffffffffffffffda RBX: 00007f18b6c15fa0 RCX: 00007f18b699cdd9
[  310.193359][T15292] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008
[  310.193368][T15292] RBP: 00007f18b6a32d69 R08: 0000000000000000 R09: 0000000000000000
[  310.193377][T15292] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  310.193385][T15292] R13: 00007f18b6c16038 R14: 00007f18b6c15fa0 R15: 00007ffef1f0fbc8
[  310.193409][T15292]  </TASK>
[  310.199330][T15292] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  310.255116][T15303] netlink: 'syz.1.2346': attribute type 11 has an invalid length.
[  310.273060][T15300] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2347'.
[  310.287729][T15303] netlink: 'syz.1.2346': attribute type 11 has an invalid length.
[  310.290908][T15303] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2346'.
[  310.426201][T15315] syzkaller1: entered promiscuous mode
[  310.428061][T15315] syzkaller1: entered allmulticast mode
[  310.435147][T15315] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2350'.
[  310.445389][T15315] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  310.450534][T15315] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  310.456500][T15315] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  310.463856][T15315] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  310.476421][T15315] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  310.711720][T15325] wg1 speed is unknown, defaulting to 1000
[  310.714722][T15325] wg1 speed is unknown, defaulting to 1000
[  310.720835][T15325] wg1 speed is unknown, defaulting to 1000
[  310.727666][T15325] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  310.733442][T15325] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  310.740059][T15325] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  310.757915][T15325] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  310.780062][T15325] wg1 speed is unknown, defaulting to 1000
[  310.784615][T15325] wg1 speed is unknown, defaulting to 1000
[  310.790435][T15325] wg1 speed is unknown, defaulting to 1000
[  310.983683][T15332] bond70: entered promiscuous mode
[  310.986312][T15332] 8021q: adding VLAN 0 to HW filter on device bond70
[  310.995661][T15332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2354'.
[  310.999529][T15332] bond70: entered allmulticast mode
[  311.025873][T15332] bond70: (slave bridge19): making interface the new active one
[  311.029150][T15332] bridge19: entered promiscuous mode
[  311.031605][T15332] bridge19: entered allmulticast mode
[  311.037644][T15332] bond70: (slave bridge19): Enslaving as an active interface with an up link
[  311.342078][T15338] 8021q: adding VLAN 0 to HW filter on device team0
[  311.347792][ T6586] lo speed is unknown, defaulting to 1000
[  311.350335][ T6586] sqz0: Port: 1 Link ACTIVE
[  311.352199][ T6586] lo speed is unknown, defaulting to 1000
[  313.907508][T15346] validate_nla: 6 callbacks suppressed
[  313.907559][T15346] netlink: 'syz.1.2357': attribute type 1 has an invalid length.
[  313.912085][T15345] netlink: 'syz.2.2359': attribute type 1 has an invalid length.
[  313.948151][T15345] 8021q: adding VLAN 0 to HW filter on device bond73
[  313.969926][T15345] bond73: (slave gretap2): making interface the new active one
[  313.976473][T15345] bond73: (slave gretap2): Enslaving as an active interface with an up link
[  314.015771][T15350] 8021q: adding VLAN 0 to HW filter on device bond71
[  314.253943][T15378] netlink: 'syz.0.2363': attribute type 13 has an invalid length.
[  314.263783][T15378] netlink: 'syz.0.2363': attribute type 17 has an invalid length.
[  314.285528][T15378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.327304][T15378] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  314.330856][T15378] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  314.339923][T15378] veth1_macvtap: left promiscuous mode
[  314.344277][T15378] veth0_macvtap: left promiscuous mode
[  314.347617][T15378] veth0_macvtap: entered promiscuous mode
[  314.350923][T15378] veth1_macvtap: entered promiscuous mode
[  314.357953][T15378] bridge0: port 3(vlan6) entered blocking state
[  314.360358][T15378] bridge0: port 3(vlan6) entered listening state
[  314.364824][T15378] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  314.380925][T11470] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  314.383401][T11470] bridge0: port 1(veth0_virt_wifi) entered listening state
[  314.389240][ T5668] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.396445][ T5668] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.405660][ T5668] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.416644][ T5668] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.452763][T15393] lo speed is unknown, defaulting to 1000
[  314.477257][T15388] __nla_validate_parse: 3 callbacks suppressed
[  314.477270][T15388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2366'.
