last executing test programs:

3.761403527s ago: executing program 1 (id=1154):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824bc2c469c24df32b74f9760d460bcdd2eafff8d53b19a6bf0953f6b085e3916b103586d9a51222cd1143cdd9d9db82c54de014d584c81bdbff4afb1b73745eedf632076a22f6bf3f5ce9f8b9c833dd1"], 0x36)

3.204356869s ago: executing program 1 (id=1158):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}}, 0x4000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, 0x0, 0xc40)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000800b4000200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2a}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20143)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x4000044)
r4 = socket$tipc(0x1e, 0x5, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[@ANYBLOB="ffffffffffff0180c200000186dd60122d9200283afffe8000000000000000000000000000bbff02000000000000000000000000000189009078f32e000000000000000000000000000000000001fe800000000000000000000000000013"], 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="34010000170001002cbd7000fbdbdf2500000000000000000000000000000000000004d55f000000fc02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000014e2400004e2154a70200008016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe64775514897f5a9e0cc6c577deba00000000000000000000000000387b65f0ff0000000000f9ffffffffffff4d2200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500000000000000010001000000000003000000000000000000000001000000060000000000000000000000000000000f000000000000000100000000000000ffffffff0000000000800000000000000000000000000000000000000000000003000000000000000000000300000000ec00000005000000010000002dbd70000c0008000800080001060000"], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24000040)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'})

2.138646855s ago: executing program 1 (id=1164):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r1=>0x0})
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000040), 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r6, 0x40}, 0x8)
socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$phonet(0x23, 0x2, 0x1)
recvfrom$phonet(r7, 0x0, 0x0, 0x60, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010003b14000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="20000200000000001800128008000100677470000c000280050006000800000008000a00", @ANYRES32=r1, @ANYBLOB="3215a747"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$packet(r2, &(0x7f0000000100)="95e67d93225e1e", 0x7, 0x20000040, &(0x7f0000000180)={0x11, 0x2, r5, 0x1, 0x6a, 0x6, @local}, 0x14)
setsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000040)={@local, r1}, 0x14)

1.948663219s ago: executing program 1 (id=1170):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

1.211326469s ago: executing program 0 (id=1173):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="94000000020701020000000000000000000000040c000340000000000000000344000780080001"], 0x94}, 0x1, 0x0, 0x0, 0x24004010}, 0x4040100)
r1 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x6}}]}}]}, 0x84}}, 0x24040084)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800004e8d4261001000ffffb7bd7000fbfbdf2500000000", @ANYRES32=0x0, @ANYBLOB="26970000231a0500380012800e00010069703665727370616e0000002400028006000200060000000500160001000000080005000000000008001500f5280e00"], 0x58}}, 0x48800)

1.209149508s ago: executing program 0 (id=1174):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r11=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x82, &(0x7f0000000300)={r11, 0x10, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r11, 0xc0, 0x10000, 0x5}, &(0x7f00000001c0)=0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r12, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r13 = socket$unix(0x1, 0x2, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r15, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

1.041349499s ago: executing program 1 (id=1175):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x101c, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0], 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf250300000014000c00fc02000000000000000000000000000108000400fd00000164"], 0x30}, 0x1, 0x0, 0x0, 0x2000c010}, 0xc000)
bind$tipc(r3, 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0)
unshare(0x8000400)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x3, 0xffff}, {0x1a, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r10, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x10}, 0x14}}, 0x40000)
recvmmsg(r11, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, &(0x7f00000036c0))
readv(r1, &(0x7f0000000540)=[{&(0x7f0000000580)=""/8, 0x8}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000440)=""/205, 0xcd}], 0x3)
socket$netlink(0x10, 0x3, 0x1)

621.367164ms ago: executing program 2 (id=1184):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0100001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4cf2040000000000140003006e657464657673696d30000000000000e00016808c000180100006000500000003000000050000001000060002000000040000000300000068000c801400010006000000dd0d0000090000008100000014"], 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x24, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x20011}, [@IFLA_IFALIASn={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc081)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x4880)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)

620.228959ms ago: executing program 2 (id=1185):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0)
r2 = socket(0x10, 0x80003, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x8}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}]}]}, 0x34}}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x76, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x1001}, &(0x7f0000000280)=0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r4=>r0, 0xfffffffffffff800, 0x9df, 0x4})
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r5, 0x104, 0x5, &(0x7f0000000900)=0x7, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'erspan0\x00', r6, 0x20, 0x8000, 0x40, 0x0, {{0x1a, 0x4, 0x0, 0x1c, 0x68, 0x68, 0x0, 0x5, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0xb, 0x48, [@dev={0xac, 0x14, 0x14, 0xc}, @loopback]}, @timestamp_prespec={0x44, 0x2c, 0x37, 0x3, 0xb, [{@private=0xa010102, 0x9}, {@remote, 0x101}, {@multicast1, 0x4c0}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x6}, {@loopback, 0x5}]}, @rr={0x7, 0x1b, 0xab, [@empty, @loopback, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r7, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0)
recvmsg$unix(r4, &(0x7f0000001c00)={&(0x7f0000000600), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/1, 0x1}, {&(0x7f0000000800)=""/201, 0xc9}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/143, 0x8f}, {&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/96, 0x60}], 0x8, &(0x7f0000001b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x20)
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_INTERFACE(r9, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r7, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xcda1, 0x5d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8000, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001", @ANYRES64=r10], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
socket$inet6(0xa, 0x3, 0x2)

491.23466ms ago: executing program 2 (id=1186):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @multicast1}, 0x1, 0x1, 0x1, 0x1}}, 0x26)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0xff7f}}, 0x20}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000190001002cbd7000000000001c140000fe"], 0x30}}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, 0x0, 0x840)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000480)={'veth1_to_batadv\x00', 0x8000})

321.581841ms ago: executing program 0 (id=1187):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000f041000000001d02000000007a0000006d4824fa477274dfa7e4cca027da012a7926580fa1dcb66fe2a6d72009d01bc103282e3fa18b087ba396c15468e859bed7d81d1a02fa274e5110b7b95f38f8c8bffa56b2f8b032486205ea81d79fbbb2ac431686f41cd22e459ab0e3842af01716cace51badbcd23b87c90a59dd8fcb4f2742102e04f13e817eeee757a0157c3", @ANYRES32=0x0, @ANYBLOB="401800000000000030001280080001006772650024000280050009000700000005000a0001000000080005000100000008000600ffffffff"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={<r8=>0x0}, &(0x7f0000000080)=0x8)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f00000003c0)={r8, @in6={{0xa, 0x4e23, 0x2, @empty, 0x7ff}}, 0x8, 0x2}, 0x90)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r8, 0x4, 0x9}, 0x8)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0)

314.062487ms ago: executing program 2 (id=1188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket(0x1, 0x803, 0x0) (async)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) (async)
bind$alg(r5, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
accept4(r5, 0x0, 0x0, 0x80000) (async)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0) (async)
recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0)
socket$l2tp(0x2, 0x2, 0x73) (async)
r7 = socket$l2tp(0x2, 0x2, 0x73)
unshare(0x22020600)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r8, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="070000000000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e24e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e227f0000010000000000000000000000000000000000000000000000000000000000000000000000000000e300"/400], 0x190)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r10, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r13=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r13}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

190.0038ms ago: executing program 0 (id=1189):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@updpolicy={0x110, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x4}]}, @etimer_thresh={0x8, 0xc, 0xfffffffc}, @lastused={0xc, 0xf, 0xf2}]}, 0x110}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000180)={<r6=>0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}]}, &(0x7f00000001c0)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000240)={0xfff5, 0x2, 0x4, 0x7, r6}, 0x10)
r7 = socket(0x15, 0x5, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
recvmsg(r7, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003002908000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40)
sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)
bind$802154_dgram(r5, &(0x7f00000002c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14)

189.545853ms ago: executing program 1 (id=1190):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000f0800034000000001080004400000002205000200070000002c0001800a00010072656469720000001c0002800800024000000016080001400000001208000340000000020900010073797a30"], 0x100}}, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x4, 0x22, 0x5100}, 0x50)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4)
listen(r3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r2, &(0x7f00000008c0)}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, 0x0, 0x402, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x20000890)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r10}, 0x10)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

129.570079ms ago: executing program 2 (id=1191):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0xd0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0xd0}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0xd0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x133}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25}]}]}, 0xd0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
bind$can_j1939(r0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'vlan0\x00'})
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3)
socket$nl_generic(0x10, 0x3, 0x10)

