last executing test programs:

990.06601ms ago: executing program 2 (id=1317):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'gre0\x00', <r1=>0x0, 0x8000, 0x80, 0x4, 0x4, {{0xd, 0x4, 0x2, 0x3e, 0x34, 0x68, 0x0, 0x33, 0x4, 0x0, @local, @remote, {[@generic={0x7, 0x3, '\x00'}, @noop, @timestamp={0x44, 0x4, 0x64}, @cipso={0x86, 0x17, 0x0, [{0x5, 0xf, "2446c682664ef110fc62bb7e6e"}, {0x2, 0x2}]}, @end]}}}}})
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0xb}, r1}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66)

914.172713ms ago: executing program 2 (id=1318):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x800}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x82)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

838.152375ms ago: executing program 2 (id=1319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001000000000000000000810000000000000000e0ffff07000f"], 0x24}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="bbad8b030a000200bb"], 0x28}}, 0x0)

726.679662ms ago: executing program 2 (id=1320):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x2000000000000105, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5ec7e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca48"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xd0, 0x0, 0x0, 0xffffffc0}, 0x10}, 0x94) (async, rerun: 32)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) (async, rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={<r3=>r2}) (async, rerun: 64)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02575f9300000000080000008002000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) (async)
recvmmsg(r6, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001540)=ANY=[@ANYRES32=r0, @ANYRESOCT=r7, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYRES16=r7, @ANYRES32, @ANYRES64=0x0], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000000102010200000085de05c533a355db07"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) (async, rerun: 64)
close(0xffffffffffffffff) (rerun: 64)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000100"/28], 0x50) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x10}, 0xc0)

726.345633ms ago: executing program 2 (id=1321):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x5, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0xfffffffffffffeb7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

630.346118ms ago: executing program 2 (id=1322):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000c26d6033e6ab3ea39600f0", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r1, 0x180000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881)
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x640100fe, 0x0, 0x0, 0x1, 0x7}}, 0xe8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="020602000200000002000000000000004427dff5fcb7693910d5b88667c60c9f8ce8bf5571d38d33c8a036dfb75c8858952fca74bd66ce5286c99f01c4fd6ace2e9c657e29240cd9dc4aef468a42ce0927b7d54f64186f71c5f8f436f765fe888bdb7a08f888fb2e6e34535a78ffbe79"], 0x10}}, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'})

479.759476ms ago: executing program 1 (id=1323):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000081", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1e001b00"/17], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="2400000016009fb2344655066e4bfdff09000000040000000c000a"], 0x24}}, 0x0)
write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6)
r4 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x314, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xca}, @NFTA_SET_DESC={0x2f8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x174, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e03}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x94}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xabf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9fd3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4d3}, @NFTA_SET_DESC_CONCAT={0x16c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ca7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x179e}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x36}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7d01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x69008421}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELRULE={0xac, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x806}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_USERDATA={0x16, 0x7, 0x1, 0x0, "b0aa5ad703bdd45eab4853ab4dd3262ff868"}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}]}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14}}, 0x42c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000)
syz_emit_ethernet(0x4e, &(0x7f00000013c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x8, 0x40, 0x0, 0x0, 0x4, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0xfc, 0x3}, @ssrr={0x89, 0xf, 0xce, [@multicast2, @loopback, @loopback]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000640)={[{0x2d, 'cpuset'}]}, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000081", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1e001b00"/17], 0x50) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) (async)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="2400000016009fb2344655066e4bfdff09000000040000000c000a"], 0x24}}, 0x0) (async)
write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) (async)
openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x314, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xca}, @NFTA_SET_DESC={0x2f8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x174, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e03}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x94}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xabf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9fd3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4d3}, @NFTA_SET_DESC_CONCAT={0x16c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ca7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x179e}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe0000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x36}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7d01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x69008421}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELRULE={0xac, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x806}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_USERDATA={0x16, 0x7, 0x1, 0x0, "b0aa5ad703bdd45eab4853ab4dd3262ff868"}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88fb}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}]}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14}}, 0x42c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) (async)
syz_emit_ethernet(0x4e, &(0x7f00000013c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x8, 0x40, 0x0, 0x0, 0x4, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0xfc, 0x3}, @ssrr={0x89, 0xf, 0xce, [@multicast2, @loopback, @loopback]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000640)={[{0x2d, 'cpuset'}]}, 0x8) (async)

420.00042ms ago: executing program 1 (id=1324):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000a2000000000500000a70000000060a0b04004000000000000002000000440004802c0001800b0001006e75506b9657f06d67656e00001c0002800800024000000002080003400000000008000140921968c9518118b50b00010072656a6563740000040002800900010073797a30dfff00000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x0)

344.365866ms ago: executing program 1 (id=1325):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000f0ffffffc3a20000a10000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f00000002c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x28}, 0x22)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400200142603600e1208000b0000000401a80016000c00014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10000, 0xffffe000}}]}}]}, 0x48}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

343.924809ms ago: executing program 0 (id=1326):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc054)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000))

290.396673ms ago: executing program 0 (id=1327):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0xfffffff8, 0x6, 0x80, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x1}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r5}, &(0x7f0000001340), &(0x7f0000001380)='%pI4   \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r8 = socket$inet(0x2, 0x802, 0x1)
write(r8, &(0x7f0000000440)="00008edf773c8000", 0x8)
shutdown(r7, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000280))

240.245159ms ago: executing program 0 (id=1328):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCSFWD(r1, 0x40047452, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000950012000a00ff000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece05532949fe7bf6e68d40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4bea6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)

239.246656ms ago: executing program 0 (id=1329):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x28}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xff}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4048001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48000)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xa2b}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40)
bind$phonet(r2, &(0x7f0000000540)={0x23, 0xc4, 0x7, 0x2}, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r2)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000600)={@loopback, <r7=>0x0}, &(0x7f0000000640)=0x14)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r6, 0x20, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
close(r2)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004054}, 0x4800)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r2)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000b00)={&(0x7f0000000940), 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd0, r10, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48000}, 0x800)
r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000b80), r9)
sendmsg$NET_DM_CMD_START(r9, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r11, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x1)
sendmsg$nl_route(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=@mpls_delroute={0x30, 0x19, 0x2, 0x70bd25, 0x25dfdbfd, {0x1c, 0x20, 0x14, 0x5, 0xfd, 0x3, 0xfd, 0x4, 0x400}, [@RTA_VIA={0x14, 0x12, {0x22, "7100ca60cb895d030dae14fa0d81"}}]}, 0x30}}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000dc0)={'batadv_slave_0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88880}, 0x8010)
r13 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f00000024c0)={&(0x7f0000000f00)=@l2={0x1f, 0xb1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x2}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f80)="06b20fb1cf9652c8e3653e5381e06631fee989123ef5290d1948c4fb46cc98b46308ddb4c31d2a2dcf06c6", 0x2b}, {&(0x7f0000000fc0)="c9e2bca81097013e662bd773054ef56f5c90b1274065ff99adbbcbde1d791899a7eaa2855c9097cb4c1914c2fb3eec076d31aab88b02c73535a29d9859e2d9759065a33eb914cba3f8d40258", 0x4c}, {&(0x7f0000001040)="e18cab53cce5e3d76bcbefa02224ef72c3272a5298b5367768f7abce505bd5bbcee1f97df17e798552d3c2990c1ab2e1271704944530d6c106d3da84c6c13b8ea09dd1d3e192da64f968f543502d0c92ac7a16c9c3971824b45191812253b47f95e4", 0x62}, {&(0x7f00000010c0)="fc0b24a800147fa1b827821b4ef7461ae0b5dbfbf806f8fc9e2e007b5d959c063d1fa7ddccb41425d7c349ff7cb5ab71ec7d53bfe85a3758964bb05c47299b7d70795f12f477a1c51bb16bc479446893c7ca34799feca4206b8916a3c9adb276e58803f6d5feb192c2ba052cfeb052da119cae4c6aff12b0bd46154ce535aab8d9f972eb3998bfe015f3b0ecd2cdfd33168e0f764930af1f02", 0x99}, {&(0x7f0000001180)="fa8423f7ba8ebd22ffd7ae93c088a521c9a2d3a901a11c30bfcc471bf07fd3d6", 0x20}], 0x5, &(0x7f0000001240)=[{0xd0, 0x112, 0x9, "43c32728f66232151061448edc81fa60db42779cd2e56a374f97426fa0024c254c8c3bac57eb7910031fc3f2858dde87bc4a37620339e55e1d39d30259018605eec26d0d1d9c94904fbab3f67beafd89494927171d0bcbc2a8f643f10070ed110c1583f73b726ca7d62b58b1a3869566d27aeeb1c23f372ca03dad159b48737a47a6dec89652cf800445d7db68abd7e4666043118f85dfdc16c61853980e66398920a60bbb045f3fd011c651a93f967b54a9b2580563618be13300154d655103"}, {0x100, 0x117, 0x0, "9bf853e084db5cc049a136d6dae7d9ac3aa4193676ed8834fc02b62c348ebccc244dd74bb4e2b6f801b27aca140e003ac9eb8baa659509197ac01f85b3a14741ca4633f7aad7ac4b3059d2afed34dd4597e62c75dbdc3950d2dd3f119f7f03f28f1771f8b7b1882d19e70023d05ce76eebb392a7b2cdfa807261b59bee1bd686307fd0a95c5cc1bda3678a0f1a0e15a28d75908804b06b71612cac633ca183afc91e75c63129a0acb255ca1c04470ccf944df5f3b3a1f97ef5057b85d74f50558f3e96be9c28fadc8beb50304edaa4ac46eb5b0a64fe6781af3b58aa6594b812bf1f4b94ac9539047e3ca8c1417fe6"}, {0x18, 0x104, 0x9, "774fdf"}, {0x1010, 0x115, 0x1, "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"}, {0x78, 0x111, 0x3, "e28bc6c03c41319479889d9b96121ea2289aeddb154a65d8985f3ea660d38a153dfa654f1af807ae7d6bcd36d86f62bbf44032e8005eb6d4b2b99f81a1b8a14167f30798a3b1a6f6718081542f68180038db43b3d30585bb081d627c64eff292ff37"}], 0x1270}, 0x4080)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x88004008}, 0xc, &(0x7f0000002600)={&(0x7f0000002540)={0xa4, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfe00}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000)

168.772323ms ago: executing program 1 (id=1330):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r2, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)

168.304988ms ago: executing program 0 (id=1331):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080020000000000000000008000c000780080019400000000005000100060000000500050000000005000400000000000900020073797a31000000000d000300686173683a6e65740000000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmmsg(r0, 0x0, 0x0, 0x80c4)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

165.939628ms ago: executing program 1 (id=1332):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0xfc, 0x0, 0x3ff}, {0x40, 0x1, 0x6, 0x100}, {0x6, 0x9, 0xc, 0x40}]}, 0x10)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

77.344934ms ago: executing program 0 (id=1333):
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x1, 0xae, 0x3, 0x0, 0x89, 0x8, 0x2, 0x81, 0x8ad0, 0x29a8, 0x8, 0xfffffffe, 0x3, 0x1, 0x3, 0x7, 0x1, 0x6, 0x9, 0x7, 0x2, 0xffff, 0x1b1e88b6, 0x1b, 0x9, 0x6, 0x9, 0x7, 0xb, 0x5, 0x2, 0x5, 0x4, 0x651, 0x8001, 0x7, 0x7dfb, 0x6, 0x6, 0x8001, 0x7, 0x1, 0x5, 0x9, 0x4, 0x80000001, 0x83, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0x800, 0x7, 0xd, 0x6, 0x6, 0x8, 0xfffffff9, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xc9, 0x7, 0x3, 0x3, 0x3, 0x87, 0xf, 0x2, 0x6, 0x389, 0x8, 0x7fff, 0x2, 0x0, 0xfc8, 0x6, 0x0, 0xdd7, 0x1, 0x3ff, 0x9, 0x0, 0x1, 0x8, 0xc, 0xfddd, 0x3, 0x7f, 0x0, 0xcf, 0xa, 0x7fffffff, 0xffffffff, 0x7, 0xfffffffc, 0x5, 0x3, 0x401, 0x4, 0xa9, 0x5, 0x3ff, 0x6, 0x6, 0x8, 0xf33, 0x8, 0x6, 0x0, 0x3, 0x2, 0x1, 0x4, 0xfffffe00, 0x5, 0x7fffffff, 0x1, 0x5, 0x8, 0x81, 0x6, 0x7b, 0x3, 0x0, 0x3, 0x2, 0x6, 0x7, 0x4b1d, 0x80000000, 0x7, 0x2, 0x7ff, 0x1, 0x40, 0x1, 0x6, 0x0, 0x5, 0x7, 0x0, 0x9, 0x1, 0xfffffffd, 0x2a, 0x4, 0x3, 0x400000, 0x7, 0x9, 0x9, 0x4, 0x3, 0x4, 0x2a8f529d, 0x4c, 0x2, 0x7fffffff, 0x8, 0x7fff, 0x800, 0xe, 0xa92d, 0x0, 0x1, 0x6, 0xbf, 0x0, 0x1, 0x81, 0x5c, 0xfff, 0x5, 0x7a15, 0xfffffffd, 0x0, 0xac, 0x2e5bb190, 0xda3, 0x9, 0x1, 0x80000001, 0x2, 0x4, 0x7674, 0x7, 0x6, 0x7, 0x4932, 0x6, 0x9, 0x5, 0x2, 0x2, 0x5, 0xffff, 0x81, 0x6, 0x25, 0x179, 0x0, 0x6d5, 0x4, 0x8, 0x6, 0x2, 0x0, 0x1, 0x5d, 0x6, 0x6c, 0x0, 0xe, 0x8, 0x53a, 0x4000002, 0x9, 0x4, 0x97, 0x3, 0x1f5, 0xbd0, 0x1, 0x5, 0xecfc, 0x5, 0x4, 0x9e38, 0x2, 0xffff, 0x2, 0xdb6f, 0xff, 0x1c, 0x9, 0x5, 0x800, 0xe685, 0xdb7, 0xfffffffa, 0x7, 0x2, 0x7ff, 0x997, 0xffff, 0x3, 0xd, 0x3, 0xe, 0x4, 0xbb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x402, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x8, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0x9, 0x9, 0x1, 0x10001, 0x5, 0x4, 0x10001, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x3, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x47ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x9, 0x9, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x5, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0xc89c, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x5, 0x7fffffff, 0xfffffffc, 0x2, 0x3, 0xfffffc01, 0x0, 0x6, 0x4, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x9, 0x40, 0x7, 0x200000, 0x8000, 0x3, 0xc, 0x6, 0x4, 0x7, 0xb95, 0x6, 0x7ff, 0x7fffffff, 0x7, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0xe, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x16, 0x2, 0x1, 0x0, 0xac, 0x6, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x7f, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x40000003, 0x9c7, 0x2000001, 0x6, 0x7, 0x1, 0x8, 0x8, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x6, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x5, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0xbb2e}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x2b, 'io'}]}, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1)