[  314.483419][T15388] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2366'.
[  314.577248][T15400] netlink: 'syz.0.2368': attribute type 39 has an invalid length.
[  314.588791][T15395] lo speed is unknown, defaulting to 1000
[  314.592580][T15393] wg1 speed is unknown, defaulting to 1000
[  314.759077][T15395] wg1 speed is unknown, defaulting to 1000
[  314.759873][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2367'.
[  315.096894][T15380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  315.385450][T15409] netlink: 'syz.2.2371': attribute type 9 has an invalid length.
[  315.439523][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'.
[  315.571503][T15420] bridge20: entered promiscuous mode
[  315.575805][T15420] bridge20: entered allmulticast mode
[  315.643792][T15426] xt_l2tp: invalid flags combination: 8
[  315.670224][T15426] netlink: 'syz.0.2374': attribute type 1 has an invalid length.
[  315.684442][T15426] gre0: entered promiscuous mode
[  315.689663][T15426] gre0: entered allmulticast mode
[  315.964154][T15432] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  319.053277][T15453] workqueue: Failed to create a rescuer kthread for wq "bond90": -EINTR
[  319.208355][T15470] netlink: 'syz.2.2383': attribute type 1 has an invalid length.
[  319.220524][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'.
[  319.381363][T15484] netlink: 'syz.0.2386': attribute type 1 has an invalid length.
[  319.443231][T15484] 8021q: adding VLAN 0 to HW filter on device bond90
[  319.472058][T15484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.490836][T15484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2386'.
[  319.495965][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'.
[  319.499067][T15484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'.
[  319.501930][T15484] netlink: 'syz.0.2386': attribute type 19 has an invalid length.
[  319.504702][T15484] netlink: 'syz.0.2386': attribute type 20 has an invalid length.
[  319.570429][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'.
[  319.597650][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'.
[  319.614135][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2391'.
[  319.648962][T15505] netlink: 'syz.1.2391': attribute type 1 has an invalid length.
[  319.689416][T15505] bond73 (unregistering): Released all slaves
[  319.745853][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'.
[  319.749477][T15519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2394'.
[  319.888437][T15536] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  319.894821][T15536] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2399'.
[  319.958282][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2402'.
[  320.041716][T15547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.707098][T15561] netlink: 'syz.1.2409': attribute type 1 has an invalid length.
[  320.734755][T15561] 8021q: adding VLAN 0 to HW filter on device bond73
[  320.792083][T15561] macvlan3: entered promiscuous mode
[  320.794791][T15561] macvlan3: entered allmulticast mode
[  320.858821][ T5783] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  320.861671][ T5783] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  320.865571][ T5783] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  320.868767][ T5783] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  321.307802][T15591] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.315541][T15596] netlink: 'syz.2.2417': attribute type 1 has an invalid length.
[  321.361614][T15596] bond74: entered promiscuous mode
[  321.366822][T15596] 8021q: adding VLAN 0 to HW filter on device bond74
[  321.379517][T15596] bond74: entered allmulticast mode
[  321.426619][T15596] bond74: (slave bridge28): making interface the new active one
[  321.431757][T15596] bridge28: entered promiscuous mode
[  321.436787][T15596] bridge28: entered allmulticast mode
[  321.446871][T15596] bond74: (slave bridge28): Enslaving as an active interface with an up link
[  321.462187][T15591] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.631690][T15591] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.680456][T15591] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.776904][ T5783] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.793213][ T5783] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.806643][ T5783] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.834826][ T5783] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.914982][T15613] netlink: 'syz.2.2421': attribute type 3 has an invalid length.