128.449579ms ago: executing program 0 (id=1192):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r1=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r2=>0xffffffffffffffff, 0x8, 0x101, 0xffffffff00000001})
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={<r3=>0x0, 0x84, "c1b903e2a4c883bf3df1e1f4b77630b02fe4f4763532359256dd2b96ed34702f23d4c970a47613cb9b0733bc01a4bd231db3ed0527e1045a44dbdbf803fb81f191f2aa212db91e8ee3cd0e86b36cafb26271ab340252b0820443dc3fd9b513e438c10820d80024812d38269eb39d05827e9df956099f4361d048664c2a928795dc018561"}, &(0x7f0000000180)=0x8c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x74, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x8, @private0}, @in6={0xa, 0x4e23, 0xe0d, @local, 0x3}, @in6={0xa, 0x4e21, 0xb0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000280)=0x10)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x65, &(0x7f00000005c0)=""/101, 0x41100, 0x9, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000640)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xb, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000006c0)=[{0x2, 0x3, 0x1, 0x1}, {0x9, 0x1, 0x1, 0x3}], 0x10, 0x5}, 0x94)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000007c0)={r3, 0x4}, &(0x7f0000000800)=0x8)
r5 = socket(0x10, 0x0, 0x100)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000840)={'syztnl1\x00', <r6=>r1, 0x10, 0x7800, 0x5, 0x4, {{0x50, 0x4, 0x1, 0x19, 0x140, 0x64, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast, {[@lsrr={0x83, 0x1b, 0xb6, [@loopback, @local, @private=0xa010102, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x27, 0x42, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0x9b, [@rand_addr=0x64010100, @rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @timestamp_prespec={0x44, 0x4c, 0xbc, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x10001}, {@remote, 0x1}, {@remote, 0x4}, {@local, 0x8}, {@remote, 0x10}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x1a}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x7}]}, @lsrr={0x83, 0x27, 0x5c, [@loopback, @dev={0xac, 0x14, 0x14, 0x24}, @empty, @multicast2, @local, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x42}, @local]}, @cipso={0x86, 0x46, 0x3, [{0x1, 0x10, "5eb152fa9b8ded97f3ed31d04c2f"}, {0x1, 0x2}, {0x1, 0x3, "d4"}, {0x6, 0x2}, {0x2, 0xa, "23e189ec57a51587"}, {0x7, 0xa, "5b6adee9b6efb5fb"}, {0x6, 0x8, "92525f386e8f"}, {0x2, 0xd, "88093552694841e515df0f"}]}, @lsrr={0x83, 0x13, 0x56, [@rand_addr=0x64010101, @empty, @rand_addr=0x64010100, @remote]}, @rr={0x7, 0x7, 0xe0, [@multicast2]}]}}}}})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x1d, 0xffff, 0x800, 0x401, 0x20100, r2, 0x6, '\x00', r6, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50)
r8 = socket$pptp(0x18, 0x1, 0x2)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000a80)=0x800, 0x4)
pipe(&(0x7f0000000ac0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x8, 0xfffffff7, 0x10001, 0x1f, 0x4110, r7, 0x5, '\x00', 0x0, r2, 0x1}, 0x50)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x10d, '\x00', 0x0, r2, 0x4, 0x1, 0x1}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0x11, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x487a33b, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000bc0)='GPL\x00', 0x5, 0x4d, &(0x7f0000000c00)=""/77, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x5, 0x7, 0x10, 0x54}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000e00)=[r2, r11, r12], &(0x7f0000000e40)=[{0x4, 0x1, 0xa, 0x3}], 0x10, 0x8001}, 0x94)
connect$tipc(0xffffffffffffffff, &(0x7f0000000f40)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x3}}, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000f80)={<r14=>r5})
setsockopt$ARPT_SO_SET_REPLACE(r14, 0x0, 0x60, &(0x7f0000001000)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x210, 0x210, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000fc0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @local, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "914e3408b69cdb96cdea4602c9e8530bd5d8c9e8d23b5351ade1f501ef1c"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x17}, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458)
getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, &(0x7f00000015c0)={'filter\x00', 0x0, 0x4, 0xa2, [0x120, 0x6d9355a5, 0x6, 0x4fcc4bc5, 0x0, 0x9], 0x8, &(0x7f0000001480)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001500)=""/162}, &(0x7f0000001640)=0x78)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000001680))
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000016c0)=r13, 0x4)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001740), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(r15, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x38, r16, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x38}}, 0x40400c0)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001880), r15)
ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f00000018c0)={'wpan3\x00', <r19=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r17, &(0x7f0000001bc0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001900)={0x248, r18, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x70, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfe}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r19}, @NL802154_ATTR_SEC_DEVKEY={0x80, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xdc3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000001}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x124, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x37}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8119}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd5a}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20000000}, 0x810)

435.836µs ago: executing program 0 (id=1193):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}}, 0x4000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, 0x0, 0xc40)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2a}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20143)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[@ANYBLOB="ffffffffffff0180c200000186dd60122d9200283afffe8000000000000000000000000000bbff02000000000000000000000000000189009078f32e000000000000000000000000000000000001fe800000000000000000000000000013"], 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@acquire={0x134, 0x17, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in6=@empty, 0x4d9, 0x5f}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {@in6=@empty, @in6=@loopback, 0x4e24, 0x0, 0x4e21, 0x54a7, 0x2, 0x0, 0x80, 0x16}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x38}, @in=@broadcast, 0x4e22, 0x7, 0x4e22, 0x5, 0x2, 0x0, 0x0, 0x33}, {0x5, 0x10001, 0x3, 0x100000000, 0x6, 0x0, 0xf, 0x1}, {0xffffffff, 0x8000}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xec, 0x5, 0x1, 0x70bd2d}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x6}}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24000040)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x0, 0xffe0}, {0xfff2, 0x5}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="0ef207336621"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "a29457b954f7571d292f62172e5ea951"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xa}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000811)
r9 = socket(0x8, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r10, 0x1000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r10, 0x0)
ioctl$IMGETCOUNT(r9, 0x61d0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000240)=0xffffff00, 0x4)

0s ago: executing program 2 (id=1194):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r2, 0x89e2)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x20)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1}}], 0x2, 0x220, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_getanyicast={0x14, 0x3e, 0x8, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x8000)
r5 = socket$kcm(0x10, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x945c, 0x8, 0x5, 0x3, 0x5, 0xffffffffffffff78, 0x80, 0x1000}, &(0x7f00000000c0)={0x8, 0x401, 0x6, 0x9, 0x3, 0x3, 0x3, 0x8}, &(0x7f0000000100)={0x100, 0x0, 0x79d60474, 0x6, 0x1, 0x500000, 0x3, 0x4}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x1]}, 0x8})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000061, &(0x7f0000001500)={0x77359400})
sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f84843000000011406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x400c000)

kernel console output (not intermixed with test programs):