0s ago: executing program 1 (id=1334):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008001240000018000500050000000000050001"], 0x5c}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x44)
sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4100000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010002000000"], 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28174' (ED25519) to the list of known hosts.
syzkaller login: [   57.282989][ T5830] cgroup: Unknown subsys name 'net'
[   57.374940][ T5830] cgroup: Unknown subsys name 'cpuset'
[   57.380381][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.297926][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.874686][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.878835][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.882121][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.884862][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.887887][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.891133][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.923185][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.927891][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.933336][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.936681][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.952803][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.957271][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.962130][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.969246][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.973089][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.219147][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   64.351640][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   64.442500][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.445699][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.449091][ T5849] bridge_slave_0: entered allmulticast mode
[   64.454792][ T5849] bridge_slave_0: entered promiscuous mode
[   64.468203][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   64.490366][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.493608][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.496653][ T5849] bridge_slave_1: entered allmulticast mode
[   64.501126][ T5849] bridge_slave_1: entered promiscuous mode
[   64.578980][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.581534][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.584437][ T5844] bridge_slave_0: entered allmulticast mode
[   64.587574][ T5844] bridge_slave_0: entered promiscuous mode
[   64.593699][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.597432][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.601118][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.603538][ T5844] bridge_slave_1: entered allmulticast mode
[   64.606529][ T5844] bridge_slave_1: entered promiscuous mode
[   64.617334][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.689970][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.694682][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.697146][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.700064][ T5853] bridge_slave_0: entered allmulticast mode
[   64.704472][ T5853] bridge_slave_0: entered promiscuous mode
[   64.708058][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.711838][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.714758][ T5853] bridge_slave_1: entered allmulticast mode
[   64.718059][ T5853] bridge_slave_1: entered promiscuous mode
[   64.723294][ T5849] team0: Port device team_slave_0 added
[   64.728651][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.754307][ T5849] team0: Port device team_slave_1 added
[   64.794131][ T5844] team0: Port device team_slave_0 added
[   64.798491][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.817177][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.819821][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.830365][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.837489][ T5844] team0: Port device team_slave_1 added
[   64.843131][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.873574][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.876341][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.887337][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.905529][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.908266][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.918190][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.923295][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.925535][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.933912][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.956504][ T5853] team0: Port device team_slave_0 added
[   64.962774][ T5853] team0: Port device team_slave_1 added
[   65.004135][ T5849] hsr_slave_0: entered promiscuous mode
[   65.006571][ T5849] hsr_slave_1: entered promiscuous mode
[   65.030549][ T5844] hsr_slave_0: entered promiscuous mode
[   65.033290][ T5844] hsr_slave_1: entered promiscuous mode
[   65.035945][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   65.038215][ T5844] Cannot create hsr debugfs directory
[   65.041232][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.044415][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.054683][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.075587][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.077832][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.085778][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.211422][ T5853] hsr_slave_0: entered promiscuous mode
[   65.213901][ T5853] hsr_slave_1: entered promiscuous mode
[   65.216036][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   65.218009][ T5853] Cannot create hsr debugfs directory
[   65.390960][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.401988][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.433436][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.454895][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.519317][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.529818][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.548719][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.557937][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.611524][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.616683][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.628348][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.636586][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.662122][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.687741][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   65.702880][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.705222][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.714169][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.716876][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.742373][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.796075][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   65.813904][  T716] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.816803][  T716] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.842085][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.847387][  T716] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.849750][  T716] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.878162][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   65.901489][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.903797][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.919492][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.923840][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.929019][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.931327][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.941440][ T5235] Bluetooth: hci1: command tx timeout
[   66.024315][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.031319][ T5235] Bluetooth: hci2: command tx timeout
[   66.033334][ T5235] Bluetooth: hci0: command tx timeout
[   66.076824][ T5844] veth0_vlan: entered promiscuous mode
[   66.090657][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.099239][ T5844] veth1_vlan: entered promiscuous mode
[   66.139806][ T5844] veth0_macvtap: entered promiscuous mode
[   66.161869][ T5844] veth1_macvtap: entered promiscuous mode
[   66.172919][ T5849] veth0_vlan: entered promiscuous mode
[   66.186457][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.194283][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.205653][ T5849] veth1_vlan: entered promiscuous mode
[   66.211688][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.227966][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.232326][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.243223][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.253842][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.298393][ T5849] veth0_macvtap: entered promiscuous mode
[   66.314292][ T5853] veth0_vlan: entered promiscuous mode
[   66.326812][ T5849] veth1_macvtap: entered promiscuous mode
[   66.356634][ T5853] veth1_vlan: entered promiscuous mode
[   66.371806][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.374037][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.380368][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.410012][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.420299][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.424693][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.427666][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.448031][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.451983][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.455566][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.492308][ T5853] veth0_macvtap: entered promiscuous mode
[   66.504627][ T5853] veth1_macvtap: entered promiscuous mode
[   66.531136][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.563412][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.567942][  T716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.571076][  T716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.589763][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.610316][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.612853][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.613151][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.627848][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.631782][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.635465][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.755370][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.758402][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.815744][  T716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.818878][  T716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.949436][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.958659][ T5919] netlink: 768 bytes leftover after parsing attributes in process `syz.0.1'.
[   67.042693][ T5923] tipc: Started in network mode
[   67.044537][ T5923] tipc: Node identity 9a6a47fc3e64, cluster identity 4711
[   67.047600][ T5923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.072929][ T5923] syzkaller0: entered promiscuous mode
[   67.074789][ T5923] syzkaller0: entered allmulticast mode
[   67.120118][ T5923] tipc: Resetting bearer <eth:syzkaller0>
[   67.126760][ T5922] tipc: Resetting bearer <eth:syzkaller0>
[   67.139145][ T5922] tipc: Disabling bearer <eth:syzkaller0>
[   67.170265][ T5927] Zero length message leads to an empty skb
[   67.282668][ T5933] batadv1: entered allmulticast mode
[   67.402837][ T5939] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   67.406236][ T5896] IPVS: starting estimator thread 0...
[   67.442812][ T5947] netlink: 596 bytes leftover after parsing attributes in process `syz.2.12'.
[   67.484107][ T5947] geneve2: entered promiscuous mode
[   67.490680][ T5944] IPVS: using max 63 ests per chain, 151200 per kthread
[   67.607437][ T5957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.635393][ T5960] can: request_module (can-proto-4) failed.
[   67.640129][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   67.645374][ T5958] bridge_slave_1: left allmulticast mode
[   67.647549][ T5958] bridge_slave_1: left promiscuous mode
[   67.649940][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.656268][ T5958] bridge_slave_0: left allmulticast mode
[   67.658603][ T5958] bridge_slave_0: left promiscuous mode
[   67.662619][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.855994][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'.
[   67.859401][ T5977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'.
[   68.021717][ T5847] Bluetooth: hci1: command tx timeout
[   68.110880][ T5847] Bluetooth: hci0: command tx timeout
[   68.113142][ T5235] Bluetooth: hci2: command tx timeout
[   68.432150][ T5994] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   68.435979][ T5876] bond0: (slave bond_slave_0): interface is now down
[   68.438289][ T5876] bond0: (slave bond_slave_1): interface is now down
[   68.461303][ T5876] bond0: (slave bond_slave_0): interface is now down
[   68.463445][ T5876] bond0: (slave bond_slave_1): interface is now down
[   68.466858][ T5876] bond0: now running without any active interface!
[   68.622478][ T6013] tipc: Can't bind to reserved service type 1
[   68.626131][ T6013] netlink: 'syz.0.28': attribute type 39 has an invalid length.
[   68.682374][ T6018] netlink: 44 bytes leftover after parsing attributes in process `syz.0.28'.
[   68.685924][ T6018] netlink: 43 bytes leftover after parsing attributes in process `syz.0.28'.
[   68.689411][ T6018] netlink: 'syz.0.28': attribute type 5 has an invalid length.
[   68.693088][ T6018] netlink: 43 bytes leftover after parsing attributes in process `syz.0.28'.
[   68.702654][ T6018] vlan2: entered allmulticast mode
[   68.958017][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'.
[   69.077636][ T6030] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   69.077742][ T5859] bond0: (slave bond_slave_0): interface is now down
[   69.096216][ T5859] bond0: (slave bond_slave_1): interface is now down
[   69.102722][ T5859] bond0: now running without any active interface!
[   69.194827][ T6037] netlink: 'syz.2.33': attribute type 1 has an invalid length.
[   69.209621][ T6037] netlink: 'syz.2.33': attribute type 1 has an invalid length.
[   69.221295][ T6037] vlan2: entered allmulticast mode
[   69.223378][ T6037] veth0: entered allmulticast mode
[   69.911438][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.102446][ T5235] Bluetooth: hci1: command tx timeout
[   70.182434][ T5235] Bluetooth: hci0: command tx timeout
[   70.191196][ T5235] Bluetooth: hci2: command tx timeout
[   70.212614][ T6065] tipc: Started in network mode
[   70.215977][ T6065] tipc: Node identity fa2ad9e4bafc, cluster identity 4711
[   70.218891][ T6065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.222958][ T6065] syzkaller0: entered promiscuous mode
[   70.225191][ T6065] syzkaller0: entered allmulticast mode
[   70.266967][ T6068] tipc: Resetting bearer <eth:syzkaller0>
[   70.269825][ T6071] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET)
[   70.279378][ T6068] tipc: Disabling bearer <eth:syzkaller0>
[   70.561090][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.573222][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.688017][ T5859] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.691663][ T5859] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.697495][ T5859] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.704734][ T5859] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.811579][ T6092] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   70.984106][ T6106] netlink: 'syz.0.53': attribute type 4 has an invalid length.