[  321.917941][T15613] netlink: 'syz.2.2421': attribute type 2 has an invalid length.
[  321.920947][T15613] netlink: 'syz.2.2421': attribute type 2 has an invalid length.
[  322.021580][T15617] vti3: entered promiscuous mode
[  322.024959][T15619] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.112148][T15627] bond75 (unregistering): Released all slaves
[  322.140057][T15621] gtp1: entered allmulticast mode
[  322.223721][T15632] bond74: option fail_over_mac: invalid value (127)
[  322.230542][T15632] bond74 (unregistering): Released all slaves
[  322.250222][T15636] ip6gre3: entered promiscuous mode
[  322.393926][T15650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  322.410176][T15650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  322.419397][T15650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  322.451346][T15653] lo speed is unknown, defaulting to 1000
[  322.636152][T15653] wg1 speed is unknown, defaulting to 1000
[  322.711635][T15667] bond74: Invalid ad_actor_system MAC address.
[  322.713993][T15667] bond74: option ad_actor_system: invalid value (1)
[  322.717295][T15667] bond74 (unregistering): Released all slaves
[  322.855891][T15672] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.998181][T15678] netlink: 'syz.0.2443': attribute type 11 has an invalid length.
[  323.258786][T15681] tipc: Disabling bearer <eth:vlan0>
[  323.291737][T15698] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  323.401630][T15703] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  323.445641][T15709] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.487421][T15709] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.550277][T15716] 8021q: adding VLAN 0 to HW filter on device bond76
[  323.557682][T15716] bond75: (slave bond76): making interface the new active one
[  323.560767][T15716] bond75: (slave bond76): Enslaving as an active interface with an up link
[  323.583070][T15713] 8021q: adding VLAN 0 to HW filter on device bond77
[  323.588206][T15713] bond75: (slave bond77): Enslaving as a backup interface with an up link
[  323.598351][T15709] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.613663][T15716] 8021q: adding VLAN 0 to HW filter on device bond75
[  323.651235][T15709] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.762829][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.777753][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.796662][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.816269][ T5783] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.185996][T15750] tipc: Resetting bearer <eth:syzkaller0>
[  324.242081][T15753] validate_nla: 9 callbacks suppressed
[  324.242102][T15753] netlink: 'syz.2.2459': attribute type 13 has an invalid length.
[  324.270674][T15753] netlink: 'syz.2.2459': attribute type 17 has an invalid length.
[  324.413241][T15761] netlink: 'syz.1.2460': attribute type 1 has an invalid length.
[  324.419418][T15761] netlink: 'syz.1.2460': attribute type 2 has an invalid length.
[  324.427903][T15761] netlink: 'syz.1.2460': attribute type 1 has an invalid length.
[  324.435036][T15761] netlink: 'syz.1.2460': attribute type 3 has an invalid length.
[  324.544311][T15753] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.548198][T15753] 8021q: adding VLAN 0 to HW filter on device `
[  324.554206][T15753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.578737][T15753] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  324.585377][T15753] veth1_vlan: left promiscuous mode
[  324.587749][T15753] veth0_vlan: left promiscuous mode
[  324.589810][T15753] veth0_vlan: entered promiscuous mode
[  324.593936][T15753] veth1_vlan: entered promiscuous mode
[  324.598917][T15753] veth1_macvtap: left promiscuous mode
[  324.601892][T15753] veth0_macvtap: left promiscuous mode
[  324.605590][T15753] veth0_macvtap: entered promiscuous mode
[  324.618177][T15753] veth1_macvtap: entered promiscuous mode
[  324.622522][T15753] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  324.629957][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.632135][   T83] bridge0: port 2(bridge_slave_1) entered listening state
[  324.639966][   T83] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  324.642242][   T83] bridge0: port 3(veth0_virt_wifi) entered listening state
[  324.645887][   T83] bridge0: port 4(veth1_virt_wifi) entered blocking state
[  324.648148][   T83] bridge0: port 4(veth1_virt_wifi) entered listening state
[  324.659666][ T5677] wg1 speed is unknown, defaulting to 1000
[  324.661781][ T5677] syz0: Port: 1 Link ACTIVE
[  324.768602][T15775] __nla_validate_parse: 41 callbacks suppressed
[  324.768623][T15775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2462'.