[   53.538185][ T6186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.633617][   T54] Bluetooth: hci0: command tx timeout
[   53.635511][ T5829] Bluetooth: hci1: command tx timeout
[   53.703441][   T54] Bluetooth: hci2: command tx timeout
[   53.744464][ T6184] tipc: Disabling bearer <eth:syzkaller0>
[   54.073261][ T6216] netlink: 'syz.0.81': attribute type 1 has an invalid length.
[   54.105556][ T6216] bond2: entered promiscuous mode
[   54.108737][ T6216] bond2: entered allmulticast mode
[   54.111073][ T6216] 8021q: adding VLAN 0 to HW filter on device bond2
[   54.125689][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.128591][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.188631][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.195331][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.220004][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'.
[   54.310970][ T5657] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.318884][ T5657] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.326802][ T5657] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.329684][ T5657] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.480205][ T6237] bridge0: entered allmulticast mode
[   54.482554][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'.
[   54.485438][ T6237] bridge_slave_1: left allmulticast mode
[   54.487301][ T6237] bridge_slave_1: left promiscuous mode
[   54.489101][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.493178][ T6237] bridge_slave_0: left allmulticast mode
[   54.495470][ T6237] bridge_slave_0: left promiscuous mode
[   54.498342][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.508643][ T6237] bridge0 (unregistering): left allmulticast mode
[   54.676720][ T6239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.735427][ T6239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.774261][ T6239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.824317][ T6239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.916246][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.926099][ T5657] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.934661][ T5657] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.945465][ T5657] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.064467][ T6249] batman_adv: batadv0: Adding interface: dummy0
[   55.066584][ T6249] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.074911][ T6249] batman_adv: batadv0: Interface activated: dummy0
[   55.080428][ T6249] batadv0: mtu less than device minimum
[   55.082833][ T6249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   55.086769][ T6249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   55.090610][ T6249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   55.094498][ T6249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   55.098220][ T6249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   55.101884][ T6249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   55.105717][ T6249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   55.109517][ T6249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   55.113428][ T6249] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   55.186270][ T6251] batadv_slave_1: entered promiscuous mode
[   55.259347][ T6262] bridge0: port 3(ipvlan2) entered blocking state
[   55.261630][ T6262] bridge0: port 3(ipvlan2) entered disabled state
[   55.265129][ T6262] ipvlan2: entered allmulticast mode
[   55.266873][ T6262] bridge0: entered allmulticast mode
[   55.269617][ T6262] ipvlan2: left allmulticast mode
[   55.271199][ T6262] bridge0: left allmulticast mode
[   55.335622][ T6264] netlink: 'syz.0.95': attribute type 30 has an invalid length.
[   55.414965][ T6250] batadv_slave_1: left promiscuous mode
[   55.450274][ T6278] netlink: 'syz.2.97': attribute type 1 has an invalid length.
[   55.586413][ T6278] batman_adv: batadv0: Interface deactivated: dummy0
[   55.615958][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.621698][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.666847][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.669550][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.672482][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.675461][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.706848][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.98'.
[   55.726442][ T6284] team0: Port device team_slave_0 removed
[   56.297362][ T6289] netlink: 'syz.0.100': attribute type 12 has an invalid length.
[   56.299921][ T6289] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.100'.
[   56.357083][ T6295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.359636][ T6296] syzkaller0: entered promiscuous mode
[   56.361518][ T6296] syzkaller0: entered allmulticast mode
[   56.371526][ T6296] tipc: Resetting bearer <eth:syzkaller0>
[   56.379657][ T6296] tipc: Disabling bearer <eth:syzkaller0>
[   56.596379][ T6309] netlink: 'syz.1.104': attribute type 1 has an invalid length.
[   56.627095][ T6311] 8021q: adding VLAN 0 to HW filter on device bond3
[   56.673672][ T6314] netlink: 'syz.0.107': attribute type 4 has an invalid length.
[   56.678563][ T6316] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   56.707613][ T6320] $: renamed from veth1_to_team
[   56.791433][ T6327] netlink: 'syz.1.110': attribute type 1 has an invalid length.
[   56.835439][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'.
[   56.865158][ T6324] netlink: 'syz.0.109': attribute type 4 has an invalid length.
[   56.986833][ T6339] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.112'.
[   57.030322][ T6343] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.113'.
[   57.092945][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.657747][ T6370] bridge_slave_0: left allmulticast mode
[   57.659578][ T6370] bridge_slave_0: left promiscuous mode
[   57.662441][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.674763][ T6370] bridge_slave_1: left allmulticast mode
[   57.676677][ T6370] bridge_slave_1: left promiscuous mode
[   57.678690][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.685169][ T6370] bond0: (slave bond_slave_0): Releasing backup interface
[   57.688835][ T6370] bond0: (slave bond_slave_1): Releasing backup interface
[   57.692436][ T6370] team0: Port device team_slave_0 removed
[   57.697225][ T6370] team0: Port device team_slave_1 removed
[   57.699322][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.702265][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.009540][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.016660][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.070767][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.073947][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.078219][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.081147][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.189062][ T6401] __nla_validate_parse: 1 callbacks suppressed
[   58.189071][ T6401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.122'.
[   58.211434][ T6401] gretap0: entered promiscuous mode
[   58.216030][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'.
[   58.657396][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'.
[   58.660369][ T6439] netlink: 152 bytes leftover after parsing attributes in process `syz.0.130'.
[   58.693910][ T6441] Cannot find del_set index 0 as target
[   58.734751][ T6448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.745970][ T6447] tipc: Disabling bearer <eth:syzkaller0>
[   58.765938][ T6450] validate_nla: 3 callbacks suppressed
[   58.765945][ T6450] netlink: 'syz.1.134': attribute type 47 has an invalid length.
[   58.770931][ T6450] bridge0: entered promiscuous mode
[   58.791204][ T6450] syz.1.134 (6450) used greatest stack depth: 20088 bytes left
[   58.839356][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'.
[   58.857714][ T6457] ip6tnl1: entered promiscuous mode
[   58.869478][ T6454] raw_sendmsg: syz.0.136 forgot to set AF_INET. Fix it!
[   58.889348][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[   59.091766][ T6486] netlink: 'syz.1.143': attribute type 1 has an invalid length.
[   59.116961][ T6486] bond1: (slave bridge3): Enslaving as a backup interface with an up link
[   59.160241][ T6492] netlink: 'syz.1.144': attribute type 11 has an invalid length.
[   59.479715][ T6507] netlink: 'syz.1.147': attribute type 9 has an invalid length.
[   59.482475][ T6507] netlink: 'syz.1.147': attribute type 6 has an invalid length.
[   60.092346][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'.
[   60.242481][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'.
[   60.246357][ T6527] net_ratelimit: 11 callbacks suppressed
[   60.246367][ T6527] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   60.251686][ T6527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.256648][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.152'.
[   60.326849][ T6529] netlink: 48 bytes leftover after parsing attributes in process `syz.1.153'.
[   60.438030][ T6536] tipc: Started in network mode
[   60.441711][ T6536] tipc: Node identity 46cc80c0751c, cluster identity 4711
[   60.454697][ T6536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.457772][ T6536] syzkaller0: entered promiscuous mode
[   60.459865][ T6536] syzkaller0: entered allmulticast mode
[   60.478281][ T6540] netlink: 'syz.0.156': attribute type 18 has an invalid length.
[   60.498641][ T6535] tipc: Resetting bearer <eth:syzkaller0>
[   60.513815][ T6535] tipc: Disabling bearer <eth:syzkaller0>
[   60.571874][ T6547] bridge0: entered allmulticast mode
[   60.797882][ T6562] wg2: entered promiscuous mode
[   60.799582][ T6562] wg2: entered allmulticast mode
[   60.888192][ T6570] pim6reg1: entered promiscuous mode
[   60.890030][ T6570] pim6reg1: entered allmulticast mode
[   61.126664][ T6581] macsec0: entered promiscuous mode
[   61.128599][ T6581] macsec0: entered allmulticast mode
[   61.190388][ T6589] xt_time: invalid argument - start or stop time greater than 23:59:59
[   61.304293][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.307086][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.584448][ T6599] syzkaller1: entered allmulticast mode
[   61.747493][ T6602] xt_NFQUEUE: number of total queues is 0
[   61.787970][ T6602] netlink: 'syz.0.171': attribute type 5 has an invalid length.
[   62.215742][ T6613] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.221023][ T6613] bond0: (slave rose0): Enslaving as an active interface with an up link
[   62.924698][ T6680] netlink: 'syz.1.189': attribute type 1 has an invalid length.
[   62.960352][ T6680] 8021q: adding VLAN 0 to HW filter on device bond2
[   63.257661][ T6699] __nla_validate_parse: 34 callbacks suppressed
[   63.257670][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'.
[   63.277349][ T6699] netlink: 52 bytes leftover after parsing attributes in process `syz.0.194'.
[   63.289922][ T6699] IPVS: length: 144 != 24
[   63.346348][ T6706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.348959][ T6706] syzkaller0: entered promiscuous mode
[   63.350796][ T6706] syzkaller0: entered allmulticast mode
[   63.393036][ T6706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.196'.
[   63.399873][ T6706] tipc: Resetting bearer <eth:syzkaller0>
[   63.405772][ T6706] syzkaller0: tun_net_xmit 90
[   63.411436][ T6705] tipc: Resetting bearer <eth:syzkaller0>