[   70.993270][ T6106] : renamed from bond0 (while UP)
[   71.157603][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.493411][ T6131] openvswitch: netlink: Flow key attr not present in new flow.
[   71.913014][ T6179] Illegal XDP return value 4294967294 on prog  (id 42) dev N/A, expect packet loss!
[   71.975227][ T6183] __nla_validate_parse: 47 callbacks suppressed
[   71.975245][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.73'.
[   72.018518][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[   72.044926][ T6188] netlink: 92 bytes leftover after parsing attributes in process `syz.0.73'.
[   72.049658][ T6187] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.74'.
[   72.056862][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'.
[   72.161021][ T6197] netlink: 'syz.1.76': attribute type 1 has an invalid length.
[   72.175181][ T6197] netlink: 44 bytes leftover after parsing attributes in process `syz.1.76'.
[   72.181351][ T5235] Bluetooth: hci1: command tx timeout
[   72.260619][ T5235] Bluetooth: hci2: command tx timeout
[   72.261457][ T5847] Bluetooth: hci0: command tx timeout
[   72.273904][ T6202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.78'.
[   72.277665][ T6202] tun0: tun_chr_ioctl cmd 1074025672
[   72.281173][ T6202] tun0: ignored: set checksum disabled
[   72.287531][ T6202] tipc: New replicast peer: 255.255.255.255
[   72.290844][ T6202] tipc: Enabled bearer <udp:syz2>, priority 10
[   72.294023][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'.
[   72.331681][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'.
[   72.342009][ T6207] netlink: 'syz.0.80': attribute type 10 has an invalid length.
[   72.364251][ T6207] 8021q: adding VLAN 0 to HW filter on device team0
[   72.368649][ T6207] : (slave team0): Enslaving as an active interface with an up link
[   72.376570][ T6205] macsec1: entered promiscuous mode
[   72.378248][ T6205] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   72.380902][ T6205] macsec1: entered allmulticast mode
[   72.382659][ T6205] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   72.402810][ T6204] macsec2: entered promiscuous mode
[   72.405281][ T6204] macsec2: entered allmulticast mode
[   72.430338][ T6210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.81'.
[   72.462005][ T6212] netlink: 'syz.2.82': attribute type 1 has an invalid length.
[   72.565844][ T6223] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   72.637486][ T6230] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   72.637558][ T6227] _Z`Ԁ@: entered promiscuous mode
[   72.752510][ T6235] netlink: 'syz.0.89': attribute type 1 has an invalid length.
[   72.755331][ T6235] netlink: 'syz.0.89': attribute type 2 has an invalid length.
[   73.411802][  T793] tipc: Node number set to 2752399356
[   73.604759][ T6281] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   73.617210][ T6281] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   73.950744][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.953915][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.014921][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.022806][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.075303][ T6295] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   74.105348][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.110152][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.114279][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.117802][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.668234][ T6305] validate_nla: 3 callbacks suppressed
[   74.668267][ T6305] netlink: 'syz.2.102': attribute type 32 has an invalid length.
[   74.699806][ T6305] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   74.813799][ T6313] vlan2: entered allmulticast mode
[   74.816349][ T6313] bridge0: entered allmulticast mode
[   74.823695][ T6313] bridge1: port 1(vlan2) entered blocking state
[   74.826381][ T6313] bridge1: port 1(vlan2) entered disabled state
[   74.830252][ T6313] vlan2: entered promiscuous mode
[   74.834234][ T6313] bridge0: entered promiscuous mode
[   74.842052][ T6313] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   74.899298][ T6319] tipc: Failed to obtain node identity
[   74.902356][ T6319] tipc: Enabling of bearer <ib:ip6gre0> rejected, failed to enable media
[   75.124975][ T6331] pimreg3: entered allmulticast mode
[   75.209721][ T6337] IPVS: Unknown mcast interface: rose0
[   75.255865][ T6340] netlink: 'syz.1.115': attribute type 12 has an invalid length.
[   75.313887][ T6344] ip6erspan0: entered allmulticast mode
[   76.136564][ T3015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.140301][ T3015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.198822][ T6361] : renamed from veth0_to_bond
[   77.213411][ T6393] __nla_validate_parse: 19 callbacks suppressed
[   77.213422][ T6393] netlink: 192 bytes leftover after parsing attributes in process `syz.1.130'.
[   77.219364][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.130'.
[   77.273175][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'.
[   77.277708][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'.
[   77.491699][ T6401] warning: `syz.2.132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.682713][ T6421] batadv_slave_1: entered promiscuous mode
[   77.699751][ T6421] batadv_slave_1: left promiscuous mode
[   77.720368][ T6426] netlink: 'syz.0.138': attribute type 1 has an invalid length.
[   77.751728][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'.
[   77.782227][ T6426] bond0: (slave geneve2): making interface the new active one
[   77.786213][ T6426] bond0: (slave geneve2): Enslaving as an active interface with an up link
[   77.790221][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   77.793556][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   77.796532][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   77.799592][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   77.804488][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'.
[   78.248078][ T6451] netlink: 'syz.1.143': attribute type 10 has an invalid length.
[   78.263641][ T6451] team0: Port device dummy0 added
[   78.275639][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.143'.
[   78.283066][ T6451] syz.1.143 (6451) used greatest stack depth: 19560 bytes left
[   78.320596][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'.
[   78.324562][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'.
[   78.327277][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.145'.
[   78.329935][ T6460] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   78.381819][ T6462] netlink: 'syz.1.148': attribute type 11 has an invalid length.
[   78.482780][ T6482] netlink: 'syz.2.153': attribute type 1 has an invalid length.
[   78.629211][ T6482] bond0: (slave bond_slave_1): Releasing backup interface
[   78.682110][ T6505] Bluetooth: MGMT ver 1.23
[   78.800682][ T6502] delete_channel: no stack
[   78.886003][ T6513] netlink: 'syz.0.161': attribute type 10 has an invalid length.
[   78.899113][ T6513] wlan1: mtu less than device minimum
[   78.904052][ T6513] : (slave wlan1): Error -22 calling dev_set_mtu
[   78.922819][ T6518] netlink: 'syz.2.160': attribute type 10 has an invalid length.
[   78.935205][ T6510] netlink: 'syz.2.160': attribute type 10 has an invalid length.
[   79.522212][ T6561] netlink: 'syz.2.171': attribute type 16 has an invalid length.
[   79.532357][ T6561] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   79.535139][ T6561] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   79.569955][ T6561] IPv6: NLM_F_REPLACE set, but no existing node found!
[   79.768746][ T6568] pimreg3: entered allmulticast mode
[   79.825910][ T6572] geneve2: entered promiscuous mode
[   79.829900][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.834905][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.838393][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.843592][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.187631][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.191096][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.336443][ T6575] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.365580][ T6575] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.583742][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.590518][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.598055][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.604593][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.643804][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.646917][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.650385][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.672627][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[   80.749792][ T6606] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   80.802378][ T6602] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   80.804968][ T5910] IPVS: starting estimator thread 0...
[   80.830994][ T6610] syzkaller1: entered allmulticast mode
[   80.890812][ T6608] IPVS: using max 63 ests per chain, 151200 per kthread
[   80.895100][ T6618] validate_nla: 1 callbacks suppressed
[   80.895109][ T6618] netlink: 'syz.1.187': attribute type 1 has an invalid length.
[   80.939457][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.009372][ T6628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.034459][ T6628] syzkaller0: entered promiscuous mode
[   81.036159][ T6628] syzkaller0: entered allmulticast mode
[   81.038199][ T6628] tipc: Resetting bearer <eth:syzkaller0>
[   81.044387][ T6626] tipc: Resetting bearer <eth:syzkaller0>
[   82.008898][ T6626] tipc: Disabling bearer <eth:syzkaller0>
[   82.130117][ T6653] pim6reg1: entered promiscuous mode
[   82.135813][ T6653] pim6reg1: entered allmulticast mode
[   82.257376][ T6665] __nla_validate_parse: 29 callbacks suppressed
[   82.257388][ T6665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.199'.
[   82.297085][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   82.377631][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'.
[   82.406240][ T6674] lo speed is unknown, defaulting to 1000
[   82.408229][ T6674] lo speed is unknown, defaulting to 1000
[   82.415149][ T6674] lo speed is unknown, defaulting to 1000
[   82.462900][ T6674] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   82.501272][ T6674] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   82.523022][ T6674] lo speed is unknown, defaulting to 1000
[   82.538904][ T6674] lo speed is unknown, defaulting to 1000
[   82.557214][ T6674] lo speed is unknown, defaulting to 1000
[   82.752075][ T6697] lo speed is unknown, defaulting to 1000
[   82.781790][ T6703] netlink: 228 bytes leftover after parsing attributes in process `syz.0.206'.
[   82.872227][ T6706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.208'.
[   82.875352][ T6706] netem: change failed
[   82.882842][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'.
[   82.886562][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'.
[   82.889467][ T6706] netlink: 'syz.0.208': attribute type 18 has an invalid length.
[   83.068352][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'.
[   83.076320][ T6711] macvtap1: entered promiscuous mode
[   83.078235][ T6711] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   83.139934][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'.
[   83.225692][ T6726] netlink: 'syz.1.212': attribute type 1 has an invalid length.
[   83.228635][ T6726] netlink: 'syz.1.212': attribute type 1 has an invalid length.
[   83.270832][ T6731] netlink: 'syz.1.214': attribute type 2 has an invalid length.
[   83.274220][ T6731] netlink: 'syz.1.214': attribute type 1 has an invalid length.
[   83.306315][ T6728] lo speed is unknown, defaulting to 1000
[   83.562227][ T6751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.567704][ T6751] syzkaller0: entered promiscuous mode
[   83.575180][ T6751] syzkaller0: entered allmulticast mode
[   83.608863][ T6749] tipc: Resetting bearer <eth:syzkaller0>
[   83.639821][ T6749] tipc: Disabling bearer <eth:syzkaller0>
[   83.686500][ T6757] lo speed is unknown, defaulting to 1000
[   83.696644][ T6756] lo speed is unknown, defaulting to 1000
[   83.882699][ T6766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.223'.
[   84.039960][ T6770] tap0: tun_chr_ioctl cmd 1074812118
[   84.328584][ T6782] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[   84.374382][ T6791] netlink: 'syz.0.231': attribute type 1 has an invalid length.
[   84.490986][ T6798] netlink: 'syz.0.233': attribute type 3 has an invalid length.
[   84.493523][ T6798] netlink: 'syz.0.233': attribute type 2 has an invalid length.
[   84.495927][ T6798] netlink: 'syz.0.233': attribute type 2 has an invalid length.
[   84.685509][ T6806] syz.2.235: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   84.700026][ T6806] CPU: 1 UID: 0 PID: 6806 Comm: syz.2.235 Not tainted syzkaller #0 PREEMPT(full) 
[   84.700038][ T6806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   84.700043][ T6806] Call Trace:
[   84.700047][ T6806]  <TASK>
[   84.700051][ T6806]  dump_stack_lvl+0x189/0x250
[   84.700075][ T6806]  ? __pfx_dump_stack_lvl+0x10/0x10
[   84.700085][ T6806]  ? __pfx__printk+0x10/0x10
[   84.700096][ T6806]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   84.700105][ T6806]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   84.700114][ T6806]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   84.700124][ T6806]  warn_alloc+0x214/0x310
[   84.700139][ T6806]  ? __pfx_warn_alloc+0x10/0x10
[   84.700154][ T6806]  ? __get_vm_area_node+0x28f/0x300
[   84.700165][ T6806]  ? xskq_create+0xbf/0x170
[   84.700175][ T6806]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   84.700199][ T6806]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   84.700213][ T6806]  ? __kasan_kmalloc+0x93/0xb0
[   84.700225][ T6806]  vmalloc_user_noprof+0xad/0xf0
[   84.700236][ T6806]  ? xskq_create+0xbf/0x170
[   84.700243][ T6806]  xskq_create+0xbf/0x170
[   84.700251][ T6806]  xsk_init_queue+0xb0/0x110
[   84.700259][ T6806]  xsk_setsockopt+0x57b/0x8d0
[   84.700272][ T6806]  ? __pfx_xsk_setsockopt+0x10/0x10
[   84.700307][ T6806]  ? __pfx_aa_sk_perm+0x10/0x10
[   84.700323][ T6806]  ? __se_sys_futex+0x36f/0x400
[   84.700332][ T6806]  ? aa_sock_opt_perm+0xff/0x1b0
[   84.700341][ T6806]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   84.700350][ T6806]  ? __pfx_xsk_setsockopt+0x10/0x10
[   84.700362][ T6806]  do_sock_setsockopt+0x17c/0x1b0
[   84.700374][ T6806]  __x64_sys_setsockopt+0x13f/0x1b0
[   84.700386][ T6806]  do_syscall_64+0xfa/0x3b0
[   84.700394][ T6806]  ? lockdep_hardirqs_on+0x9c/0x150
[   84.700402][ T6806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.700426][ T6806]  ? exc_page_fault+0x9f/0xf0
[   84.700434][ T6806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.700441][ T6806] RIP: 0033:0x7fc83358eba9
[   84.700450][ T6806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.700457][ T6806] RSP: 002b:00007fc8343a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   84.700466][ T6806] RAX: ffffffffffffffda RBX: 00007fc8337d6090 RCX: 00007fc83358eba9
[   84.700471][ T6806] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[   84.700475][ T6806] RBP: 00007fc833611e19 R08: 0000000000000004 R09: 0000000000000000
[   84.700479][ T6806] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[   84.700484][ T6806] R13: 00007fc8337d6128 R14: 00007fc8337d6090 R15: 00007fff572d5f28
[   84.700496][ T6806]  </TASK>
[   84.804943][ T6806] Mem-Info:
[   84.808926][ T6806] active_anon:13632 inactive_anon:0 isolated_anon:0