[  324.796729][T15777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2463'.
[  324.831151][T15779] netlink: 'syz.0.2464': attribute type 58 has an invalid length.
[  324.834552][T15779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2464'.
[  324.970617][T15793] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2468'.
[  324.975594][T15793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  324.983493][T15794] netlink: 'syz.0.2469': attribute type 1 has an invalid length.
[  325.030352][T15794] bond91: (slave vxcan11): The slave device specified does not support setting the MAC address
[  325.036939][T15794] bond91: (slave vxcan11): Setting fail_over_mac to active for active-backup mode
[  325.047605][T15794] bond91: (slave vxcan11): making interface the new active one
[  325.061456][T15794] bond91: (slave vxcan11): Enslaving as an active interface with an up link
[  325.077569][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'.
[  325.089111][T15801] netlink: 'syz.1.2472': attribute type 1 has an invalid length.
[  325.093630][T15794] bond91 (unregistering): (slave vxcan11): Releasing backup interface
[  325.097983][T15794] bond91 (unregistering): Released all slaves
[  325.274369][T15811] bond91: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  325.277748][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'.
[  325.311981][T15811] bond91 (unregistering): Released all slaves
[  325.312272][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2474'.
[  325.318375][T15816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2474'.
[  325.389272][T15808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  325.404925][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2473'.
[  325.442049][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2477'.
[  325.478824][T15823] bond78: (slave vxcan1): The slave device specified does not support setting the MAC address
[  325.482977][T15823] bond78: (slave vxcan1): Error -95 calling set_mac_address
[  325.522254][T15827] macsec4: entered promiscuous mode
[  325.525024][T15827] dummy0: entered promiscuous mode
[  325.528062][T15827] macsec4: entered allmulticast mode
[  325.530047][T15827] dummy0: entered allmulticast mode
[  325.538168][T15827] dummy0: left allmulticast mode
[  325.548445][ T5426] dummy0: left promiscuous mode
[  325.628126][T15839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  325.704592][T15845] bond91: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  325.714009][T15845] bond91: (slave lo): Enslaving as an active interface with an up link
[  325.718105][T15845] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  325.728329][ T5426] lo speed is unknown, defaulting to 1000
[  325.732790][ T6570] lo speed is unknown, defaulting to 1000
[  325.736865][ T5426] lo speed is unknown, defaulting to 1000
[  325.754783][T15848] netlink: 'syz.0.2485': attribute type 1 has an invalid length.
[  325.819370][T15853] 8021q: adding VLAN 0 to HW filter on device bond92
[  325.824032][T15855] bond92 (unregistering): Released all slaves
[  325.928890][T15863] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  326.240540][T15895] bond79: entered promiscuous mode
[  326.243042][T15895] 8021q: adding VLAN 0 to HW filter on device bond79
[  326.427069][T15898] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  326.748293][T15929] bond80: (slave bond_slave_1): Device is not bonding slave
[  326.751070][T15929] bond80: option active_slave: invalid value (bond_slave_1)
[  326.755698][T15929] bond80 (unregistering): Released all slaves
[  327.089064][T15950] veth26: entered allmulticast mode
[  327.154569][    C1] bridge0: port 4(veth1_virt_wifi) entered blocking state
[  327.291425][T15968] bond0: Error: Cannot enslave bond to itself.