[   63.417859][ T6705] tipc: Disabling bearer <eth:syzkaller0>
[   63.561862][ T6721] netlink: 'syz.2.200': attribute type 1 has an invalid length.
[   63.580391][ T6721] 8021q: adding VLAN 0 to HW filter on device bond2
[   63.611070][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'.
[   63.712590][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'.
[   63.715607][ T6740] netlink: 48 bytes leftover after parsing attributes in process `syz.0.205'.
[   63.735587][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   63.774955][ T6742] delete_channel: no stack
[   63.799746][ T6747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.805028][ T6747] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[   63.807453][ T6747] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[   63.826202][ T6749] tipc: Resetting bearer <eth:syzkaller0>
[   63.951770][ T6767] netlink: 224 bytes leftover after parsing attributes in process `syz.0.214'.
[   63.958136][ T6767] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   63.970842][ T6767] 8021q: adding VLAN 0 to HW filter on device bond4
[   63.979710][ T6767] bond4: (slave gretap1): making interface the new active one
[   63.982673][ T6767] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   63.988840][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'.
[   64.050728][ T6775] netlink: 'syz.0.216': attribute type 5 has an invalid length.
[   64.068420][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'.
[   64.163434][ T6795] netlink: 'syz.1.218': attribute type 13 has an invalid length.
[   64.257796][ T6802] netlink: 'syz.2.223': attribute type 10 has an invalid length.
[   64.266395][ T6802] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.270274][ T6802] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   64.281428][ T6804] netlink: 'syz.0.224': attribute type 33 has an invalid length.
[   64.621511][ T6813] modprobe (6813) used greatest stack depth: 20000 bytes left
[   64.660941][ T6821] netlink: 'syz.0.229': attribute type 1 has an invalid length.
[   64.696461][ T6821] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   64.701703][   T12] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   64.702205][ T6821] 8021q: adding VLAN 0 to HW filter on device bond5
[   64.749583][ T6828] Bluetooth: MGMT ver 1.23
[   64.804360][   T47] tipc: Node number set to 251455749
[   64.814568][ T5657] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   64.833163][ T6837] macsec0: entered promiscuous mode
[   64.835947][ T6837] macsec0: entered allmulticast mode
[   64.933057][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.946110][ T6851] batman_adv: batadv0: Adding interface: dummy0
[   64.948126][ T6851] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.958692][ T6851] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   64.991325][ T6860] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   65.046974][ T6865] netlink: 'syz.2.238': attribute type 1 has an invalid length.
[   65.066265][ T6865] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   65.071240][ T5657] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   65.075974][ T6865] 8021q: adding VLAN 0 to HW filter on device bond3
[   65.110351][ T6868] Cannot find set identified by id 1 to match
[   65.183697][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   65.326835][ T6879] !: renamed from dummy0
[   65.650061][ T6908] bond3 (unregistering): Released all slaves
[   65.765299][ T6926] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   65.919660][ T6944] _Z`Ԁ@: entered promiscuous mode
[   65.953005][ T6947] xt_hashlimit: size too large, truncated to 1048576
[   66.157150][ T6971] netlink: 'syz.1.254': attribute type 9 has an invalid length.
[   66.354941][ T7003] gretap0: left promiscuous mode
[   66.360599][ T7003] bridge0: left promiscuous mode
[   66.362489][ T7003] ip6tnl1: left promiscuous mode
[   66.369808][ T7008] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   66.430477][ T6221] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.433401][ T6221] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.442279][ T7013] ip6gre1: entered promiscuous mode
[   66.446276][ T6221] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.449969][ T6221] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.578055][ T7021] netlink: 'syz.1.260': attribute type 2 has an invalid length.
[   66.647474][ T7024] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[   66.651130][ T7024] macsec0: left promiscuous mode
[   66.911886][ T7045] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   67.160982][ T7072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.167099][ T7072] syzkaller0: entered promiscuous mode
[   67.181147][ T7072] syzkaller0: entered allmulticast mode
[   67.191326][ T7072] tipc: Resetting bearer <eth:syzkaller0>
[   67.207089][ T7072] tipc: Disabling bearer <eth:syzkaller0>
[   67.218583][ T7076] netlink: 'syz.1.273': attribute type 13 has an invalid length.
[   67.265228][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.268774][ T7076] 8021q: adding VLAN 0 to HW filter on device team0
[   67.276093][ T7076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.351424][ T7086] syzkaller0: entered promiscuous mode
[   67.352452][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.353580][ T7086] syzkaller0: entered allmulticast mode
[   67.416748][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.472601][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.543979][ T5853] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   68.038213][ T7120] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.292887][ T7129] 8021q: adding VLAN 0 to HW filter on device bond3
[   68.351192][ T7134] __nla_validate_parse: 19 callbacks suppressed
[   68.351202][ T7134] netlink: 108 bytes leftover after parsing attributes in process `syz.2.284'.
[   68.358316][ T7134] netlink: 108 bytes leftover after parsing attributes in process `syz.2.284'.
[   68.361698][ T7134] netlink: 48 bytes leftover after parsing attributes in process `syz.2.284'.
[   68.366716][ T7135] netlink: 108 bytes leftover after parsing attributes in process `syz.2.284'.
[   68.378787][ T7135] netlink: 108 bytes leftover after parsing attributes in process `syz.2.284'.
[   68.383536][ T7135] netlink: 48 bytes leftover after parsing attributes in process `syz.2.284'.
[   68.559811][ T7132] netlink: 224 bytes leftover after parsing attributes in process `syz.1.283'.
[   68.563616][ T7132] netlink: 48 bytes leftover after parsing attributes in process `syz.1.283'.
[   69.301538][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'.
[   69.305839][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'.
[   69.308746][ T7156] validate_nla: 4 callbacks suppressed
[   69.308753][ T7156] netlink: 'syz.0.290': attribute type 20 has an invalid length.
[   69.319193][ T5853] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.322129][ T7156] netlink: 'syz.0.290': attribute type 20 has an invalid length.
[   69.325891][ T5853] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.329414][ T5853] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.338933][ T5853] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.369042][ T7161] No such timeout policy "syz0"
[   69.690300][ T7206] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.737463][ T7206] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.822455][ T7206] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.838156][ T7216] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   69.883364][ T7229] netlink: 'syz.1.305': attribute type 1 has an invalid length.
[   69.904326][ T7229] 8021q: adding VLAN 0 to HW filter on device bond4
[   69.906964][ T7229] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   69.912642][ T7206] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   69.927776][ T7229] bond4: (slave gretap2): making interface the new active one
[   69.930951][ T7229] bond4: (slave gretap2): Enslaving as an active interface with an up link
[   69.936610][ T7231] batadv_slave_1: entered promiscuous mode
[   69.981357][ T5853] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.994675][ T5853] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.012392][ T5853] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.015369][ T5853] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.059746][ T7238] xt_hashlimit: size too large, truncated to 1048576
[   70.142517][ T7242] netlink: 'syz.1.308': attribute type 4 has an invalid length.
[   70.192468][ T5657] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   70.203427][ T5657] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   70.207995][ T5657] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   70.215071][ T5657] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   70.219726][ T7245] netlink: 'syz.0.309': attribute type 1 has an invalid length.
[   70.250975][ T7249] Cannot find set identified by id 1 to match
[   70.251265][ T7245] 8021q: adding VLAN 0 to HW filter on device bond6
[   70.284926][ T7252] macsec1: entered promiscuous mode
[   70.286718][ T7252] team0: entered promiscuous mode
[   70.288371][ T7252] team_slave_0: entered promiscuous mode
[   70.290380][ T7252] team_slave_1: entered promiscuous mode
[   70.292295][ T7252] macsec1: entered allmulticast mode
[   70.294461][ T7252] team0: entered allmulticast mode
[   70.296107][ T7252] team_slave_0: entered allmulticast mode
[   70.297990][ T7252] team_slave_1: entered allmulticast mode
[   70.300202][ T7252] team0: Device macsec1 is already an upper device of the team interface
[   70.305828][ T7252] team0: left allmulticast mode
[   70.307444][ T7252] team_slave_0: left allmulticast mode
[   70.309245][ T7252] team_slave_1: left allmulticast mode
[   70.311026][ T7252] team0: left promiscuous mode
[   70.312617][ T7252] team_slave_0: left promiscuous mode
[   70.317545][ T7252] team_slave_1: left promiscuous mode
[   70.320177][ T7253] netlink: 'syz.0.309': attribute type 2 has an invalid length.
[   70.576550][ T7264] netlink: 'syz.1.316': attribute type 1 has an invalid length.
[   70.589581][ T7264] 8021q: adding VLAN 0 to HW filter on device bond5
[   70.599584][ T7264] bond5: (slave bridge6): making interface the new active one
[   70.602680][ T7264] bond5: (slave bridge6): Enslaving as an active interface with an up link
[   70.610270][ T7264] gretap3: entered promiscuous mode
[   70.617146][ T7264] bond5: (slave gretap3): Enslaving as an active interface with an up link
[   70.662465][ T7268] netlink: 'syz.1.317': attribute type 1 has an invalid length.
[   70.681886][ T7268] 8021q: adding VLAN 0 to HW filter on device bond6
[   70.715820][ T7271] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[   70.718733][ T7271] tipc: Resetting bearer <eth:syzkaller0>
[   70.791078][ T7282] netlink: 'syz.2.322': attribute type 1 has an invalid length.
[   70.821867][ T7282] bond4: (slave gretap2): making interface the new active one
[   70.830081][ T7282] bond4: (slave gretap2): Enslaving as an active interface with an up link
[   70.841343][ T7282] vlan2: entered allmulticast mode
[   70.844173][ T7282] bond4: entered allmulticast mode
[   70.846827][ T7282] gretap2: entered allmulticast mode
[   70.850178][ T7282] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   70.889148][ T7287] xt_nfacct: accounting object `syz1' does not exists