[   84.808926][ T6806]  active_file:1259 inactive_file:38244 isolated_file:0
[   84.808926][ T6806]  unevictable:1768 dirty:1530 writeback:0
[   84.808926][ T6806]  slab_reclaimable:9617 slab_unreclaimable:51535
[   84.808926][ T6806]  mapped:18111 shmem:2433 pagetables:985
[   84.808926][ T6806]  sec_pagetables:0 bounce:0
[   84.808926][ T6806]  kernel_misc_reclaimable:0
[   84.808926][ T6806]  free:289696 free_pcp:22293 free_cma:0
[   84.824158][ T6806] Node 0 active_anon:42552kB inactive_anon:0kB active_file:4136kB inactive_file:55100kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42628kB dirty:2140kB writeback:0kB shmem:4968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5608kB pagetables:2136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.837713][ T6806] Node 1 active_anon:12044kB inactive_anon:0kB active_file:900kB inactive_file:97876kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29884kB dirty:3980kB writeback:0kB shmem:4764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5872kB pagetables:1804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   84.849845][ T6806] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.849926][ T6817] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   84.860162][ T6806] lowmem_reserve[]: 0 811 811 811 811
[   84.867076][ T6806] Node 0 DMA32 free:325568kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43912kB inactive_anon:0kB active_file:4136kB inactive_file:55100kB unevictable:3536kB writepending:2140kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:40048kB local_pcp:18720kB free_cma:0kB
[   84.878153][ T6806] lowmem_reserve[]: 0 0 0 0 0
[   84.879704][ T6806] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   84.889823][ T6806] lowmem_reserve[]: 0 0 854 854 854
[   84.892666][ T6806] Node 1 Normal free:357540kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12044kB inactive_anon:0kB active_file:900kB inactive_file:97876kB unevictable:3536kB writepending:3980kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:49508kB local_pcp:26996kB free_cma:0kB
[   84.907113][ T6806] lowmem_reserve[]: 0 0 0 0 0
[   84.910180][ T6806] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   84.914644][ T6806] Node 0 DMA32: 114*4kB (UME) 309*8kB (UE) 113*16kB (UME) 201*32kB (UE) 168*64kB (UME) 44*128kB (UE) 24*256kB (UM) 6*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 68*4096kB (M) = 323488kB
[   84.921360][ T6806] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   84.926291][ T6806] Node 1 Normal: 153*4kB (UME) 73*8kB (ME) 133*16kB (UME) 226*32kB (UME) 73*64kB (UME) 22*128kB (UME) 18*256kB (UM) 6*512kB (UM) 6*1024kB (M) 1*2048kB (M) 79*4096kB (M) = 357500kB
[   84.932409][ T6806] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.935223][ T6806] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   84.938135][ T6806] 42888 total pagecache pages
[   84.939740][ T6806] 0 pages in swap cache
[   84.941543][ T6806] Free swap  = 124996kB
[   84.943099][ T6806] Total swap = 124996kB
[   84.944501][ T6806] 786301 pages RAM
[   84.945898][ T6806] 0 pages HighMem/MovableOnly
[   84.947595][ T6806] 241356 pages reserved
[   84.949042][ T6806] 0 pages cma reserved
[   85.335972][ T6822] lo speed is unknown, defaulting to 1000
[   85.419710][ T5876] : (slave team0): interface is now down
[   85.421855][ T6858] 8021q: adding VLAN 0 to HW filter on device 
[   85.425913][ T6858] 8021q: adding VLAN 0 to HW filter on device team0
[   85.432656][ T6858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.440977][   T13] : (slave team0): interface is now down
[   85.461173][ T5859] : (slave team0): interface is now down
[   85.463452][ T5859] : now running without any active interface!
[   85.659012][ T6873] lo speed is unknown, defaulting to 1000
[   85.866589][ T6884] : (slave dummy0): Enslaving as an active interface with an up link
[   85.870594][ T5876] : (slave dummy0): interface is now down
[   85.873271][ T5876] : now running without any active interface!
[   86.066476][ T6897] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   86.296608][ T6909] validate_nla: 5 callbacks suppressed
[   86.296633][ T6909] netlink: 'syz.1.269': attribute type 5 has an invalid length.
[   86.379493][ T6914] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   86.382407][ T6914] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   86.386239][ T6914] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   86.433093][ T6916] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   86.512452][   T47] cfg80211: failed to load regulatory.db
[   86.578353][ T6923] wg1: entered promiscuous mode
[   86.580687][ T6923] wg1: entered allmulticast mode
[   86.638065][ T6926] netlink: 'syz.1.276': attribute type 11 has an invalid length.
[   86.878263][ T6944] netlink: 'syz.1.282': attribute type 1 has an invalid length.
[   86.973529][ T6950] netlink: 'syz.2.280': attribute type 1 has an invalid length.
[   86.998811][ T6950] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.035362][ T6950] bond2: (slave veth3): Enslaving as an active interface with a down link
[   87.173687][ T6958] lo speed is unknown, defaulting to 1000
[   87.222774][ T6959] tipc: Started in network mode
[   87.224819][ T6959] tipc: Node identity 080211000001, cluster identity 4711
[   87.227769][ T6959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.237369][ T6959] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   87.240940][ T6959] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   87.245788][ T6959] tipc: Resetting bearer <eth:syzkaller0>
[   87.309196][ T6955] __nla_validate_parse: 131 callbacks suppressed
[   87.309214][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'.
[   87.318136][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'.
[   87.455693][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.287'.
[   87.537518][ T6964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.586934][ T6964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.646996][ T6964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.705410][ T6964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.799460][ T5859] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.824050][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.836631][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.872410][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.939845][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[   87.956143][ T6974] netlink: 36 bytes leftover after parsing attributes in process `syz.2.291'.
[   88.173822][ T6985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.182750][ T6985] syzkaller0: entered promiscuous mode
[   88.184775][ T6985] syzkaller0: entered allmulticast mode
[   88.195631][ T6985] tipc: Resetting bearer <eth:syzkaller0>
[   88.200873][ T6984] tipc: Resetting bearer <eth:syzkaller0>
[   88.208704][ T6984] tipc: Disabling bearer <eth:syzkaller0>
[   88.220799][   T10] tipc: Node number set to 134418688
[   88.277623][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'.
[   88.284973][ T6994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.296'.
[   88.325777][ T6996] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   88.348295][ T6994] lo speed is unknown, defaulting to 1000
[   88.384816][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'.
[   88.392524][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.298'.
[   88.504717][ T7003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.511529][ T7003] syzkaller0: entered promiscuous mode
[   88.513545][ T7003] syzkaller0: entered allmulticast mode
[   88.546471][ T7003] tipc: Resetting bearer <eth:syzkaller0>
[   88.554282][ T7002] tipc: Resetting bearer <eth:syzkaller0>
[   88.562420][ T7002] tipc: Disabling bearer <eth:syzkaller0>
[   88.664694][ T7012] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[   88.667292][ T7012] netlink: 'syz.0.302': attribute type 11 has an invalid length.
[   88.669854][ T7012] netlink: 220 bytes leftover after parsing attributes in process `syz.0.302'.
[   88.738245][ T7018] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   88.822356][ T7024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.240115][ T7043] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   89.329179][ T7043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.334596][ T7043] bond0 (unregistering): Released all slaves
[   89.492868][ T7056] netlink: 'syz.1.317': attribute type 10 has an invalid length.
[   89.548566][ T7063] IPVS: Unknown mcast interface: veth0_to_bond
[   89.614811][ T7068] syzkaller1: tun_chr_ioctl cmd 1074025677
[   89.616794][ T7068] syzkaller1: linktype set to 823
[   90.052895][ T7094] lo speed is unknown, defaulting to 1000
[   90.106058][ T7104] netlink: 'syz.2.332': attribute type 10 has an invalid length.
[   90.113218][ T7104] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   90.224030][ T7111] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[   90.736762][ T7128] netlink: 'syz.0.339': attribute type 10 has an invalid length.
[   90.748689][ T7128] : (slave bridge0): Enslaving as an active interface with a down link
[   90.752966][ T7130] ..0: renamed from hsr0
[   90.758675][ T7130] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   90.763139][ T7130] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.767097][ T7130] ..0: entered allmulticast mode
[   90.769091][ T7130] hsr_slave_0: entered allmulticast mode
[   90.772210][ T7130] hsr_slave_1: entered allmulticast mode
[   90.775684][ T7130] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   90.781057][ T7128] bridge_slave_1: left allmulticast mode
[   90.783040][ T7128] bridge_slave_1: left promiscuous mode
[   90.785276][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.792047][ T7128] bridge_slave_0: left promiscuous mode
[   90.794078][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.823091][ T7128] : (slave bridge0): Releasing backup interface
[   91.189303][ T7140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.847648][ T7167] sctp: [Deprecated]: syz.1.349 (pid 7167) Use of int in maxseg socket option.
[   91.847648][ T7167] Use struct sctp_assoc_value instead
[   92.412587][ T7196] __nla_validate_parse: 16 callbacks suppressed
[   92.412600][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'.
[   92.466639][ T7196] bridge_slave_1: left allmulticast mode
[   92.472653][ T7196] bridge_slave_1: left promiscuous mode
[   92.476323][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.487470][ T7196] bridge_slave_0: left allmulticast mode
[   92.500636][ T7196] bridge_slave_0: left promiscuous mode
[   92.503090][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.533497][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'.
[   92.593347][ T7196] vlan2 (unregistering): left promiscuous mode
[   92.595557][ T7196] bridge0 (unregistering): left promiscuous mode
[   92.597928][ T7196] bridge1: port 1(vlan2) entered disabled state
[   93.602474][ T7226] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   93.611335][ T7226] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   94.206435][ T7293] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.222210][ T7293] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.240575][ T7290] lo speed is unknown, defaulting to 1000
[   94.246354][ T7293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.270352][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'.
[   94.274064][ T7294] openvswitch: netlink: nsh attr 0 has unexpected len 61 expected 0
[   94.282186][ T7294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.285452][ T7293] tipc: Resetting bearer <eth:syzkaller0>
[   94.393668][ T7299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'.
[   94.397043][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'.
[   94.675227][ T7310] tipc: Resetting bearer <eth:syzkaller0>
[   94.677574][ T7310] tipc: Resetting bearer <eth:syzkaller0>
[   94.970357][ T7317] lo speed is unknown, defaulting to 1000
[   95.173752][ T7323] netlink: 'syz.1.374': attribute type 1 has an invalid length.
[   95.298714][ T7328] openvswitch: netlink: Invalid VLAN frame
[   95.321510][ T7329] netlink: 44 bytes leftover after parsing attributes in process `syz.0.376'.
[   95.324443][ T7329] netlink: 43 bytes leftover after parsing attributes in process `syz.0.376'.
[   95.327393][ T7329] netlink: 'syz.0.376': attribute type 6 has an invalid length.
[   95.330166][ T7329] netlink: 43 bytes leftover after parsing attributes in process `syz.0.376'.
[   95.341650][ T7329] gretap0: entered promiscuous mode
[   95.482126][ T7337] xfrm0: entered promiscuous mode
[   95.484456][ T7337] xfrm0: entered allmulticast mode
[   95.539498][ T7342] lo speed is unknown, defaulting to 1000
[   95.559134][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'.
[   95.563532][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.382'.
[   95.618407][ T7347] netlink: 'syz.2.383': attribute type 62 has an invalid length.
[   96.819148][ T7377] netlink: 'syz.2.393': attribute type 1 has an invalid length.
[   96.840142][ T7377] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.852805][ T7377] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.855180][ T7377] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[   96.859341][ T7377] bond0: (slave vxcan3): Error -95 calling set_mac_address
[   96.919383][ T7377] bond0: (slave bridge1): Enslaving as an active interface with an up link
[   96.924302][ T7383] IPVS: set_ctl: invalid protocol: 83 221.0.0.0:4096
[   96.928015][ T7383] IPVS: set_ctl: invalid protocol: 88 20.0.25.35:16515
[   96.932555][ T7383] IPVS: set_ctl: invalid protocol: 2389 0.0.0.0:38144
[   97.135193][ T7393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.140056][ T7402] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   97.249588][ T7402] tipc: Resetting bearer <eth:syzkaller0>
[   97.467214][ T7430] __nla_validate_parse: 9 callbacks suppressed
[   97.467225][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'.
[   97.562683][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'.
[   97.657929][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'.
[   97.664770][ T7446] netlink: 'syz.0.414': attribute type 5 has an invalid length.
[   97.669869][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.414'.
[   97.683290][ T7446] geneve3: entered promiscuous mode
[   97.685474][ T7446] geneve3: entered allmulticast mode
[   97.689087][ T5859] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   97.696468][ T5859] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   97.699820][ T5859] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   97.709622][ T5859] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   97.738701][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'.
[   97.754421][ T7456] macsec1: entered promiscuous mode
[   97.756629][ T7456] erspan0: entered promiscuous mode
[   97.769384][ T7456] erspan0: left promiscuous mode
[   97.927445][ T7468] lo speed is unknown, defaulting to 1000
[   98.038788][ T7272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.042277][ T7272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.108330][ T7475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.419'.
[   98.130649][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'.
[   98.144185][ T7477] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   98.175610][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.420'.
[   98.684513][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'.
[   98.695684][ T7496] netlink: 'syz.2.425': attribute type 1 has an invalid length.
[   98.771950][ T7496] bond3: entered promiscuous mode