[  327.418015][T15972] bond93: (slave veth27): Enslaving as an active interface with a down link
[  327.608724][T15992] xt_l2tp: invalid flags combination: 8
[  328.111065][T16028] bridge0: port 3(vlan6) entered disabled state
[  328.113342][T16028] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  328.216729][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.219689][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.223701][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.229675][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  328.477230][T16041] openvswitch: netlink: EtherType 0 is less than min 600
[  328.485802][T16041] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.563046][T16041] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.610057][T16041] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.647719][T16041] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.660604][T16051] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.716407][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.726071][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.742937][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.755299][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.877142][T16061] bridge0: port 4(veth1_virt_wifi) entered disabled state
[  328.879676][T16061] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  328.882519][T16061] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.222972][T16059] bond75: invalid ARP target 0.0.0.0 specified for addition
[  329.225978][T16059] bond75: option arp_ip_target: invalid value (0)
[  329.231185][T16059] bond75 (unregistering): Released all slaves
[  329.262840][   T24] wg1 speed is unknown, defaulting to 1000
[  329.271044][   T24] syz0: Port: 1 Link DOWN
[  329.291960][ T7288] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.322492][ T7288] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.370930][ T7288] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.395509][ T7288] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  329.411691][T16084] netem: change failed
[  329.446942][T16086] xt_l2tp: missing protocol rule (udp|l2tpip)
[  329.500082][T16094] validate_nla: 11 callbacks suppressed
[  329.500095][T16094] netlink: 'syz.1.2544': attribute type 1 has an invalid length.
[  329.539494][T16099] netlink: 'syz.0.2545': attribute type 1 has an invalid length.
[  329.545464][T16098] netlink: 'syz.0.2545': attribute type 1 has an invalid length.
[  329.578172][T16102] netlink: 'syz.1.2546': attribute type 1 has an invalid length.
[  329.598567][T16102] 8021q: adding VLAN 0 to HW filter on device bond75
[  329.636502][T16102] veth23: entered allmulticast mode
[  329.649812][T16102] bond75: (slave veth23): Enslaving as an active interface with an up link
[  329.682195][T16102] bond75 (unregistering): (slave veth23): Releasing backup interface
[  329.700463][T16102] bond75 (unregistering): Released all slaves
[  329.706284][T16109] netlink: 'syz.2.2547': attribute type 1 has an invalid length.
[  329.706334][T16108] netlink: 'syz.2.2547': attribute type 1 has an invalid length.
[  329.719943][T16112] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  329.726611][T16112] netlink: 'syz.0.2548': attribute type 8 has an invalid length.
[  329.739211][T16108] bond80: entered promiscuous mode
[  329.741697][T16108] 8021q: adding VLAN 0 to HW filter on device bond80
[  329.747958][T16109] bond80: entered allmulticast mode
[  329.801348][T16114] __nla_validate_parse: 231 callbacks suppressed
[  329.801370][T16114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2549'.
[  329.872028][T16109] bridge29: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  329.900379][T16117] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2550'.
[  329.918066][T16117] IPVS: sh: FWM 3 0x00000003 - no destination available
[  329.945688][T16119] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2551'.
[  330.021218][T16126] ipvlan0: left promiscuous mode
[  330.032091][T16126] netlink: 'syz.1.2554': attribute type 10 has an invalid length.
[  330.106874][T16132] netlink: 'syz.0.2556': attribute type 10 has an invalid length.
[  330.137541][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2554'.
[  330.147715][T16136] trusted_key: syz.2.2557 sent an empty control message without MSG_MORE.
[  330.225595][T16143] netlink: 'syz.0.2558': attribute type 4 has an invalid length.
[  330.234230][T16136] tipc: Resetting bearer <eth:syzkaller0>
[  330.255729][ T6564] wg1 speed is unknown, defaulting to 1000
[  330.359551][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2561'.
[  330.375787][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  330.375847][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2561'.
[  330.380836][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  330.386102][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  330.389332][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  330.493780][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'.
[  330.530162][T16166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2564'.
[  330.565386][T16166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2564'.
[  330.791049][T16171] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2565'.