[   70.891617][ T7288] xt_nfacct: accounting object `syz1' does not exists
[   71.090230][ T7300] netlink: 'syz.0.328': attribute type 1 has an invalid length.
[   71.126234][ T7300] 8021q: adding VLAN 0 to HW filter on device bond7
[   71.167851][ T7307] team0: entered promiscuous mode
[   71.175562][ T7307] team0: entered allmulticast mode
[   71.177776][ T7307] 8021q: adding VLAN 0 to HW filter on device team0
[   71.180308][ T7307] bridge0: port 1(team0) entered blocking state
[   71.182482][ T7307] bridge0: port 1(team0) entered disabled state
[   71.192997][ T7307] bond0: Unable to set down delay as MII monitoring is disabled
[   71.195561][ T7309] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   71.267773][ T1093] tipc: Resetting bearer <eth:syzkaller0>
[   71.414856][ T7341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.476804][ T7348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.479472][ T7348] syzkaller0: entered promiscuous mode
[   71.481203][ T7348] syzkaller0: entered allmulticast mode
[   71.493326][ T7352] pim6reg1: entered promiscuous mode
[   71.495326][ T7352] pim6reg1: entered allmulticast mode
[   71.498729][ T7348] tipc: Resetting bearer <eth:syzkaller0>
[   71.509521][ T7348] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   71.514314][ T7347] tipc: Resetting bearer <eth:syzkaller0>
[   71.521027][ T7347] tipc: Disabling bearer <eth:syzkaller0>
[   71.621167][ T7353] 8021q: adding VLAN 0 to HW filter on device bond8
[   71.624007][ T7353] bond8: entered promiscuous mode
[   71.625774][ T7353] bond8: entered allmulticast mode
[   71.627874][ T7353] team0: Port device bond8 added
[   71.751178][ T7363] 8021q: adding VLAN 0 to HW filter on device bond9
[   71.791286][ T7366] Cannot find set identified by id 1 to match
[   72.497374][ T7363] 8021q: adding VLAN 0 to HW filter on device bond9
[   72.499670][ T7363] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[   72.503951][ T7363] bond9: (slave vxcan3): Error -95 calling set_mac_address
[   72.533371][ T7367] veth3: entered promiscuous mode
[   72.536538][ T7367] bond9: (slave veth3): Enslaving as an active interface with a down link
[   72.642187][ T7382] vlan3: entered allmulticast mode
[   72.644943][ T7382] bond7: entered allmulticast mode
[   72.717712][ T7393] pim6reg1: entered promiscuous mode
[   72.719667][ T7393] pim6reg1: entered allmulticast mode
[   72.819658][ T7404] pim6reg1: entered promiscuous mode
[   72.821554][ T7404] pim6reg1: entered allmulticast mode
[   73.591508][ T7432] pim6reg1: entered promiscuous mode
[   73.594255][ T7432] pim6reg1: entered allmulticast mode
[   73.742899][ T7441] __nla_validate_parse: 26 callbacks suppressed
[   73.742909][ T7441] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.367'.
[   73.770589][ T7445] TCP: TCP_TX_DELAY enabled
[   73.778875][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'.
[   73.828614][ T7447] pimreg: entered allmulticast mode
[   73.831444][ T7447] pimreg: left allmulticast mode
[   73.957490][ T7462] syzkaller0: entered promiscuous mode
[   73.959277][ T7462] syzkaller0: entered allmulticast mode
[   73.962496][ T7462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.372'.
[   74.018359][ T7465] xt_CT: No such helper "snmp_trap"
[   74.071038][ T7470] tap0: tun_chr_ioctl cmd 1074025680
[   74.074896][ T7470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.078896][ T7470] D: renamed from syzkaller0
[   74.082267][ T7470] tipc: Disabling bearer <eth:syzkaller0>
[   74.094464][ T7477] netlink: 36 bytes leftover after parsing attributes in process `syz.0.377'.
[   74.101814][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'.
[   74.156483][ T7482] syz_tun: entered allmulticast mode
[   74.162176][ T7481] syz_tun: left allmulticast mode
[   74.197357][ T7487] IPVS: set_ctl: invalid protocol: 60 172.30.0.1:20004
[   74.277974][ T7489] RDS: rds_bind could not find a transport for ::ffff:0.24.0.0, load rds_tcp or rds_rdma?
[   74.300728][ T7489] bridge8: entered promiscuous mode
[   74.339088][ T7504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.384'.
[   74.342065][ T7504] netlink: 56 bytes leftover after parsing attributes in process `syz.1.384'.
[   74.348720][ T7504] validate_nla: 7 callbacks suppressed
[   74.348729][ T7504] netlink: 'syz.1.384': attribute type 10 has an invalid length.
[   74.358938][ T7504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'.
[   74.361917][ T7504] dummy0: entered promiscuous mode
[   74.366532][ T7504] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   74.450092][ T7517] netlink: 76 bytes leftover after parsing attributes in process `syz.0.387'.
[   74.454506][ T7517] netlink: 76 bytes leftover after parsing attributes in process `syz.0.387'.
[   74.459846][ T7513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.722869][ T7529] macvlan3: entered allmulticast mode
[   74.725561][ T7529] veth1_vlan: entered allmulticast mode
[   74.729509][ T7529] veth1_vlan: left allmulticast mode
[   74.858397][ T7545] tipc: Can't bind to reserved service type 1
[   74.861975][ T7540] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.902926][ T7549] netlink: 'syz.2.399': attribute type 6 has an invalid length.
[   74.974102][ T7540] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   74.999644][ T7554] batadv_slave_1: left promiscuous mode
[   75.003106][ T7554] tipc: Resetting bearer <eth:syzkaller0>
[   75.009625][ T7554] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[   75.011950][ T7554] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[   75.015609][ T7554] macsec0: left allmulticast mode
[   75.041173][ T7540] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.060566][ T7561] netlink: 'syz.2.402': attribute type 9 has an invalid length.
[   75.070303][ T7561] macvlan2: entered promiscuous mode
[   75.074666][ T7561] hsr0: entered promiscuous mode
[   75.077642][ T7561] macvlan2: entered allmulticast mode
[   75.077776][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[   75.080662][ T7561] hsr0: entered allmulticast mode
[   75.083125][ T7561] hsr_slave_0: entered allmulticast mode
[   75.085728][ T7561] hsr_slave_1: entered allmulticast mode
[   75.089353][ T7540] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   75.162481][ T7567] netlink: 'syz.2.405': attribute type 1 has an invalid length.
[   75.178159][ T5853] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.195537][ T6221] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.204531][ T6221] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.208776][ T7570] netlink: 'syz.1.406': attribute type 33 has an invalid length.
[   75.216659][ T6221] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.226239][ T7567] netlink: 'syz.2.405': attribute type 1 has an invalid length.
[   75.274309][ T7567] 8021q: adding VLAN 0 to HW filter on device bond7
[   75.277674][ T7567] bond6: (slave bond7): making interface the new active one
[   75.280548][ T7567] bond6: (slave bond7): Enslaving as an active interface with an up link
[   75.299751][ T7574] sit1: entered promiscuous mode
[   75.335661][ T7579] vlan2: entered promiscuous mode
[   75.337437][ T7579] bond0: entered promiscuous mode
[   75.339023][ T7579] bond_slave_0: entered promiscuous mode
[   75.340871][ T7579] bond_slave_1: entered promiscuous mode
[   75.342925][ T7579] batadv0: entered promiscuous mode
[   75.348197][ T7579] bond0: (slave vlan2): Opening slave failed
[   75.405556][ T7584] 8021q: adding VLAN 0 to HW filter on device bond10
[   75.446990][ T7593] openvswitch: netlink: Actions may not be safe on all matching packets
[   75.541631][ T7600] netlink: 'syz.2.414': attribute type 1 has an invalid length.
[   75.545234][ T7601] netlink: 'syz.2.414': attribute type 1 has an invalid length.
[   75.556547][ T7600] 8021q: adding VLAN 0 to HW filter on device bond8
[   75.570207][ T7601] 8021q: adding VLAN 0 to HW filter on device bond9
[   76.324031][ T7611] ipt_ECN: cannot use operation on non-tcp rule
[   76.376279][ T7608] bond8: entered promiscuous mode
[   76.514831][ T7611] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[   76.532743][ T7610] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[   76.641268][ T7633] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[   76.684146][ T7633] 8021q: adding VLAN 0 to HW filter on device bond11
[   76.698252][ T7636] sit1: entered promiscuous mode
[   76.747405][ T7631] sctp: [Deprecated]: syz.1.424 (pid 7631) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.747405][ T7631] Use struct sctp_sack_info instead
[   76.852036][ T7661] dummy0: left promiscuous mode
[   76.857347][ T7661] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   76.863604][ T7661] ip6gre1: left promiscuous mode
[   76.865705][ T7661] gretap3: left promiscuous mode
[   76.868388][ T7661] bridge8: left promiscuous mode
[   76.870403][ T7661] sit1: left promiscuous mode
[   76.872149][ T7661] bond8: left promiscuous mode
[   77.007402][ T7676] syzkaller0: entered promiscuous mode
[   77.009269][ T7676] syzkaller0: entered allmulticast mode
[   77.031725][ T7683] netlink: 'syz.2.436': attribute type 10 has an invalid length.
[   77.043826][ T7683] batman_adv: batadv0: Removing interface: 0!
[   77.047822][ T7683] team0: Port device 0! added
[   77.721402][ T7683] team0: Failed to send options change via netlink (err -105)
[   77.724308][ T7683] team0: Failed to send port change of device 0! via netlink (err -105)
[   77.728493][ T7683] team0: Port device 0! removed
[   77.732225][ T7683] !: entered promiscuous mode
[   77.734241][ T7683] bond0: (slave 0!): Enslaving as an active interface with an up link
[   77.842107][ T7698] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   77.906058][ T7706] bond0: (slave bond_slave_0): Releasing backup interface
[   77.912682][ T7706] bond0: (slave bond_slave_1): Releasing backup interface
[   77.919655][ T7706] team0: Port device team_slave_0 removed
[   77.922719][ T7706] team0: Port device team_slave_1 removed
[   77.929227][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.931964][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.940364][ T7706] bond1: (slave bridge3): Releasing backup interface
[   77.949981][ T7706] bond4: (slave gretap2): Releasing active interface
[   77.958350][ T7706] bond5: (slave bridge6): Releasing active interface
[   77.963777][ T7706] bond5: (slave bridge6): the permanent HWaddr of slave - aa:78:9b:2a:b0:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   77.975714][ T7706] bond5: (slave gretap3): making interface the new active one
[   77.982256][ T7706] bond5: (slave gretap3): Releasing active interface
[   77.992880][ T7711] macvlan0: entered allmulticast mode
[   78.178686][ T7715] nbd: nbd63 already in use
[   78.263146][ T7719] ip6t_srh: unknown srh match flags  5294
[   78.358035][ T7720] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.396209][ T7720] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.437632][ T7720] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.488183][ T7720] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   78.569096][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.580539][ T5853] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.589972][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.604254][ T5853] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.689484][ T7728] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   78.789889][ T7734] macvlan0: entered allmulticast mode