[   98.773958][ T7496] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.779150][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'.
[   98.808313][ T7496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   98.810778][ T7496] IPv6: NLM_F_CREATE should be set when creating new route
[   98.813195][ T7496] IPv6: NLM_F_CREATE should be set when creating new route
[   98.820653][ T7496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   98.835115][ T7498] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.838145][ T7498] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[   98.842627][ T7498] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   98.860064][ T7498] bond3: (slave wireguard0): making interface the new active one
[   98.865883][ T7498] wireguard0: entered promiscuous mode
[   98.870845][ T7498] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[   98.880877][ T7496] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address
[   98.888723][ T7496] bond3: (slave wireguard1): Enslaving as a backup interface with an up link
[   98.897346][ T7508] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   98.915800][ T7496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   98.918353][ T7496] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   98.944933][ T7513] siw: device registration error -23
[   99.086593][ T7521] netlink: 'syz.0.432': attribute type 83 has an invalid length.
[   99.117997][ T7524] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000
[   99.648569][ T7564] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   99.708115][ T7568] netlink: 'syz.1.443': attribute type 3 has an invalid length.
[   99.711505][ T7568] netlink: 'syz.1.443': attribute type 1 has an invalid length.
[  100.187131][ T7547] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  100.296297][ T7581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.303530][ T7581] syzkaller0: entered promiscuous mode
[  100.305881][ T7581] syzkaller0: entered allmulticast mode
[  100.324677][ T7581] tipc: Resetting bearer <eth:syzkaller0>
[  101.062777][ T7578] tipc: Resetting bearer <eth:syzkaller0>
[  101.075117][ T7578] tipc: Disabling bearer <eth:syzkaller0>
[  102.128596][ T7630] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  102.131584][ T7630] netlink: 'syz.1.459': attribute type 101 has an invalid length.
[  102.133977][ T7630] netlink: 'syz.1.459': attribute type 7 has an invalid length.
[  102.412359][ T7653] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  102.552257][ T7661] syz_tun: refused to change device tx_queue_len
[  102.554547][ T7661] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  102.623989][ T7670] macvlan3: entered allmulticast mode
[  102.626536][ T7670] bond0: entered allmulticast mode
[  102.628325][ T7670] geneve2: entered allmulticast mode
[  102.633235][ T7670] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  102.636359][ T7670] bond0: left allmulticast mode
[  102.637885][ T7670] geneve2: left allmulticast mode
[  102.779392][ T7684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.868769][ T7681] __nla_validate_parse: 23 callbacks suppressed
[  102.868780][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'.
[  102.875015][ T7672] netlink: 'syz.2.473': attribute type 2 has an invalid length.
[  102.879415][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[  102.884825][ T7693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.478'.
[  102.887693][ T7693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.478'.
[  103.007584][ T7705] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.483'.
[  103.082737][ T7712] netlink: 'syz.2.484': attribute type 2 has an invalid length.
[  103.093161][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'.
[  103.095923][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.485'.
[  103.098323][ T7712] : entered promiscuous mode
[  103.099068][ T7714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.485'.
[  103.113358][ T7710] netlink: 6 bytes leftover after parsing attributes in process `syz.0.481'.
[  103.116904][ T7710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.202961][ T7719] netlink: 'syz.1.486': attribute type 1 has an invalid length.
[  103.206246][ T7717] netlink: 'syz.1.486': attribute type 1 has an invalid length.
[  103.209669][ T7717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.486'.
[  103.418424][ T7738] trusted_key: syz.1.490 sent an empty control message without MSG_MORE.
[  103.567310][ T7755] netlink: 'syz.0.497': attribute type 4 has an invalid length.
[  104.293041][ T7779] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  104.694706][ T7788] netlink: 'syz.0.510': attribute type 1 has an invalid length.
[  105.180281][ T7791] netlink: 'syz.2.511': attribute type 1 has an invalid length.
[  105.338818][ T7801] lo speed is unknown, defaulting to 1000
[  105.342433][ T7801] lo speed is unknown, defaulting to 1000
[  105.346029][ T7801] lo speed is unknown, defaulting to 1000
[  105.363312][ T7801] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  105.388292][ T7801] lo speed is unknown, defaulting to 1000
[  105.393308][ T7801] lo speed is unknown, defaulting to 1000
[  105.396596][ T7801] lo speed is unknown, defaulting to 1000
[  105.687284][ T7837] netlink: 'syz.0.526': attribute type 5 has an invalid length.
[  106.481986][ T7891] sctp: [Deprecated]: syz.1.543 (pid 7891) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.481986][ T7891] Use struct sctp_sack_info instead
[  106.813408][ T7920] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  106.849663][ T7924] sch_tbf: burst 5 is lower than device lo mtu (18) !
[  106.936508][ T7922] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  107.007075][ T7928] team0: Port device geneve0 added
[  107.102505][ T7950] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  107.677152][ T7992] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.715490][ T7992] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  107.733833][ T7992] bond1: (slave macvlan3): Enslaving as a backup interface with an up link
[  107.772129][ T7992] : (slave team0): Releasing backup interface
[  107.782238][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  107.800670][ T7992] : (slave dummy0): Releasing backup interface
[  107.809303][ T7992] : (slave bond_slave_0): Releasing backup interface
[  107.815774][ T7992] : (slave bond_slave_1): Releasing backup interface
[  107.830008][ T7992] team0: Port device team_slave_0 removed
[  107.836080][ T7992] team0: Port device team_slave_1 removed
[  107.840015][ T7992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.847830][ T7992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.852749][ T7992] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  107.913263][   T12] bond1: (slave macvlan3): link status up again after 0 ms
[  107.916124][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  107.929988][ T8018] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  107.941219][ T5876] bond1: (slave macvlan3): link status up again after 0 ms
[  107.946268][ T5876] bond1: (slave macvlan3): failed to get link speed/duplex
[  107.975952][ T8021] __nla_validate_parse: 39 callbacks suppressed
[  107.975986][ T8021] netlink: 100 bytes leftover after parsing attributes in process `syz.0.582'.
[  108.060648][ T6591] bond1: (slave macvlan3): failed to get link speed/duplex
[  108.079611][ T8028] netlink: 9 bytes leftover after parsing attributes in process `syz.2.584'.
[  108.088402][ T8028] ..0: renamed from hsr0
[  108.094493][ T8028] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  108.098644][ T8028] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.103246][ T8028] ..0: entered allmulticast mode
[  108.105232][ T8028] hsr_slave_0: entered allmulticast mode
[  108.107491][ T8028] hsr_slave_1: entered allmulticast mode
[  108.111625][ T8028] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  108.170586][   T12] bond1: (slave macvlan3): failed to get link speed/duplex
[  108.280864][ T5859] bond1: (slave macvlan3): failed to get link speed/duplex
[  108.788341][ T8043] validate_nla: 4 callbacks suppressed
[  108.788352][ T8043] netlink: 'syz.1.587': attribute type 12 has an invalid length.
[  108.806039][ T8038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.586'.
[  108.814477][ T8038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.586'.
[  108.837870][ T8044] netlink: 'syz.1.587': attribute type 12 has an invalid length.
[  108.908321][ T8051] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  108.925782][ T8057] syzkaller1: entered promiscuous mode
[  108.927716][ T8057] syzkaller1: entered allmulticast mode
[  108.993489][ T8066] netlink: 'syz.2.592': attribute type 39 has an invalid length.
[  109.027678][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'.
[  109.048396][ T8071] netlink: 44 bytes leftover after parsing attributes in process `syz.2.592'.
[  109.053531][ T8071] netlink: 43 bytes leftover after parsing attributes in process `syz.2.592'.
[  109.056980][ T8071] netlink: 'syz.2.592': attribute type 5 has an invalid length.
[  109.059946][ T8071] netlink: 43 bytes leftover after parsing attributes in process `syz.2.592'.
[  109.066023][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'.
[  109.085095][ T8074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.596'.
[  109.168562][ T8079] syzkaller1: entered promiscuous mode
[  109.173315][ T8079] syzkaller1: entered allmulticast mode
[  109.188287][ T8079] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  109.211551][   T24] IPVS: starting estimator thread 0...
[  109.321194][ T8089] IPVS: using max 63 ests per chain, 151200 per kthread
[  109.347491][ T8102] Bluetooth: MGMT ver 1.23
[  109.349890][ T8102] Bluetooth: hci1: too big key_count value 32778
[  109.384198][ T8106] netlink: 'syz.0.605': attribute type 1 has an invalid length.
[  109.404484][ T8105] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  109.409372][ T8105] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  109.425572][ T8106] bond2: (slave bridge4): Enslaving as an active interface with a down link
[  109.647987][ T8115] tipc: Resetting bearer <eth:syzkaller0>
[  109.662087][ T8115] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  109.689008][ T6591] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  109.692715][ T6591] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  109.695895][ T6591] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  109.698632][ T6591] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  110.067096][ T8119] sctp: [Deprecated]: syz.1.608 (pid 8119) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.067096][ T8119] Use struct sctp_sack_info instead
[  110.074811][ T8119] sctp: [Deprecated]: syz.1.608 (pid 8119) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.074811][ T8119] Use struct sctp_sack_info instead
[  110.200387][ T8126] netlink: 'syz.0.609': attribute type 4 has an invalid length.
[  110.208466][ T8126] netlink: 'syz.0.609': attribute type 4 has an invalid length.
[  110.265097][ T8135] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  110.568778][ T8164] netlink: 'syz.1.620': attribute type 5 has an invalid length.
[  110.580275][ T8165] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  111.337521][ T8179] netlink: 'syz.1.625': attribute type 10 has an invalid length.
[  111.359561][ T8181] bridge0: port 1(syz_tun) entered blocking state
[  111.362757][ T8181] bridge0: port 1(syz_tun) entered disabled state
[  111.365874][ T8181] syz_tun: entered allmulticast mode
[  111.372613][ T8181] syz_tun: entered promiscuous mode
[  111.395026][ T8179] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  111.433558][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.437753][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.443950][ T8184] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  111.448372][ T8184] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  111.461015][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.464746][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.569612][ T8190] lo speed is unknown, defaulting to 1000
[  111.574836][ T8194] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.585673][ T8194] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  111.631890][ T8196] veth0: entered promiscuous mode
[  111.676396][ T8190] netlink: 'syz.2.630': attribute type 16 has an invalid length.
[  111.692249][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  111.695120][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  111.700076][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  111.713065][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  111.786496][ T8196] veth0: left promiscuous mode
[  111.984511][ T8223] lo speed is unknown, defaulting to 1000
[  112.036830][ T8231] gretap0: left promiscuous mode
[  112.047595][ T8231] 8021q: adding VLAN 0 to HW filter on device 
[  112.051581][ T8231] 8021q: adding VLAN 0 to HW filter on device team0
[  112.075106][ T8231] lo speed is unknown, defaulting to 1000
[  112.138532][ T8227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.858464][ T8250] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  112.991475][ T8260] __nla_validate_parse: 23 callbacks suppressed
[  112.991487][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'.
[  113.856048][ T8274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.653'.
[  113.881774][ T8275] validate_nla: 7 callbacks suppressed
[  113.881793][ T8275] netlink: 'syz.0.654': attribute type 16 has an invalid length.
[  113.885440][ T8277] netlink: 'syz.1.652': attribute type 6 has an invalid length.
[  113.887221][ T8275] netlink: 'syz.0.654': attribute type 17 has an invalid length.
[  113.919394][ T8275] tipc: Resetting bearer <eth:syzkaller0>
[  113.934823][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'.
[  113.938894][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  113.942704][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  113.943798][ T8275] IPv6: NLM_F_REPLACE set, but no existing node found!
[  113.945628][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  113.951994][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  114.677974][ T8281] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  114.772529][ T8284] bond4: entered promiscuous mode
[  114.774540][ T8284] bond4: entered allmulticast mode
[  114.776970][ T8284] 8021q: adding VLAN 0 to HW filter on device bond4
[  114.798583][ T8286] pim6reg99999999: entered allmulticast mode
[  114.857573][ T8293] netlink: 'syz.1.661': attribute type 2 has an invalid length.
[  114.860208][ T8293] netlink: 'syz.1.661': attribute type 1 has an invalid length.
[  114.883336][ T8295] netlink: 'syz.2.660': attribute type 1 has an invalid length.
[  114.893287][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'.
[  115.054000][ T8310] netlink: 'syz.2.667': attribute type 4 has an invalid length.
[  115.065585][ T8310] netlink: 'syz.2.667': attribute type 4 has an invalid length.
[  115.101283][ T8298] netlink: 176 bytes leftover after parsing attributes in process `syz.0.662'.
[  115.123195][ T8311] lo speed is unknown, defaulting to 1000
[  115.367169][ T8324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.670'.
[  115.483992][ T8326] lo speed is unknown, defaulting to 1000
[  115.917059][ T8331] netlink: 104 bytes leftover after parsing attributes in process `syz.1.672'.
[  115.986004][ T8337] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  115.989365][ T8337] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  116.072380][ T8344] netlink: 1 bytes leftover after parsing attributes in process `syz.1.674'.
[  116.079346][ T8344] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  116.267756][ T8354] netlink: 'syz.2.678': attribute type 10 has an invalid length.