[  331.029122][T16193] syzkaller1: tun_chr_ioctl cmd 1074025677
[  331.031501][T16193] syzkaller1: Refused to change device type
[  331.046834][T16190] syzkaller0: left promiscuous mode
[  331.049109][T16190] syzkaller0: left allmulticast mode
[  331.205001][T16214] 8021q: adding VLAN 0 to HW filter on device bond81
[  331.243447][T16212] veth11: entered allmulticast mode
[  331.255701][T16212] bond81: (slave veth11): Enslaving as an active interface with an up link
[  331.268938][T16212] syzkaller0: entered promiscuous mode
[  331.272527][T16212] syzkaller0: entered allmulticast mode
[  331.325602][T16223] 8021q: adding VLAN 0 to HW filter on device bond25
[  331.361346][T16228] syzkaller1: entered promiscuous mode
[  331.363699][T16228] syzkaller1: entered allmulticast mode
[  331.395964][T16228] bond94: option ad_actor_sys_prio: invalid value (0)
[  331.398784][T16228] bond94: option ad_actor_sys_prio: allowed values 1 - 65535
[  331.406588][T16228] bond94 (unregistering): Released all slaves
[  331.583254][T16248] netem: incorrect ge model size
[  331.587398][T16248] netem: change failed
[  331.626656][T16251] lo: entered promiscuous mode
[  331.648890][T16251] lo: left promiscuous mode
[  331.689753][T16266] pimreg: left allmulticast mode
[  331.691458][T16266] dvmrp6: left allmulticast mode
[  331.718430][T16268] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  331.743113][T16277] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  331.805114][T16286] nbd: illegal input index 871591272
[  331.825866][T16286] bond75: option miimon: invalid value (18446744073709551607)
[  331.828296][T16286] bond75: option miimon: allowed values 0 - 2147483647
[  331.833178][T16286] bond75 (unregistering): Released all slaves
[  331.870851][T16290] bond82: Removing last arp target with arp_interval on
[  331.954017][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.956530][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.959545][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  331.964751][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.010181][T16300] xt_l2tp: invalid flags combination: 8
[  332.032469][T16300] gre0: entered promiscuous mode
[  332.035924][T16300] gre0: entered allmulticast mode
[  332.066152][T16304] dvmrp6: entered allmulticast mode
[  332.080863][T16304] openvswitch: netlink: Actions may not be safe on all matching packets
[  332.164817][T16301] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  332.177693][T16311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  332.188611][T16304] gre0: left promiscuous mode
[  332.196819][T16304] gre0: left allmulticast mode
[  332.247335][T16312] xt_connbytes: Forcing CT accounting to be enabled
[  332.266340][T16304] 8021q: adding VLAN 0 to HW filter on device team0
[  332.285935][T16304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.318327][T16304] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  332.509710][T16326] tipc: Resetting bearer <eth:syzkaller0>
[  332.524245][ T5426] wg1 speed is unknown, defaulting to 1000
[  332.567567][T16323] 8021q: adding VLAN 0 to HW filter on device bond95
[  332.577107][T16323] bond94: (slave bond95): making interface the new active one
[  332.580599][T16323] bond94: (slave bond95): Enslaving as an active interface with an up link
[  332.587652][T16328] 8021q: adding VLAN 0 to HW filter on device bond94
[  332.739194][T16341] lo speed is unknown, defaulting to 1000
[  332.918709][T16345] bond75: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  332.934512][T16345] bond75 (unregistering): Released all slaves
[  333.014088][T16341] wg1 speed is unknown, defaulting to 1000
[  333.509917][T16364] bond0: (slave vlan9): Opening slave failed
[  333.834236][T16390] bond83: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  333.838927][T16390] bond83 (unregistering): Released all slaves
[  334.092796][T16410] bond75: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  334.097315][T16410] bond75 (unregistering): Released all slaves
[  334.124021][T16413] netpci0: tun_chr_ioctl cmd 1074025678
[  334.127396][T16413] netpci0: group set to 0
[  334.130989][T16413] 1: renamed from c0
[  334.136175][T16413] 1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  334.140278][T16413] 1: entered allmulticast mode
[  334.143336][T16413] hsr_slave_0: entered allmulticast mode
[  334.145644][T16413] hsr_slave_1: entered allmulticast mode
[  334.163557][T16413] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  334.264868][T16418] tipc: MTU too low for tipc bearer
[  334.272265][T16418] tipc: MTU too low for tipc bearer
[  334.526300][T16441] validate_nla: 14 callbacks suppressed
[  334.526313][T16441] netlink: 'syz.0.2635': attribute type 1 has an invalid length.