[   78.791918][ T7734] __nla_validate_parse: 20 callbacks suppressed
[   78.791925][ T7734] netlink: 96 bytes leftover after parsing attributes in process `syz.2.447'.
[   78.840417][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.844894][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.847408][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.374423][ T7752] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   79.490938][ T7757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.453'.
[   79.546150][ T7762] validate_nla: 1 callbacks suppressed
[   79.546160][ T7762] netlink: 'syz.1.455': attribute type 10 has an invalid length.
[   79.567112][ T7763] vat: renamed from veth0_vlan
[   79.597795][ T7766] ip6tnl2: entered promiscuous mode
[   79.599745][ T7766] ip6tnl2: entered allmulticast mode
[   79.602489][ T7766] team0: Device ip6tnl2 is up. Set it down before adding it as a team port
[   79.675530][ T7766] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[   79.692100][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'.
[   79.696574][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'.
[   79.697670][ T7766] bond10: entered promiscuous mode
[   79.701364][ T7766] bond10: entered allmulticast mode
[   79.703469][ T7766] 8021q: adding VLAN 0 to HW filter on device bond10
[   79.708920][ T7773] gretap0: entered promiscuous mode
[   79.711408][ T7773] batadv_slave_1: entered promiscuous mode
[   79.715942][ T7773] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[   79.719191][ T7773] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.729593][ T7767] bridge10: entered promiscuous mode
[   79.731752][ T7767] bridge10: entered allmulticast mode
[   79.738081][ T7767] bond10: (slave bridge10): Enslaving as a backup interface with an up link
[   79.782758][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'.
[   79.790787][ T7777] erspan1: entered promiscuous mode
[   79.792631][ T7777] erspan1: entered allmulticast mode
[   79.862164][ T7786] netlink: 9 bytes leftover after parsing attributes in process `syz.2.458'.
[   79.865753][ T7786] 0: renamed from hsr_slave_1
[   79.868825][ T7786] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   80.055071][ T7796] netlink: 52 bytes leftover after parsing attributes in process `syz.0.464'.
[   80.086619][ T7798] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.117016][ T7798] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.142719][ T7799] 8021q: adding VLAN 0 to HW filter on device batadv1
[   80.145587][ T7799] batadv1: entered promiscuous mode
[   80.147503][ T7799] batadv1: entered allmulticast mode
[   80.149576][ T7799] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   80.152624][ T7799] team0: Failed to send options change via netlink (err -105)
[   80.156268][ T7799] team0: Port device batadv1 added
[   80.161356][ T7798] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.217371][ T7798] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.287385][ T5657] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.296293][ T5853] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.304490][ T5853] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.312285][ T5853] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.483006][ T7818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.496237][ T7820] tipc: Disabling bearer <eth:syzkaller0>
[   80.574034][ T7825] veth5: entered promiscuous mode
[   80.605736][ T7828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.611654][ T7828] syzkaller0: entered promiscuous mode
[   80.613668][ T7828] syzkaller0: entered allmulticast mode
[   80.627341][ T7830] netlink: 'syz.2.474': attribute type 1 has an invalid length.
[   80.630043][ T7828] tipc: Resetting bearer <eth:syzkaller0>
[   80.633402][ T7827] tipc: Resetting bearer <eth:syzkaller0>
[   80.639811][ T7827] tipc: Disabling bearer <eth:syzkaller0>
[   80.644227][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   80.647794][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   80.661934][ T7830] bond10: entered promiscuous mode
[   80.665101][ T7830] 8021q: adding VLAN 0 to HW filter on device bond10
[   80.705312][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'.
[   80.752238][ T7834] veth3: entered promiscuous mode
[   80.754522][ T7834] bridge2: port 1(veth3) entered blocking state
[   80.757086][ T7834] bridge2: port 1(veth3) entered disabled state
[   80.759714][ T7834] veth3: entered allmulticast mode
[   80.789527][ T7838] tipc: Resetting bearer <eth:syzkaller0>
[   80.818077][ T7840] netlink: 558 bytes leftover after parsing attributes in process `syz.2.477'.
[   80.847023][ T7842] pim6reg1: entered promiscuous mode
[   80.848786][ T7842] pim6reg1: entered allmulticast mode
[   80.906452][ T7843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.478'.
[   80.921673][ T7843] 8021q: adding VLAN 0 to HW filter on device bond12
[   80.924802][ T7843] team0: Port device bond12 added
[   80.970674][ T7851] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[   80.973130][ T7851] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[   80.977750][ T7851] tipc: Resetting bearer <eth:syzkaller0>
[   80.980613][ T7851] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[   81.065020][   T24] cfg80211: failed to load regulatory.db
[   81.085023][ T7862] pimreg: entered allmulticast mode
[   81.089382][ T7862] pimreg: left allmulticast mode
[   82.050476][ T7878] netlink: 'syz.0.487': attribute type 21 has an invalid length.
[   82.053711][ T7878] netlink: 'syz.0.487': attribute type 6 has an invalid length.
[   82.522130][ T7874] Set syz1 is full, maxelem 65536 reached
[   82.627910][ T7894] ip6tnl3: entered promiscuous mode
[   82.630131][ T7894] ip6tnl3: entered allmulticast mode
[   82.634239][ T7894] team0: Device ip6tnl3 is of different type
[   82.675422][ T7896] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   82.950687][ T7901] netlink: 'syz.0.492': attribute type 1 has an invalid length.
[   82.955277][ T7902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.958438][ T7902] syzkaller0: entered promiscuous mode
[   82.960456][ T7902] syzkaller0: entered allmulticast mode
[   82.986465][ T7901] 8021q: adding VLAN 0 to HW filter on device bond15
[   82.991313][ T7902] tipc: Resetting bearer <eth:syzkaller0>
[   83.000837][ T7901] bond15: (slave bridge2): making interface the new active one
[   83.004345][ T7901] bond15: (slave bridge2): Enslaving as an active interface with an up link
[   83.008006][ T7900] tipc: Resetting bearer <eth:syzkaller0>
[   83.019860][ T7900] tipc: Disabling bearer <eth:syzkaller0>
[   83.031042][ T7901] gretap2: entered promiscuous mode
[   83.035035][ T7901] bond15: (slave gretap2): Enslaving as an active interface with an up link
[   83.042115][ T7901] delete_channel: no stack
[   83.182669][ T7912] erspan0: entered promiscuous mode
[   83.187480][ T7912] erspan0: left promiscuous mode
[   83.382931][ T7927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.387316][ T7927] syzkaller0: entered promiscuous mode
[   83.389296][ T7927] syzkaller0: entered allmulticast mode
[   83.414755][ T7927] tipc: Resetting bearer <eth:syzkaller0>
[   83.429615][ T7926] tipc: Resetting bearer <eth:syzkaller0>
[   83.440207][ T7926] tipc: Disabling bearer <eth:syzkaller0>
[   83.447664][ T7929] netlink: 'syz.2.501': attribute type 4 has an invalid length.
[   83.452118][ T7929] netlink: 'syz.2.501': attribute type 4 has an invalid length.
[   83.541542][ T7935] veth2: entered allmulticast mode
[   83.804633][ T7945] __nla_validate_parse: 3 callbacks suppressed
[   83.804648][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'.
[   83.809055][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'.
[   83.840480][ T7947] netlink: 'syz.0.509': attribute type 2 has an invalid length.
[   84.063545][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'.
[   84.068353][ T7956] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   84.168032][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'.
[   84.192413][ T7967] netlink: 'syz.2.512': attribute type 46 has an invalid length.
[   84.231153][ T7969] bond0: (slave 0!): Releasing backup interface
[   84.234811][ T7969] !: left promiscuous mode
[   84.240044][ T7969] bond0: (slave batadv0): Releasing backup interface
[   84.242481][ T7969] batadv0: left promiscuous mode
[   84.247682][ T7969] bond0: (slave bond_slave_0): Releasing backup interface
[   84.250303][ T7969] bond_slave_0: left promiscuous mode
[   84.252920][ T7969] bond0: (slave bond_slave_1): Releasing backup interface
[   84.257247][ T7969] bond_slave_1: left promiscuous mode
[   84.260757][ T7969] team0: Port device team_slave_1 removed
[   84.262804][ T7969] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.267900][ T7969] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.270901][ T7969] tipc: Resetting bearer <eth:syzkaller0>
[   84.273641][ T7969] bond3: (slave ip6gretap1): Removing an active aggregator
[   84.276586][ T7969] bond3: (slave ip6gretap1): Releasing backup interface
[   84.280258][ T7969] bond4: (slave gretap2): Releasing active interface
[   84.282443][ T7969] gretap2: left allmulticast mode
[   84.287046][ T7969] bond6: (slave bond7): Releasing backup interface
[   84.292363][ T7969] veth3: left allmulticast mode
[   84.294392][ T7969] bridge2: port 1(veth3) entered disabled state
[   84.299986][ T7969] team0: Port device bond12 removed
[   84.345379][ T7972] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   84.348909][ T7972] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[   84.351515][ T7972] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[   84.357344][ T7972] tipc: Resetting bearer <eth:syzkaller0>
[   84.663107][ T7977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.671875][ T7977] syzkaller0: entered promiscuous mode
[   84.675475][ T7977] syzkaller0: entered allmulticast mode
[   84.687355][ T7977] tipc: Resetting bearer <eth:syzkaller0>
[   84.689899][ T7976] tipc: Resetting bearer <eth:syzkaller0>
[   84.703762][ T7976] tipc: Disabling bearer <eth:syzkaller0>
[   84.734284][ T7979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.517'.
[   84.737230][ T7979] netlink: 56 bytes leftover after parsing attributes in process `syz.0.517'.
[   84.743048][ T7979] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[   84.746493][ T7979] gretap3: entered promiscuous mode
[   84.748328][ T7979] gretap3: entered allmulticast mode
[   84.751411][ T7979] validate_nla: 2 callbacks suppressed
[   84.751418][ T7979] netlink: 'syz.0.517': attribute type 29 has an invalid length.
[   84.761970][ T7980] netlink: 'syz.0.517': attribute type 29 has an invalid length.
[   84.765102][ T7980] netlink: 548 bytes leftover after parsing attributes in process `syz.0.517'.
[   84.769109][ T7979] netlink: 'syz.0.517': attribute type 29 has an invalid length.
[   84.795644][ T7983] netlink: 176 bytes leftover after parsing attributes in process `syz.1.518'.
[   84.856416][ T7987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.861182][ T7987] syzkaller0: entered promiscuous mode
[   84.864759][ T7987] syzkaller0: entered allmulticast mode
[   84.870444][ T7987] tipc: Resetting bearer <eth:syzkaller0>
[   84.876806][ T7986] tipc: Resetting bearer <eth:syzkaller0>
[   84.886134][ T7986] tipc: Disabling bearer <eth:syzkaller0>