[  116.467455][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.682'.
[  116.519100][ T8374] team0: Port device dummy0 added
[  116.585481][ T8376] net_ratelimit: 17 callbacks suppressed
[  116.585518][ T8376] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.594212][ T8376] netlink: 44 bytes leftover after parsing attributes in process `syz.2.684'.
[  116.609514][ T8376] vlan2: entered allmulticast mode
[  116.612362][ T8376] bridge_slave_0: entered allmulticast mode
[  116.729589][ T8386] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  116.746501][ T8378] lo speed is unknown, defaulting to 1000
[  116.879452][ T8390] syz_tun: entered allmulticast mode
[  116.888354][ T8390] dvmrp8: entered allmulticast mode
[  116.915571][ T8390] lo speed is unknown, defaulting to 1000
[  116.928210][ T8394] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  116.942015][ T8394] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  116.948303][ T8394] tipc: Resetting bearer <eth:syzkaller0>
[  117.024525][ T8400] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.155742][ T8409] lo speed is unknown, defaulting to 1000
[  117.219436][ T8417] x_tables: ip_tables: udp match: only valid for protocol 17
[  117.540195][ T8438] lo speed is unknown, defaulting to 1000
[  117.822837][ T8398] syz_tun: left allmulticast mode
[  117.824997][ T8398] dvmrp8: left allmulticast mode
[  117.838301][ T8444] IPv6: NLM_F_CREATE should be specified when creating new route
[  118.205321][ T8459] __nla_validate_parse: 5 callbacks suppressed
[  118.205334][ T8459] netlink: 44 bytes leftover after parsing attributes in process `syz.0.702'.
[  118.349590][ T8465] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  118.364845][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'.
[  118.679845][ T8485] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  118.727247][ T8488] netlink: 140 bytes leftover after parsing attributes in process `syz.0.711'.
[  118.751820][ T8488] 8021q: adding VLAN 0 to HW filter on device team0
[  118.755008][ T8488] : (slave team0): Enslaving as an active interface with a down link
[  118.848814][ T8491] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  118.852657][ T8491] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  118.855710][ T8491] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  118.908901][ T8496] netlink: 212 bytes leftover after parsing attributes in process `syz.0.713'.
[  118.967422][ T8498] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.069315][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'.
[  119.169316][ T8503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.716'.
[  119.295420][ T8505] IPVS: lc: FWM 3 0x00000003 - no destination available
[  119.636792][ T8509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.640353][ T8509] syzkaller0: entered promiscuous mode
[  119.644495][ T8509] syzkaller0: entered allmulticast mode
[  119.709623][ T8509] tipc: Resetting bearer <eth:syzkaller0>
[  119.763909][ T8508] tipc: Resetting bearer <eth:syzkaller0>
[  119.823082][ T8508] tipc: Disabling bearer <eth:syzkaller0>
[  119.908092][ T8511] tipc: Resetting bearer <eth:syzkaller0>
[  119.917717][ T8511] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  120.046207][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[  120.049143][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.722'.
[  120.054352][ T8521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.722'.
[  120.094342][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.723'.
[  120.277898][ T8441] Set syz1 is full, maxelem 65536 reached
[  120.285223][ T8534] !: renamed from dummy0 (while UP)
[  120.593079][ T8554] Bluetooth: MGMT ver 1.23
[  120.644453][ T8561] validate_nla: 5 callbacks suppressed
[  120.645286][ T8561] netlink: 'syz.0.736': attribute type 13 has an invalid length.
[  120.645402][ T8566] netlink: 'syz.0.736': attribute type 13 has an invalid length.
[  120.650780][ T8561] netlink: 'syz.0.736': attribute type 17 has an invalid length.
[  120.658748][ T8566] netlink: 'syz.0.736': attribute type 17 has an invalid length.
[  120.689518][ T8561] 8021q: adding VLAN 0 to HW filter on device 
[  120.703859][ T8561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.714898][ T8566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.845302][ T8577] ..0: renamed from hsr0
[  120.849061][ T8577] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.853723][ T8577] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.857949][ T8577] ..0: entered allmulticast mode
[  120.859954][ T8577] hsr_slave_0: entered allmulticast mode
[  120.862371][ T8577] hsr_slave_1: entered allmulticast mode
[  120.866099][ T8577] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  121.292500][ T8585] netlink: 'syz.1.743': attribute type 10 has an invalid length.
[  121.302102][ T8585] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.307464][ T8585] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  121.314009][ T8585] netlink: 'syz.1.743': attribute type 10 has an invalid length.
[  121.317277][ T8585] batadv0: entered promiscuous mode
[  121.319459][ T8585] batadv0: entered allmulticast mode
[  121.323822][ T8585] bond0: (slave batadv0): Releasing backup interface
[  121.330136][ T8585] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  121.776948][ T8599] netlink: 'syz.1.748': attribute type 8 has an invalid length.
[  121.785399][ T8599] bond0: entered promiscuous mode
[  121.787045][ T8599] bond_slave_0: entered promiscuous mode
[  121.789135][ T8599] bond_slave_1: entered promiscuous mode
[  121.795209][ T8599] bond0: left promiscuous mode
[  121.797599][ T8599] bond_slave_0: left promiscuous mode
[  121.800028][ T8599] bond_slave_1: left promiscuous mode
[  122.495076][ T8632] IPVS: set_ctl: invalid protocol: 133 100.1.1.0:20002
[  122.653085][ T8648] syzkaller1: entered promiscuous mode
[  122.655026][ T8648] syzkaller1: entered allmulticast mode
[  122.693229][ T8650] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  122.697010][ T8650] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  122.853439][ T8658] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  122.857120][ T8658] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.948038][ T8664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.959171][ T8664] tipc: Disabling bearer <eth:syzkaller0>
[  123.074962][ T8669] tap0: tun_chr_ioctl cmd 1074025677
[  123.077382][ T8669] tap0: linktype set to 0
[  123.184941][ T8676] batadv_slave_1: entered promiscuous mode
[  123.202934][ T8675] batadv_slave_1: left promiscuous mode
[  123.289991][ T8683] __nla_validate_parse: 29 callbacks suppressed
[  123.290010][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'.
[  123.296930][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.772'.
[  123.300310][ T8683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.772'.
[  123.422495][ T8692] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  123.670749][ T8711] netlink: 'syz.2.781': attribute type 1 has an invalid length.
[  123.690116][ T8711] 8021q: adding VLAN 0 to HW filter on device bond5
[  123.705405][ T8711] bond5: (slave veth7): Enslaving as an active interface with a down link
[  123.722456][ T8711] macvlan2: entered promiscuous mode
[  123.724308][ T8711] macvlan2: entered allmulticast mode
[  123.726414][ T8711] bond5: entered promiscuous mode
[  123.728703][ T8711] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  123.731726][ T8711] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  123.739736][ T8711] bond5: left promiscuous mode
[  124.066510][ T8748] wg1: entered promiscuous mode
[  124.068555][ T8748] wg1: entered allmulticast mode
[  124.301944][ T8752] x_tables: ip_tables: state.0 match: invalid size 8 (kernel) != (user) 16
[  124.439232][ T8761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.016260][ T8774] netlink: 68 bytes leftover after parsing attributes in process `syz.0.798'.
[  125.118919][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'.
[  125.121354][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'.
[  125.376069][ T8790] xt_limit: Overflow, try lower: 604147548/4200216962
[  125.422661][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'.
[  125.432571][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.804'.
[  125.437614][ T8798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.804'.
[  125.451416][ T8798] netlink: 540 bytes leftover after parsing attributes in process `syz.0.804'.
[  125.642893][ T8809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.014083][ T8826] IPv6: sit2: Disabled Multicast RS
[  126.574786][ T8832] syzkaller1: entered promiscuous mode
[  126.576815][ T8832] syzkaller1: entered allmulticast mode
[  126.668173][ T8834] netlink: 'syz.1.817': attribute type 27 has an invalid length.
[  126.671960][ T8834] batadv0: left promiscuous mode
[  126.674096][ T8834] batadv0: left allmulticast mode
[  126.676477][ T8834] wg1: left promiscuous mode
[  126.678462][ T8834] wg1: left allmulticast mode
[  126.681143][ T8834] ..0: left allmulticast mode
[  126.683264][ T8834] hsr_slave_0: left allmulticast mode
[  126.685581][ T8834] hsr_slave_1: left allmulticast mode
[  126.688022][ T8834] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  126.693974][ T8834] geneve2: left promiscuous mode
[  126.949803][ T8859] netlink: 'syz.1.825': attribute type 1 has an invalid length.
[  127.232956][ T8884] ..1: renamed from ..0 (while UP)
[  127.238202][ T8884] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  127.377195][ T8895] vlan3: entered promiscuous mode
[  127.379126][ T8895] vlan3: entered allmulticast mode
[  127.381198][ T8895] hsr_slave_1: entered allmulticast mode
[  127.487208][   T33] audit: type=1800 audit(1758319756.260:2): pid=8908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.837" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1533 res=0 errno=0
[  128.014546][ T8881] syz.0.830 (8881) used greatest stack depth: 18072 bytes left
[  128.101494][ T8934] 8021q: adding VLAN 0 to HW filter on device team0
[  128.112016][ T8934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.136208][ T8934] netlink: 'syz.2.845': attribute type 5 has an invalid length.
[  128.291139][ T8955] __nla_validate_parse: 27 callbacks suppressed
[  128.291153][ T8955] netlink: 52 bytes leftover after parsing attributes in process `syz.2.850'.
[  128.388664][ T8963] netlink: 80 bytes leftover after parsing attributes in process `syz.0.855'.
[  128.547189][ T8976] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  128.650212][ T8978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.654368][ T8978] syzkaller0: entered promiscuous mode
[  128.657209][ T8978] syzkaller0: entered allmulticast mode
[  128.662595][ T8978] syzkaller0: left allmulticast mode
[  128.700675][ T8979] tipc: Resetting bearer <eth:syzkaller0>
[  128.714132][ T8979] tipc: Disabling bearer <eth:syzkaller0>
[  128.838384][ T8983] netlink: 'syz.1.861': attribute type 1 has an invalid length.
[  129.065719][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'.
[  129.069349][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'.
[  129.074170][ T8994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.863'.
[  129.103061][ T8996] netlink: 'syz.1.864': attribute type 1 has an invalid length.
[  129.130851][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.864'.
[  129.177011][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.866'.
[  129.180703][ T9003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.866'.
[  129.419092][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'.
[  129.422494][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'.
[  129.438893][ T9017] IPv6: Can't replace route, no match found
[  129.648689][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.651606][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.806877][ T9054] netlink: 'syz.0.885': attribute type 29 has an invalid length.
[  129.808177][ T9056] netlink: 'syz.1.886': attribute type 1 has an invalid length.
[  129.818837][ T9056] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  129.880302][ T9064] netlink: 'syz.2.889': attribute type 1 has an invalid length.
[  129.883478][ T9066] netlink: 'syz.1.888': attribute type 9 has an invalid length.
[  129.888960][ T9066] openvswitch: netlink: Message has 5 unknown bytes.
[  130.012730][ T9081] unsupported nla_type 776
[  130.107413][ T9086] netlink: 'syz.2.893': attribute type 3 has an invalid length.
[  130.155281][ T9094] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  131.014717][ T9112] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  131.113534][ T9118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.167964][ T9117] tipc: Disabling bearer <eth:syzkaller0>
[  131.749956][ T9173] ..1: renamed from ..0
[  131.756384][ T9173] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  131.759666][ T9173] ..1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  131.769405][ T9173] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  132.583600][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.631566][ T9224] validate_nla: 2 callbacks suppressed
[  132.631578][ T9224] netlink: 'syz.2.924': attribute type 1 has an invalid length.
[  132.703927][ T9235] netlink: 'syz.0.927': attribute type 21 has an invalid length.
[  132.707101][ T9235] netlink: 'syz.0.927': attribute type 22 has an invalid length.
[  132.710257][ T9235] netlink: 'syz.0.927': attribute type 23 has an invalid length.
[  133.007834][ T9252] pimreg: entered allmulticast mode
[  133.022970][ T9250] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  133.041436][ T9252] dvmrp8: entered allmulticast mode
[  133.102150][ T9251] pimreg: left allmulticast mode
[  133.103892][ T9251] dvmrp8: left allmulticast mode
[  133.310944][ T9268] __nla_validate_parse: 32 callbacks suppressed
[  133.310957][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'.
[  133.383384][ T9272] IPv6: sit3: Disabled Multicast RS
[  133.448218][ T9276] netlink: 196 bytes leftover after parsing attributes in process `syz.2.943'.
[  133.569178][ T9281] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  133.748631][ T9294] sctp: [Deprecated]: syz.0.947 (pid 9294) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.748631][ T9294] Use struct sctp_sack_info instead
[  133.758522][ T9294] sctp: [Deprecated]: syz.0.947 (pid 9294) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.758522][ T9294] Use struct sctp_sack_info instead
[  133.932122][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'.
[  134.142307][ T9317] netlink: 'syz.2.951': attribute type 13 has an invalid length.
[  134.145385][ T9317] netlink: 'syz.2.951': attribute type 17 has an invalid length.
[  134.211204][ T9317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.274957][ T9322] pim6reg1: entered promiscuous mode
[  134.277007][ T9322] pim6reg1: entered allmulticast mode
[  134.349381][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'.
[  134.353344][ T9324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.953'.
[  134.356816][ T9324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.953'.
[  134.653824][ T9329] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  134.745495][ T9338] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.956'.
[  134.749028][ T9338] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  134.778259][ T9331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'.
[  134.846510][ T9347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'.
[  134.858461][ T9349] openvswitch: netlink: IP tunnel TTL not specified.
[  134.946101][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.962'.