[  334.579383][T16441] bond96: (slave vxcan13): The slave device specified does not support setting the MAC address
[  334.587008][T16441] bond96: (slave vxcan13): Error -95 calling set_mac_address
[  334.650977][T16449] netlink: 'syz.2.2637': attribute type 1 has an invalid length.
[  334.657524][T16449] netlink: 'syz.2.2637': attribute type 1 has an invalid length.
[  334.677327][T16453] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  334.857692][T16456] syzkaller0: Caught tx_queue_len zero misconfig
[  334.890234][T16464] netlink: 'syz.1.2641': attribute type 32 has an invalid length.
[  335.084459][T16471] lo speed is unknown, defaulting to 1000
[  335.131735][T16473] __nla_validate_parse: 27 callbacks suppressed
[  335.131755][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2643'.
[  335.164140][T16473] gtp2: entered promiscuous mode
[  335.168465][T16473] gtp2: entered allmulticast mode
[  335.187344][T16473] x_tables: duplicate underflow at hook 2
[  335.211674][T16471] wg1 speed is unknown, defaulting to 1000
[  335.311726][T16477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2644'.
[  335.404152][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2645'.
[  335.443394][T16479] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  335.448260][T16479] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  335.579266][T16479] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  335.582554][T16479] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  335.776320][T16479] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  335.780861][T16479] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  335.784191][T16479] CPU: 1 UID: 0 PID: 16479 Comm: syz.1.2645 Not tainted syzkaller #0 PREEMPT(full) 
[  335.787717][T16479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.791423][T16479] RIP: 0010:klist_remove+0x156/0x340
[  335.793349][T16479] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd de 90 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be de 90 f6 49 8b 44 24 58 48 89 44 24 08
[  335.800419][T16479] RSP: 0018:ffffc9000ad07820 EFLAGS: 00010202
[  335.802684][T16479] RAX: 000000000000000b RBX: ffff888020260000 RCX: 0000000000000000
[  335.805557][T16479] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  335.808479][T16479] RBP: ffffc9000ad07920 R08: ffffffff90174cc3 R09: 1ffffffff202e998
[  335.811418][T16479] R10: dffffc0000000000 R11: fffffbfff202e999 R12: 0000000000000000
[  335.814060][T16479] R13: 1ffff11037257c8c R14: ffff8881b92be460 R15: dffffc0000000000
[  335.816575][T16479] FS:  00007fa3676a16c0(0000) GS:ffff8882a9287000(0000) knlGS:0000000000000000
[  335.819679][T16479] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  335.821644][T16479] CR2: 00007ffe8c9d4c68 CR3: 00000000225f6000 CR4: 00000000000006f0
[  335.824119][T16479] Call Trace:
[  335.825142][T16479]  <TASK>
[  335.826062][T16479]  ? __pfx_klist_remove+0x10/0x10
[  335.827607][T16479]  ? kobject_move+0x5de/0x720
[  335.829268][T16479]  ? __pfx_kobject_move+0x10/0x10
[  335.831025][T16479]  ? do_raw_spin_unlock+0x4d/0x210
[  335.832496][T16479]  ? get_device_parent+0x366/0x3a0
[  335.834172][T16479]  device_move+0x193/0x730
[  335.835560][T16479]  hci_conn_del_sysfs+0xb8/0x1a0
[  335.837080][T16479]  hci_conn_del+0xc36/0x1230
[  335.838577][T16479]  hci_conn_hash_flush+0x191/0x260