[   84.927870][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'.
[   84.958378][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'.
[   85.044614][ T8010] netlink: 'syz.1.526': attribute type 2 has an invalid length.
[   85.051641][ T8010] : entered promiscuous mode
[   85.120359][ T8020] netlink: 'syz.0.528': attribute type 4 has an invalid length.
[   85.120374][ T8019] netlink: 'syz.0.528': attribute type 4 has an invalid length.
[   85.165474][ T8024] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[   85.276655][ T8031] xt_hashlimit: size too large, truncated to 1048576
[   85.276876][ T8033] xt_hashlimit: size too large, truncated to 1048576
[   85.390100][ T8039] netlink: 'syz.0.533': attribute type 39 has an invalid length.
[   85.392602][ T8040] netlink: 'syz.0.533': attribute type 39 has an invalid length.
[   85.534288][ T8050] vlan3: entered promiscuous mode
[   85.536508][ T8050] vlan3: entered allmulticast mode
[   85.538365][ T8050] hsr_slave_1: entered allmulticast mode
[   85.543758][ T8050] openvswitch: netlink: Flow key attribute not present in set flow.
[   85.546471][ T8052] nbd: couldn't find device at index 536870912
[   85.554733][ T8052] tap0: tun_chr_ioctl cmd 1074025677
[   85.561163][ T8052] tap0: linktype set to 825
[   85.700764][ T8060] netlink: 'syz.0.541': attribute type 1 has an invalid length.
[   85.727918][ T8062] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.731663][ T8062] 8021q: adding VLAN 0 to HW filter on device team0
[   85.736972][ T8062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.755215][ T8060] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[   85.759418][ T8060] bond16: (slave vxcan1): Error -95 calling set_mac_address
[   85.779571][ T8063] macvlan0: entered promiscuous mode
[   85.781268][ T8063] macvlan0: entered allmulticast mode
[   85.783506][ T8063] bond16: entered promiscuous mode
[   85.785761][ T8063] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   85.790570][ T8063] bond16: left promiscuous mode
[   85.880474][ T8065] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20002
[   86.496633][ T8081] tipc: Enabled bearer <eth:team0>, priority 0
[   86.528165][ T8083] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   86.534856][ T8083] tipc: Resetting bearer <eth:team0>
[   86.537479][ T8083] tipc: Resetting bearer <eth:syzkaller0>
[   86.544209][ T8083] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   86.547556][ T8083] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.551551][ T8083] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[   86.555217][ T8083] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.562518][ T8083] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   86.565827][ T8083] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   87.387426][ T8103] geneve2: entered promiscuous mode
[   87.390135][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.394608][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.405133][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.411264][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.857141][ T8109] gre0: left allmulticast mode
[   87.863159][ T8109] erspan0: left allmulticast mode
[   87.885497][ T8109] bridge0: port 1(team0) entered blocking state
[   87.887609][ T8109] bridge0: port 1(team0) entered forwarding state
[   87.890819][ T8109] bridge0: left promiscuous mode
[   87.897026][ T8109] batman_adv: batadv0: Interface activated: dummy0
[   87.899155][ T8109] batadv0: mtu less than device minimum
[   87.901460][ T8109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.905318][ T8109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.909049][ T8109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.912855][ T8109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.916709][ T8109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.920580][ T8109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.924495][ T8109] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   87.975970][ T8114] vlan3: entered promiscuous mode
[   87.978168][ T8114] bridge0: entered promiscuous mode
[   88.357589][ T8132] IPVS: Scheduler module ip_vs_sip not found
[   88.422593][ T8142] gre0: entered allmulticast mode
[   89.317191][ T8150] __nla_validate_parse: 15 callbacks suppressed
[   89.317201][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'.
[   89.348019][ T8153] netlink: 76 bytes leftover after parsing attributes in process `syz.0.565'.
[   89.378785][ T8155] netlink: 27 bytes leftover after parsing attributes in process `syz.0.566'.
[   89.620450][ T8166] netlink: 48 bytes leftover after parsing attributes in process `syz.0.569'.
[   89.639419][ T8166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.569'.
[   90.030184][ T8173] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.071671][ T8173] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.205571][ T8173] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.307694][ T8173] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.385431][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.404342][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.413087][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.436288][ T5657] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.619417][ T8189] validate_nla: 9 callbacks suppressed
[   90.619427][ T8189] netlink: 'syz.1.575': attribute type 10 has an invalid length.
[   90.624039][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.1.575'.
[   90.639706][ T8189] batman_adv: batadv0: Adding interface: virt_wifi0
[   90.641891][ T8189] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[   90.649590][ T8189] batman_adv: batadv0: Interface activated: virt_wifi0
[   90.690429][ T8209] netlink: 56 bytes leftover after parsing attributes in process `syz.0.581'.
[   90.698176][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'.
[   90.717826][ T8208] bond12 (unregistering): Released all slaves
[   90.837116][ T8221] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[   90.855836][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[   90.859890][ T8221] syz_tun: entered allmulticast mode
[   90.866789][ T8221] dvmrp8: entered allmulticast mode
[   90.870759][ T8220] syz_tun: left allmulticast mode
[   91.152073][ T8231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.585'.
[   91.669120][ T8238] netlink: 'syz.1.587': attribute type 10 has an invalid length.
[   91.692526][ T8242] netlink: 'syz.1.588': attribute type 12 has an invalid length.
[   91.752849][ T8244] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   91.760707][ T8244] batman_adv: batadv0: Removing interface: virt_wifi0
[   91.834048][ T8249] 8021q: adding VLAN 0 to HW filter on device batadv1
[   91.836818][ T8249] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   91.839677][ T8249] team0: Failed to send options change via netlink (err -105)
[   91.842029][ T8249] team0: Port device batadv1 added
[   92.057381][ T8251] bond10: (slave bridge10): Releasing backup interface
[   92.059980][ T8251] bridge10: left promiscuous mode
[   92.061648][ T8251] bridge10: left allmulticast mode
[   92.067553][ T8251] team0: Port device batadv1 removed
[   92.128763][ T8258] netlink: 'syz.0.593': attribute type 1 has an invalid length.
[   92.165078][ T8258] 8021q: adding VLAN 0 to HW filter on device bond18
[   92.173499][ T8261] macsec1: entered promiscuous mode
[   92.175215][ T8261] batadv0: entered promiscuous mode
[   92.177142][ T8261] macsec1: entered allmulticast mode
[   92.178863][ T8261] batadv0: entered allmulticast mode
[   92.182140][ T8261] batadv0: left allmulticast mode
[   92.185849][ T8261] batadv0: left promiscuous mode
[   92.200393][ T8258] vlan4: entered promiscuous mode
[   92.202159][ T8258] bond18: entered promiscuous mode
[   92.204604][ T8258] vlan4: entered allmulticast mode
[   92.206233][ T8258] bond18: entered allmulticast mode
[   92.257473][ T8267] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   92.351423][ T8274] bond13 (unregistering): Released all slaves
[   92.514665][ T8285] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address
[   92.519055][ T8285] bond19: (slave vxcan1): Error -95 calling set_mac_address
[   92.731597][ T8296] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[   92.736914][ T8297] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   92.795635][ T8299] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[   92.803384][ T8299] macsec1: entered promiscuous mode
[   92.805211][ T8299] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   92.807653][ T8299] macsec1: entered allmulticast mode
[   92.809581][ T8299] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   92.917118][ T8306] tipc: Resetting bearer <eth:team0>
[   93.015865][ T8311] net_ratelimit: 13 callbacks suppressed
[   93.015875][ T8311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.025069][ T8312] netlink: 'syz.0.607': attribute type 1 has an invalid length.
[   93.052477][ T8312] 8021q: adding VLAN 0 to HW filter on device bond20
[   93.788572][ T8334] netlink: 'syz.0.615': attribute type 4 has an invalid length.
[   93.791461][ T8334] netlink: 'syz.0.615': attribute type 17 has an invalid length.
[   93.837293][ T8343] pim6reg1: entered promiscuous mode
[   93.839163][ T8343] pim6reg1: entered allmulticast mode
[   93.881236][ T8344] netlink: 'syz.0.617': attribute type 9 has an invalid length.
[   93.925607][ T8345] 8021q: adding VLAN 0 to HW filter on device bond13
[   93.929574][ T8345] team0: Port device bond13 added
[   93.934371][  T190] tipc: Resetting bearer <eth:team0>
[   93.967593][ T8348] xt_time: unknown flags 0x4
[   94.111580][ T8351] xt_TCPMSS: Only works on TCP SYN packets
[   94.117215][ T8351] xt_TCPMSS: Only works on TCP SYN packets
[   94.123745][ T8351] xt_TCPMSS: Only works on TCP SYN packets
[   94.131584][ T8353] veth3: entered promiscuous mode
[   94.532809][ T8371] 8021q: VLANs not supported on caif0
[   94.709719][ T8385] 8021q: adding VLAN 0 to HW filter on device bond21
[   94.709814][ T8389] __nla_validate_parse: 18 callbacks suppressed
[   94.709823][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'.
[   94.722453][ T8383] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   94.734476][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'.
[   94.735789][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.630'.
[   94.748104][ T8383] netlink: 52 bytes leftover after parsing attributes in process `syz.2.630'.
[   94.773837][ T8395] syzkaller1: entered promiscuous mode
[   94.775659][ T8395] syzkaller1: entered allmulticast mode
[   94.793110][ T8395] bond12: entered promiscuous mode
[   94.796325][ T8398] netlink: 'syz.0.635': attribute type 10 has an invalid length.
[   94.800511][ T8395] 8021q: adding VLAN 0 to HW filter on device bond12
[   94.803800][ T8398] batman_adv: batadv0: Interface deactivated: dummy0
[   94.806901][ T8398] batman_adv: batadv0: Removing interface: dummy0
[   94.810722][ T8398] dummy0: entered promiscuous mode
[   94.814532][ T8398] dummy0: entered allmulticast mode
[   94.816586][ T8398] team0: Port device dummy0 added
[   94.886905][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'.
[   94.892018][ T8401] netlink: 7 bytes leftover after parsing attributes in process `syz.2.636'.
[   94.954289][ T8412] pim6reg1: entered promiscuous mode
[   94.956412][ T8412] pim6reg1: entered allmulticast mode