[  134.959291][ T9363] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  135.044472][ T9371] netlink: 'syz.0.966': attribute type 8 has an invalid length.
[  135.076974][ T9367] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  135.186952][ T9381] netlink: 'syz.0.968': attribute type 9 has an invalid length.
[  135.190628][ T9381] openvswitch: netlink: Message has 5 unknown bytes.
[  135.290809][ T9387] ..0: renamed from ..1
[  135.294005][ T9387] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  135.297671][ T9387] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.311799][ T9387] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  135.849175][ T9403] syz_tun: entered allmulticast mode
[  135.900292][ T9402] syz_tun: left allmulticast mode
[  136.234930][ T9422] 8021q: adding VLAN 0 to HW filter on device bond6
[  136.862083][ T9440] netlink: 'syz.2.984': attribute type 13 has an invalid length.
[  136.864451][ T9440] netlink: 'syz.2.984': attribute type 17 has an invalid length.
[  136.891974][ T9440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.060920][ T5847] Bluetooth: hci1: command tx timeout
[  137.079814][ T9444] delete_channel: no stack
[  137.654606][ T9494] validate_nla: 2 callbacks suppressed
[  137.654619][ T9494] netlink: 'syz.1.998': attribute type 21 has an invalid length.
[  137.862351][ T9507] pim6reg1: entered promiscuous mode
[  137.864508][ T9507] pim6reg1: entered allmulticast mode
[  138.437407][ T9527] __nla_validate_parse: 21 callbacks suppressed
[  138.437422][ T9527] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1007'.
[  138.682077][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'.
[  138.746431][ T9541] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  138.920735][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'.
[  139.204891][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'.
[  139.291625][ T9574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.537351][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  139.550076][ T9582] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  139.875632][ T9591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'.
[  140.154735][ T9602] sctp: [Deprecated]: syz.2.1027 (pid 9602) Use of int in max_burst socket option.
[  140.154735][ T9602] Use struct sctp_assoc_value instead
[  140.215453][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'.
[  140.284063][ T9614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1032'.
[  140.287362][ T9614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1032'.
[  140.403959][ T9630] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1036'.
[  140.583436][ T9652] netlink: 'syz.1.1043': attribute type 11 has an invalid length.
[  140.932200][ T9689] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  141.004191][ T9693] pim6reg1: entered promiscuous mode
[  141.005910][ T9693] pim6reg1: entered allmulticast mode
[  141.576623][ T9713] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  141.584446][ T9713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.632193][ T9713] syzkaller0: entered promiscuous mode
[  141.634507][ T9713] syzkaller0: entered allmulticast mode
[  141.636793][ T9713] tipc: Resetting bearer <eth:syzkaller0>
[  141.646174][ T9712] tipc: Resetting bearer <eth:syzkaller0>
[  141.889555][ T9718] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[  141.893847][ T9718] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[  143.103380][ T9712] tipc: Disabling bearer <eth:syzkaller0>
[  143.160361][ T5853] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  143.185025][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  143.185040][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.185045][ T5853] Call Trace:
[  143.185049][ T5853]  <TASK>
[  143.185054][ T5853]  dump_stack_lvl+0x189/0x250
[  143.185071][ T5853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.185080][ T5853]  ? __pfx__printk+0x10/0x10
[  143.185099][ T5853]  dump_header+0xd3/0x480
[  143.185113][ T5853]  oom_kill_process+0x387/0x920
[  143.185124][ T5853]  out_of_memory+0xf09/0x12a0
[  143.185137][ T5853]  ? __pfx_out_of_memory+0x10/0x10
[  143.185149][ T5853]  mem_cgroup_out_of_memory+0x145/0x240
[  143.185159][ T5853]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  143.185171][ T5853]  ? _raw_spin_unlock+0x28/0x50
[  143.185183][ T5853]  ? memcg1_oom_prepare+0x37f/0x450
[  143.185195][ T5853]  try_charge_memcg+0xdff/0x1290
[  143.185214][ T5853]  ? __pfx_try_charge_memcg+0x10/0x10
[  143.185233][ T5853]  charge_memcg+0x9f/0x180
[  143.185244][ T5853]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  143.185254][ T5853]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  143.185266][ T5853]  __read_swap_cache_async+0x28c/0x510
[  143.185280][ T5853]  swap_cluster_readahead+0x305/0x5f0
[  143.185327][ T5853]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  143.185348][ T5853]  ? get_vma_policy+0x27c/0x3c0
[  143.185361][ T5853]  swapin_readahead+0x17d/0xb50
[  143.185369][ T5853]  ? __pfx_filemap_get_entry+0x10/0x10
[  143.185382][ T5853]  ? __pfx_swapin_readahead+0x10/0x10
[  143.185392][ T5853]  ? __filemap_get_folio+0x9a6/0xaf0
[  143.185403][ T5853]  ? swap_cache_get_folio+0xae/0x3b0
[  143.185413][ T5853]  do_swap_page+0x525/0x5ac0
[  143.185423][ T5853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  143.185432][ T5853]  ? __lock_acquire+0xab9/0xd20
[  143.185450][ T5853]  ? do_swap_page+0x184/0x5ac0
[  143.185459][ T5853]  ? __pfx_do_swap_page+0x10/0x10
[  143.185467][ T5853]  ? __lock_acquire+0xab9/0xd20
[  143.185478][ T5853]  ? __pfx_default_wake_function+0x10/0x10
[  143.185491][ T5853]  ? ___pte_offset_map+0x1cf/0x250
[  143.185503][ T5853]  ? pte_offset_map_rw_nolock+0xea/0x160
[  143.185514][ T5853]  __handle_mm_fault+0xe55/0x5440
[  143.185523][ T5853]  ? __lock_acquire+0xab9/0xd20
[  143.185541][ T5853]  ? __pfx___handle_mm_fault+0x10/0x10
[  143.185557][ T5853]  ? lock_vma_under_rcu+0xdf/0x3d0
[  143.185586][ T5853]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  143.185600][ T5853]  handle_mm_fault+0x40a/0x8e0
[  143.185616][ T5853]  do_user_addr_fault+0xa81/0x1390
[  143.185632][ T5853]  ? rcu_is_watching+0x15/0xb0
[  143.185640][ T5853]  ? trace_page_fault_user+0x84/0x1e0
[  143.185653][ T5853]  exc_page_fault+0x76/0xf0
[  143.185663][ T5853]  asm_exc_page_fault+0x26/0x30
[  143.185670][ T5853] RIP: 0033:0x7f6ce4fc1468
[  143.185679][ T5853] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f
[  143.185685][ T5853] RSP: 002b:00007ffea9bac860 EFLAGS: 00010293
[  143.185694][ T5853] RAX: 0000000000000000 RBX: 0000000000000421 RCX: 00007f6ce4fc1465
[  143.185699][ T5853] RDX: 00007ffea9bac8a0 RSI: 0000000000000000 RDI: 0000000000000000
[  143.185703][ T5853] RBP: 00007ffea9bac90c R08: 0000000000000000 R09: 0000000000000000
[  143.185707][ T5853] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  143.185712][ T5853] R13: 00000000000927c0 R14: 0000000000022983 R15: 00007ffea9bac960
[  143.185730][ T5853]  </TASK>
[  143.185755][ T5853] memory: usage 307200kB, limit 307200kB, failcnt 384
[  143.309375][ T5853] memory+swap: usage 307136kB, limit 9007199254740988kB, failcnt 0
[  143.342544][ T5853] kmem: usage 306880kB, limit 9007199254740988kB, failcnt 0
[  143.345156][ T5853] Memory cgroup stats for /syz0:
[  143.345352][ T5853] cache 0
[  143.360631][ T5853] rss 16384
[  143.361812][ T5853] rss_huge 0
[  143.362919][ T5853] shmem 0
[  143.372610][ T5853] mapped_file 0
[  143.375163][ T5853] dirty 0
[  143.376130][ T5853] writeback 0
[  143.377170][ T5853] workingset_refault_anon 10
[  143.378705][ T5853] workingset_refault_file 0
[  143.410167][ T5853] swap 167936
[  143.423389][ T5853] swapcached 40960
[  143.428948][ T5853] pgpgin 34551
[  143.430097][ T5853] pgpgout 34541
[  143.435887][ T5853] pgfault 80958
[  143.437062][ T5853] pgmajfault 9
[  143.438106][ T5853] inactive_anon 16384
[  143.439324][ T5853] active_anon 16384
[  143.440912][ T5853] inactive_file 0
[  143.455164][ T5853] active_file 0
[  143.456376][ T5853] unevictable 0
[  143.457457][ T5853] hierarchical_memory_limit 314572800
[  143.459052][ T5853] hierarchical_memsw_limit 9223372036854771712
[  143.466222][ T5853] total_cache 0
[  143.468018][ T5853] total_rss 16384
[  143.469624][ T5853] total_rss_huge 0
[  143.471780][ T5853] total_shmem 0
[  143.473013][ T5853] total_mapped_file 0
[  143.474397][ T5853] total_dirty 0
[  143.475697][ T5853] total_writeback 0
[  143.477445][ T5853] total_workingset_refault_anon 10
[  143.479366][ T5853] total_workingset_refault_file 0
[  143.482656][ T5853] total_swap 167936
[  143.483873][ T5853] total_swapcached 40960
[  143.485198][ T5853] total_pgpgin 34551
[  143.486367][ T5853] total_pgpgout 34541
[  143.487825][ T5853] total_pgfault 80958
[  143.489365][ T5853] total_pgmajfault 9
[  143.492455][ T5853] total_inactive_anon 16384
[  143.495055][ T5853] total_active_anon 16384
[  143.496500][ T5853] total_inactive_file 0
[  143.497865][ T5853] total_active_file 0
[  143.516549][ T5853] total_unevictable 0
[  143.518882][ T5853] anon_cost 0
[  143.520818][ T5853] file_cost 0
[  143.522514][ T5853] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0
[  143.522685][ T9753] __nla_validate_parse: 10 callbacks suppressed
[  143.522691][ T5853] ,task=syz.0.1054,pid=9694,uid=0
[  143.522703][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[  143.526694][ T5853] Memory cgroup out of memory: Killed process 9696 (syz.0.1054) total-vm:102148kB, anon-rss:1076kB, file-rss:23260kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  143.537816][ T9753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1068'.
[  143.563704][ T9753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1068'.
[  144.712395][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'.
[  144.748590][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'.
[  144.821143][ T9777] pimreg: entered allmulticast mode
[  144.829883][ T9778] dvmrp8: entered allmulticast mode
[  144.862803][ T9778] pimreg: left allmulticast mode
[  144.865407][ T9778] dvmrp8: left allmulticast mode
[  145.086782][ T9799] syz_tun: entered allmulticast mode
[  145.099298][ T9799] dvmrp8: entered allmulticast mode
[  145.118794][ T9798] syz_tun: left allmulticast mode
[  145.120969][ T9798] dvmrp8: left allmulticast mode
[  145.326407][ T9814] netlink: 'syz.0.1084': attribute type 1 has an invalid length.
[  145.705425][ T9830] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  145.792007][ T9829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.875013][ T9835] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.878333][ T9835] syzkaller0: entered promiscuous mode
[  145.880860][ T9835] syzkaller0: entered allmulticast mode
[  145.903421][ T9838] tipc: Resetting bearer <eth:syzkaller0>
[  145.919702][ T9838] tipc: Disabling bearer <eth:syzkaller0>
[  146.077533][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'.
[  146.096982][ T9847] ieee802154 phy0 wpan0: encryption failed: -90
[  146.106670][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'.
[  146.124371][ T9849] team0: Port device dummy0 removed
[  146.196899][ T9857] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  146.253864][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'.
[  146.257443][ T9863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1103'.
[  146.258703][ T9865] netlink: 'syz.0.1104': attribute type 32 has an invalid length.
[  146.262163][ T9863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1103'.
[  146.342660][ T9877] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  146.528265][ T9900] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  146.572093][ T9905] netlink: 'syz.2.1119': attribute type 21 has an invalid length.
[  146.760282][ T9924] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  147.588053][ T9947] netlink: 'syz.0.1131': attribute type 39 has an invalid length.
[  147.591777][ T9947] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  147.595164][ T9947] netlink: 'syz.0.1131': attribute type 5 has an invalid length.
[  147.659526][ T9948] vlan3: entered allmulticast mode
[  147.747013][ T9950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.778114][ T9954] IPVS: Unknown mcast interface: veth1_to_bridge
[  147.782029][ T9954] IPVS: Unknown mcast interface: veth1_to_bridge
[  148.420914][ T5235] Bluetooth: hci2: command 0x0401 tx timeout
[  148.423550][ T5847] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  148.941433][T10016] bond0: Device is already in use.
[  149.109010][T10026] pim6reg: entered allmulticast mode
[  149.111499][T10026] pim6reg: left allmulticast mode
[  149.169121][T10031] netlink: 'syz.2.1157': attribute type 1 has an invalid length.
[  149.188441][T10031] 8021q: adding VLAN 0 to HW filter on device bond7
[  149.202564][T10031] bond7: (slave gretap1): making interface the new active one
[  149.206080][T10031] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  149.218577][T10030] pim6reg: entered allmulticast mode
[  149.253404][T10038] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  149.256984][T10038] __nla_validate_parse: 12 callbacks suppressed
[  149.256993][T10038] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1158'.
[  149.306740][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'.
[  179.758873][T10050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1160'.
[  179.848627][T10057] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1163'.
[  179.854005][T10057] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1163'.
[  180.003428][T10065] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1165'.
[  180.079370][T10071] netlink: 'syz.0.1167': attribute type 1 has an invalid length.
[  180.306970][T10091] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  180.391686][T10098] bridge0: entered allmulticast mode
[  180.425290][T10098] pim6reg: entered allmulticast mode
[  180.512188][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1179'.
[  180.516387][T10113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1179'.
[  180.521182][T10113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1179'.
[  180.524784][T10113] netlink: 540 bytes leftover after parsing attributes in process `syz.2.1179'.
[  180.559580][T10116] ieee802154 phy0 wpan0: encryption failed: -22
[  180.832073][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1186'.
[  181.429264][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'.
[  181.711842][T10186] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.749975][T10190] openvswitch: netlink: Flow key attr not present in new flow.
[  181.773088][T10190] syzkaller1: entered promiscuous mode
[  181.775111][T10190] syzkaller1: entered allmulticast mode
[  181.778750][T10190] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  182.044456][T10203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.048410][T10211] syzkaller0: entered promiscuous mode
[  182.052215][T10211] syzkaller0: entered allmulticast mode
[  182.112473][T10203] tipc: Resetting bearer <eth:syzkaller0>
[  182.122092][T10200] tipc: Resetting bearer <eth:syzkaller0>
[  182.138540][T10200] tipc: Disabling bearer <eth:syzkaller0>
[  190.980800][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  190.983407][ T5852] Bluetooth: hci0: command 0x0406 tx timeout
[  194.025178][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  217.964933][T10241] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.970304][T10245] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  217.976333][T10245] tipc: Resetting bearer <eth:syzkaller0>
[  218.319578][T10278] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  218.460246][T10289] __nla_validate_parse: 12 callbacks suppressed