[  335.840358][T16479]  hci_dev_close_sync+0x821/0x10e0
[  335.842185][T16479]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  335.843997][T16479]  ? do_raw_spin_lock+0x12b/0x2f0
[  335.845533][T16479]  hci_dev_do_close+0x30/0xc0
[  335.846982][T16479]  hci_rfkill_set_block+0x1f4/0x290
[  335.848748][T16479]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  335.850624][T16479]  rfkill_set_block+0x1a4/0x4e0
[  335.852120][T16479]  rfkill_fop_write+0x461/0x5a0
[  335.853538][T16479]  ? apparmor_file_permission+0x1f4/0x300
[  335.855275][T16479]  ? __pfx_rfkill_fop_write+0x10/0x10
[  335.856857][T16479]  ? security_file_permission+0x30/0x260
[  335.858737][T16479]  ? rw_verify_area+0x255/0x4d0
[  335.860431][T16479]  ? __pfx_rfkill_fop_write+0x10/0x10
[  335.862017][T16479]  vfs_write+0x29a/0xb90
[  335.863255][T16479]  ? __pfx_vfs_write+0x10/0x10
[  335.864657][T16479]  ? __fget_files+0x2a/0x420
[  335.866181][T16479]  ? __fget_files+0x2a/0x420
[  335.867806][T16479]  ? __fget_files+0x3a0/0x420
[  335.869470][T16479]  ? __fget_files+0x2a/0x420
[  335.870966][T16479]  ksys_write+0x150/0x270
[  335.872121][T16479]  ? __pfx_ksys_write+0x10/0x10
[  335.873487][T16479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.875554][T16479]  do_syscall_64+0x15f/0xf80
[  335.877202][T16479]  ? trace_irq_disable+0x3b/0x140
[  335.878785][T16479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.880529][T16479] RIP: 0033:0x7fa36679cdd9
[  335.881870][T16479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.888285][T16479] RSP: 002b:00007fa3676a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  335.891060][T16479] RAX: ffffffffffffffda RBX: 00007fa366a15fa0 RCX: 00007fa36679cdd9
[  335.893516][T16479] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007
[  335.896151][T16479] RBP: 00007fa366832d69 R08: 0000000000000000 R09: 0000000000000000
[  335.898725][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.901273][T16479] R13: 00007fa366a16038 R14: 00007fa366a15fa0 R15: 00007ffddc4db7d8
[  335.903649][T16479]  </TASK>
[  335.904599][T16479] Modules linked in:
[  335.906363][T16479] ---[ end trace 0000000000000000 ]---
[  335.914325][T16479] RIP: 0010:klist_remove+0x156/0x340
[  335.916190][T16479] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd de 90 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be de 90 f6 49 8b 44 24 58 48 89 44 24 08
[  335.923299][T16479] RSP: 0018:ffffc9000ad07820 EFLAGS: 00010202
[  335.925380][T16479] RAX: 000000000000000b RBX: ffff888020260000 RCX: 0000000000000000
[  335.928014][T16479] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  335.930557][T16479] RBP: ffffc9000ad07920 R08: ffffffff90174cc3 R09: 1ffffffff202e998
[  335.933704][T16479] R10: dffffc0000000000 R11: fffffbfff202e999 R12: 0000000000000000
[  335.936191][T16479] R13: 1ffff11037257c8c R14: ffff8881b92be460 R15: dffffc0000000000
[  335.938992][T16479] FS:  00007fa3676a16c0(0000) GS:ffff8882a9287000(0000) knlGS:0000000000000000
[  335.941567][T16479] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  335.943918][T16479] CR2: 0000557f080737b8 CR3: 00000000225f6000 CR4: 00000000000006f0
[  335.946333][T16479] Kernel panic - not syncing: Fatal exception
[  335.948723][T16479] Kernel Offset: disabled
[  335.949982][T16479] Rebooting in 86400 seconds..