[  218.460260][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'.
[  218.469569][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'.
[  219.094485][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[  219.097810][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'.
[  219.101364][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1232'.
[  219.200301][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'.
[  219.204460][T10346] netlink: 'syz.2.1236': attribute type 30 has an invalid length.
[  219.207671][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'.
[  219.214144][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'.
[  219.222812][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'.
[  219.226439][T10346] netlink: 'syz.2.1236': attribute type 30 has an invalid length.
[  219.232868][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'.
[  219.311858][T10353] nbd: nbd2 already in use
[  219.498734][T10372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.697343][T10391] netlink: 'syz.0.1247': attribute type 1 has an invalid length.
[  219.735635][T10391] bond4: entered promiscuous mode
[  219.738174][T10391] 8021q: adding VLAN 0 to HW filter on device bond4
[  219.795937][T10391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.798861][T10391] IPv6: NLM_F_CREATE should be set when creating new route
[  219.801928][T10391] IPv6: NLM_F_CREATE should be set when creating new route
[  219.805084][T10391] IPv6: NLM_F_CREATE should be set when creating new route
[  219.824078][T10391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  220.017902][T10428] netlink: 'syz.2.1258': attribute type 1 has an invalid length.
[  220.087660][T10433] pim6reg99999999: entered allmulticast mode
[  220.155150][T10435] geneve0: entered promiscuous mode
[  220.313998][T10449] tipc: Resetting bearer <eth:syzkaller0>
[  220.443147][T10467] syzkaller1: entered promiscuous mode
[  220.444884][T10467] syzkaller1: entered allmulticast mode
[  221.133452][T10510] netlink: 'syz.2.1274': attribute type 1 has an invalid length.
[  221.159015][T10510] bond8: entered promiscuous mode
[  221.167785][T10510] 8021q: adding VLAN 0 to HW filter on device bond8
[  221.212809][T10510] 8021q: adding VLAN 0 to HW filter on device bond8
[  221.217721][T10510] bond8: (slave wireguard2): The slave device specified does not support setting the MAC address
[  221.225637][T10510] bond8: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  221.236164][T10510] bond8: (slave wireguard2): making interface the new active one
[  221.238772][T10510] wireguard2: entered promiscuous mode
[  221.242638][T10522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  221.245742][T10522] IPv6: NLM_F_CREATE should be set when creating new route
[  221.248681][T10522] IPv6: NLM_F_CREATE should be set when creating new route
[  221.253626][T10522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  221.254736][T10510] bond8: (slave wireguard2): Enslaving as an active interface with an up link
[  221.280273][T10522] bond8: (slave wireguard3): The slave device specified does not support setting the MAC address
[  221.291477][T10522] bond8: (slave wireguard3): Enslaving as a backup interface with an up link
[  221.318338][T10521] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  221.860586][ T5235] Bluetooth: hci2: command 0x0401 tx timeout
[  222.284230][T10592] netlink: 'syz.2.1284': attribute type 1 has an invalid length.
[  222.313391][T10592] 8021q: adding VLAN 0 to HW filter on device bond9
[  222.348528][T10601] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.356116][T10601] xt_nfacct: accounting object `\$9ZM#wsj^c\F9YⳈ' does not exist
[  222.537915][T10607] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  222.844930][T10633] netlink: 'syz.0.1296': attribute type 2 has an invalid length.
[  222.952859][T10636] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  223.062598][T10639] netlink: 'syz.1.1298': attribute type 1 has an invalid length.
[  223.141409][T10639] bond7: (slave vcan1): The slave device specified does not support setting the MAC address
[  223.171093][T10639] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  223.204482][T10639] bond7: (slave vcan1): making interface the new active one
[  223.208087][T10639] bond7: (slave vcan1): Enslaving as an active interface with an up link
[  223.244000][T10642] bond7: (slave vcan2): The slave device specified does not support setting the MAC address
[  223.265583][T10642] bond7: (slave vcan2): Enslaving as a backup interface with an up link
[  223.403225][T10647] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.439211][T10653] netlink: 'syz.2.1301': attribute type 5 has an invalid length.
[  223.459579][T10653] geneve4: entered promiscuous mode
[  223.463390][T10653] geneve4: entered allmulticast mode
[  223.470235][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  223.473174][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  223.487377][T10651] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  223.539749][T10651] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  223.564085][T10667] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  223.614081][T10672] __nla_validate_parse: 38 callbacks suppressed
[  223.614102][T10672] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1307'.
[  223.644639][ T5876] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  223.662521][ T5876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  223.686127][ T5876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  223.706764][ T5876] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  223.720088][T10678] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (34560)
[  223.726316][T10678] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  223.869161][T10693] 8021q: adding VLAN 0 to HW filter on device bond10
[  223.888028][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'.
[  223.891662][T10693] netlink: 'syz.2.1312': attribute type 2 has an invalid length.
[  224.099064][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1316'.
[  224.355771][T10714] netlink: 'syz.2.1319': attribute type 15 has an invalid length.
[  224.375262][T10714] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  224.479008][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1321'.
[  224.482144][T10722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1321'.
[  224.485153][T10722] netlink: 'syz.2.1321': attribute type 4 has an invalid length.
[  224.675982][T10726] netlink: 'syz.1.1323': attribute type 10 has an invalid length.
[  224.723813][T10731] bond0: (slave bond_slave_0): Releasing backup interface
[  224.727660][T10731] bond0: (slave bond_slave_1): Releasing backup interface
[  224.733001][T10731] team0: Port device team_slave_0 removed
[  224.736734][T10731] team0: Port device team_slave_1 removed
[  224.738898][T10731] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.746252][T10731] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.749091][T10731] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  224.812089][T10733] netlink: 'syz.1.1325': attribute type 21 has an invalid length.
[  224.814603][T10733] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1325'.
[  224.818571][T10733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.821931][T10733] syzkaller0: entered promiscuous mode
[  224.823664][T10733] syzkaller0: entered allmulticast mode
[  224.827056][T10733] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  224.849053][T10733] tipc: Resetting bearer <eth:syzkaller0>
[  224.852492][T10732] tipc: Resetting bearer <eth:syzkaller0>
[  224.865676][T10732] tipc: Disabling bearer <eth:syzkaller0>
[  224.913938][T10739] netlink: 'syz.0.1328': attribute type 7 has an invalid length.
[  224.916990][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1328'.
[  225.007203][T10747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1331'.
[  225.015678][T10747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1331'.
[  225.024171][T10747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1331'.
[  225.145209][T10753] netlink: 'syz.1.1334': attribute type 32 has an invalid length.
[  225.289987][T10765] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  225.293862][T10765] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  225.296894][T10765] CPU: 0 UID: 0 PID: 10765 Comm: syz.0.1335 Not tainted syzkaller #0 PREEMPT(full) 
[  225.300647][T10765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.303991][T10765] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  225.306147][T10765] Code: 18 00 74 08 4c 89 ef e8 bd 50 00 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ba 4f 00 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 91 50 00 f8 4d 89 2e 41 80 3c 1f 00
[  225.312397][T10765] RSP: 0018:ffffc900040c70e8 EFLAGS: 00010246
[  225.314364][T10765] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  225.317345][T10765] RDX: ffffc90020c2c000 RSI: 00000000000003e7 RDI: 00000000000003e8
[  225.320475][T10765] RBP: ffff888037ef44b0 R08: ffff888107f4d640 R09: 0000000000000002
[  225.323633][T10765] R10: 000000000000000a R11: 0000000000000002 R12: ffff888031d30da8
[  225.326803][T10765] R13: ffff888037ef44a8 R14: 0000000000000000 R15: 1ffff110063a61b6
[  225.329954][T10765] FS:  00007f6ce5dc86c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  225.333796][T10765] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.335991][T10765] CR2: 0000200000000680 CR3: 000000011f314000 CR4: 00000000000006f0
[  225.338488][T10765] Call Trace:
[  225.339569][T10765]  <TASK>
[  225.340546][T10765]  ? xfrm_state_insert+0x44/0x60
[  225.342358][T10765]  xfrm_state_insert+0x54/0x60
[  225.343937][T10765]  ipcomp4_init_state+0x673/0xb20
[  225.345623][T10765]  __xfrm_init_state+0xa76/0x13f0
[  225.347648][T10765]  ? __xfrm_init_state+0x7ef/0x13f0
[  225.349774][T10765]  xfrm_add_sa+0x2f5b/0x4070
[  225.351640][T10765]  ? __pfx_xfrm_add_sa+0x10/0x10
[  225.354015][T10765]  ? apparmor_capable+0x137/0x1b0
[  225.356021][T10765]  ? __nla_parse+0x40/0x60
[  225.357470][T10765]  xfrm_user_rcv_msg+0x7a3/0xab0
[  225.359085][T10765]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  225.360879][T10765]  ? __pfx___mutex_trylock_common+0x10/0x10
[  225.362741][T10765]  ? rcu_is_watching+0x15/0xb0
[  225.364284][T10765]  ? trace_contention_end+0x39/0x120
[  225.366417][T10765]  ? __mutex_lock+0x335/0x1350
[  225.368229][T10765]  netlink_rcv_skb+0x208/0x470
[  225.369731][T10765]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  225.371467][T10765]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  225.373180][T10765]  ? netlink_deliver_tap+0x2e/0x1b0
[  225.375040][T10765]  ? netlink_deliver_tap+0x2e/0x1b0
[  225.376657][T10765]  xfrm_netlink_rcv+0x79/0x90
[  225.378292][T10765]  netlink_unicast+0x82f/0x9e0
[  225.379801][T10765]  ? __pfx_netlink_unicast+0x10/0x10
[  225.381498][T10765]  ? netlink_sendmsg+0x642/0xb30
[  225.383137][T10765]  ? skb_put+0x11b/0x210
[  225.384645][T10765]  netlink_sendmsg+0x805/0xb30
[  225.386364][T10765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.388268][T10765]  ? aa_sock_msg_perm+0xf1/0x1d0
[  225.390007][T10765]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  225.391828][T10765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  225.393632][T10765]  __sock_sendmsg+0x21c/0x270
[  225.395319][T10765]  ____sys_sendmsg+0x505/0x830
[  225.396845][T10765]  ? __pfx_____sys_sendmsg+0x10/0x10
[  225.398488][T10765]  ? import_iovec+0x74/0xa0
[  225.399928][T10765]  ___sys_sendmsg+0x21f/0x2a0
[  225.401459][T10765]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.403089][T10765]  ? __fget_files+0x2a/0x420
[  225.404641][T10765]  ? __fget_files+0x3a0/0x420
[  225.406128][T10765]  __x64_sys_sendmsg+0x19b/0x260
[  225.407679][T10765]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  225.409448][T10765]  ? rcu_is_watching+0x15/0xb0
[  225.411023][T10765]  ? do_syscall_64+0xbe/0x3b0
[  225.412535][T10765]  do_syscall_64+0xfa/0x3b0
[  225.414008][T10765]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.415824][T10765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.417787][T10765]  ? exc_page_fault+0x9f/0xf0
[  225.419328][T10765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.421159][T10765] RIP: 0033:0x7f6ce4f8eba9
[  225.422718][T10765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.429310][T10765] RSP: 002b:00007f6ce5dc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.432033][T10765] RAX: ffffffffffffffda RBX: 00007f6ce51d5fa0 RCX: 00007f6ce4f8eba9
[  225.434647][T10765] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  225.437116][T10765] RBP: 00007f6ce5011e19 R08: 0000000000000000 R09: 0000000000000000
[  225.439560][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.442016][T10765] R13: 00007f6ce51d6038 R14: 00007f6ce51d5fa0 R15: 00007ffea9bac548
[  225.444702][T10765]  </TASK>
[  225.445832][T10765] Modules linked in:
[  225.447523][T10765] ---[ end trace 0000000000000000 ]---
[  225.449837][T10765] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  225.452184][T10765] Code: 18 00 74 08 4c 89 ef e8 bd 50 00 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ba 4f 00 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 91 50 00 f8 4d 89 2e 41 80 3c 1f 00
[  225.458262][T10765] RSP: 0018:ffffc900040c70e8 EFLAGS: 00010246
[  225.461014][T10765] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  225.464067][T10765] RDX: ffffc90020c2c000 RSI: 00000000000003e7 RDI: 00000000000003e8
[  225.467179][T10765] RBP: ffff888037ef44b0 R08: ffff888107f4d640 R09: 0000000000000002
[  225.470004][T10765] R10: 000000000000000a R11: 0000000000000002 R12: ffff888031d30da8
[  225.472679][T10765] R13: ffff888037ef44a8 R14: 0000000000000000 R15: 1ffff110063a61b6
[  225.475290][T10765] FS:  00007f6ce5dc86c0(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  225.478172][T10765] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.480345][T10765] CR2: 0000200000000680 CR3: 000000011f314000 CR4: 00000000000006f0
[  225.483026][T10765] Kernel panic - not syncing: Fatal exception in interrupt
[  225.486020][T10765] Kernel Offset: disabled
[  225.487532][T10765] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:10:54  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bee05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000001533 RDI=0000000000001534 RBP=ffffc900040c6a50 RSP=ffffc900040c6878
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff854fab60
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854fabd7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6ce5dc86c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000680 CR3=000000011f314000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6ce51a7498 00007f6ce51a7470 XMM03=00007f6ce51a74a8 00007f6ce51a74a0
XMM04=00007f6ce5d0d100 00007f6ce51a7460 XMM05=00007f6ce51a7478 00007f6ce51a74c0
XMM06=00007f6ce51a74b8 00007f6ce51a74b0 XMM07=00007f6ce51a74a8 00007f6ce51a74a0
XMM08=0000000000000000 00007f6ce5012ee7 XMM09=0000000000000000 00007f6ce5012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44e7b RBX=1ffff11009608349 RCX=ffff88801f13b980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900042f7700 RSP=ffffc900042f7580
R8 =ffffffff8fa38f37 R9 =1ffffffff1f471e6 R10=dffffc0000000000 R11=fffffbfff1f471e7
R12=ffff88804b041a48 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44e63 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d3452 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000a00000000 XMM03=0000000029736561 2863626300020048
XMM04=0000000000000000 0000000000000000 XMM05=297365612863616d 630014004c000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007ff660c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