[   95.012132][ T8419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.639'.
[   95.031963][ T8419] 8021q: adding VLAN 0 to HW filter on device bond14
[   95.036209][ T8419] team0: Port device bond14 added
[   95.044711][  T190] tipc: Resetting bearer <eth:team0>
[   95.065059][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'.
[   95.841806][ T8442] netlink: 256 bytes leftover after parsing attributes in process `syz.2.644'.
[   95.947539][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.645'.
[   95.948411][ T8456] validate_nla: 1 callbacks suppressed
[   95.948419][ T8456] netlink: 'syz.2.648': attribute type 4 has an invalid length.
[   96.011686][ T8461] xt_CT: No such helper "snmp"
[   96.057397][ T8466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.060175][ T8466] syzkaller0: entered promiscuous mode
[   96.061962][ T8466] syzkaller0: entered allmulticast mode
[   96.075636][ T8468] pimreg: entered allmulticast mode
[   96.079132][ T8463] tipc: Resetting bearer <eth:syzkaller0>
[   96.090087][ T8463] tipc: Disabling bearer <eth:syzkaller0>
[   96.094692][ T8468] pimreg: left allmulticast mode
[   96.232967][ T8482] netlink: 'syz.1.655': attribute type 1 has an invalid length.
[   96.290445][ T8482] 8021q: adding VLAN 0 to HW filter on device bond13
[   96.295814][ T8484] bridge0: port 1(team0) entered disabled state
[   96.319589][ T8486] bond13: (slave veth7): Enslaving as an active interface with a down link
[   96.355249][ T8489] netlink: 'syz.0.656': attribute type 5 has an invalid length.
[   96.373081][ T8491] netlink: 'syz.2.657': attribute type 2 has an invalid length.
[   96.394399][   T12] bond5: (slave ip6gretap1): link status up again after 0 ms
[   96.400169][ T8491] : entered promiscuous mode
[   96.406651][ T8486] vlan3: entered allmulticast mode
[   96.408352][ T8486] veth1: entered allmulticast mode
[   96.410299][ T8486] bond13: (slave vlan3): Opening slave failed
[   96.413536][ T5657] bond5: (slave ip6gretap1): link status up again after 0 ms
[   96.436810][   T12] bond5: (slave ip6gretap1): link status up again after 0 ms
[   96.454824][ T5657] bond5: (slave ip6gretap1): link status up again after 0 ms
[   96.459526][ T8493] bridge6: entered promiscuous mode
[   96.473418][   T12] bond5: (slave ip6gretap1): link status up again after 0 ms
[   96.475820][   T12] bond5: (slave ip6gretap1): failed to get link speed/duplex
[   96.583624][ T5657] bond5: (slave ip6gretap1): failed to get link speed/duplex
[   96.693722][ T6221] bond5: (slave ip6gretap1): failed to get link speed/duplex
[   96.727902][ T8518] bridge0: entered promiscuous mode
[   96.985541][ T8532] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   96.999164][ T8532] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[   97.004176][ T8532] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[   97.013671][ T8532] tipc: Resetting bearer <eth:syzkaller0>
[   97.109607][ T8539] netlink: 'syz.2.671': attribute type 1 has an invalid length.
[   97.207221][ T8545] netlink: 'syz.2.673': attribute type 13 has an invalid length.
[   97.211908][ T8545] netlink: 'syz.2.673': attribute type 17 has an invalid length.
[   97.226992][ T8545] tipc: Resetting bearer <eth:team0>
[   97.229292][ T8545] tipc: Resetting bearer <eth:team0>
[   97.306745][ T8553] syzkaller0: entered promiscuous mode
[   97.308565][ T8553] syzkaller0: entered allmulticast mode
[   97.482799][ T8562] !: renamed from dummy0 (while UP)
[   97.677964][ T8578] dvmrp0: entered allmulticast mode
[   98.204572][   T13] net_ratelimit: 11 callbacks suppressed
[   98.204591][   T13] bond5: (slave ip6gretap1): failed to get link speed/duplex
[   98.270997][ T8635] bond0: option miimon: invalid value (18446744073709551615)
[   98.276831][ T8635] bond0: option miimon: allowed values 0 - 2147483647
[   98.313399][   T13] bond5: (slave ip6gretap1): failed to get link speed/duplex
[   98.424411][   T12] bond5: (slave ip6gretap1): failed to get link speed/duplex
[   98.527468][ T8653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.530076][ T8653] syzkaller0: entered promiscuous mode
[   98.531946][ T8653] syzkaller0: entered allmulticast mode
[   98.544263][ T8653] tipc: Resetting bearer <eth:syzkaller0>
[   98.546881][ T8652] tipc: Resetting bearer <eth:syzkaller0>
[   98.554054][ T8652] tipc: Disabling bearer <eth:syzkaller0>
[   98.583470][   T13] bond5: (slave ip6gretap1): failed to get link speed/duplex
[   98.700972][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.705400][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.708315][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.711112][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.961905][ T8683] netlink: 'syz.0.697': attribute type 10 has an invalid length.
[   98.967369][ T8683] geneve0: entered promiscuous mode
[   98.969270][ T8683] geneve0: entered allmulticast mode
[   98.971345][ T8683] team0: Port device geneve0 added
[   98.974716][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.980024][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.982702][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.985724][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.080620][ T8701] pim6reg1: entered promiscuous mode
[   99.082497][ T8701] pim6reg1: entered allmulticast mode
[   99.178759][ T8711] batadv2: entered promiscuous mode
[   99.180601][ T8711] batadv2: entered allmulticast mode
[   99.211271][ T8706] 8021q: adding VLAN 0 to HW filter on device bond22
[   99.216439][ T8706] bond22: entered promiscuous mode
[   99.218289][ T8706] bond22: entered allmulticast mode
[   99.220309][ T8706] team0: Port device bond22 added
[   99.379311][ T8727] netlink: 'syz.1.704': attribute type 1 has an invalid length.
[   99.417499][ T8727] batadv_slave_1: entered promiscuous mode
[   99.461160][ T8735] xt_policy: output policy not valid in PREROUTING and INPUT
[   99.674484][ T8747] : entered promiscuous mode
[   99.785545][ T8753] __nla_validate_parse: 28 callbacks suppressed
[   99.785556][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.711'.
[   99.795175][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'.
[   99.858765][ T8758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.713'.
[   99.919643][ T8762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.922992][ T8762] syzkaller0: entered promiscuous mode
[   99.924962][ T8762] syzkaller0: entered allmulticast mode
[   99.937923][ T8763] tipc: Resetting bearer <eth:syzkaller0>
[   99.941449][ T8761] tipc: Resetting bearer <eth:syzkaller0>
[   99.955818][ T8761] tipc: Disabling bearer <eth:syzkaller0>
[  100.044471][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'.
[  100.136620][ T8769] netlink: 'syz.1.716': attribute type 29 has an invalid length.
[  100.140213][ T8769] netlink: 508 bytes leftover after parsing attributes in process `syz.1.716'.
[  100.192293][ T8776] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  100.222059][ T8778] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  100.227158][ T8778] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  100.515561][ T8784] netlink: 156 bytes leftover after parsing attributes in process `syz.1.721'.
[  100.751675][ T8787] bond15: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  100.756819][ T6221] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  100.757321][ T8787] 8021q: adding VLAN 0 to HW filter on device bond15
[  100.812916][ T8792] 8021q: adding VLAN 0 to HW filter on device bond16
[  100.874253][   T12] bond15: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  101.063814][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.726'.
[  101.067895][ T8801] netlink: 3 bytes leftover after parsing attributes in process `syz.2.726'.
[  101.081918][ T8801] validate_nla: 4 callbacks suppressed
[  101.081928][ T8801] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[  101.171386][ T8803] tipc: Resetting bearer <eth:team0>
[  101.185324][ T8803] tipc: Resetting bearer <eth:syzkaller0>
[  101.200104][ T8803] hsr0: left allmulticast mode
[  101.201807][ T8803] hsr_slave_0: left allmulticast mode
[  101.203674][ T8803] hsr0: left promiscuous mode
[  101.216777][ T8803] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  101.219121][ T8803] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  101.224702][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.227621][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.231584][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.234891][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.263121][ T8805] netlink: 'syz.2.727': attribute type 1 has an invalid length.
[  101.266678][ T8805] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  101.337598][ T8811] netlink: 'syz.2.728': attribute type 1 has an invalid length.
[  101.357466][ T8811] 8021q: adding VLAN 0 to HW filter on device bond16
[  101.433626][ T8816] netlink: 48 bytes leftover after parsing attributes in process `syz.2.729'.
[  101.463165][ T8818] netlink: 'syz.2.730': attribute type 1 has an invalid length.
[  101.488951][ T8819] bond17: entered promiscuous mode
[  101.491342][ T8819] bond17: entered allmulticast mode
[  101.494292][ T8819] 8021q: adding VLAN 0 to HW filter on device bond17
[  101.520036][ T8824] netlink: 56 bytes leftover after parsing attributes in process `syz.2.731'.
[  101.824892][ T8826] netlink: 'syz.2.731': attribute type 4 has an invalid length.
[  102.041399][ T8834] veth9: entered promiscuous mode
[  102.044464][ T8834] erspan0: entered allmulticast mode
[  102.082649][ T8836] netlink: 'syz.1.735': attribute type 21 has an invalid length.
[  102.202666][ T8839] netlink: 'syz.1.736': attribute type 4 has an invalid length.
[  102.209636][ T8838] netlink: 'syz.1.736': attribute type 4 has an invalid length.
[  102.212268][ T8838] netlink: 'syz.1.736': attribute type 4 has an invalid length.
[  102.491672][ T8854] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  102.512172][ T8850] 8021q: adding VLAN 0 to HW filter on device bond23
[  102.566877][ T8854] dvmrp8: entered allmulticast mode
[  102.600506][ T8858] pim6reg1: entered promiscuous mode
[  102.602308][ T8858] pim6reg1: entered allmulticast mode
[  102.692206][ T8867] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.698023][ T8867] tipc: Resetting bearer <eth:syzkaller0>
[  102.778596][ T8873] netlink: 'syz.1.745': attribute type 10 has an invalid length.
[  102.784972][ T8873] team0: Port device geneve0 added
[  102.814133][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.817166][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.820277][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.835132][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.914831][ T8889] veth0: entered promiscuous mode
[  102.937529][ T8889] veth0 (unregistering): left promiscuous mode
[  103.200280][ T8911] bridge13: the hash_elasticity option has been deprecated and is always 16
[  103.328914][ T8921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.848607][ T8934] team0: left allmulticast mode
[  103.851983][ T8934] bond8: left allmulticast mode
[  103.855996][ T8934] batadv1: left allmulticast mode
[  103.857779][ T8934] !: left allmulticast mode
[  103.860003][ T8934] geneve0: left allmulticast mode
[  103.861754][ T8934] bond22: left allmulticast mode
[  103.866333][ T8934] team0: left promiscuous mode
[  103.867963][ T8934] bond8: left promiscuous mode
[  103.869626][ T8934] batadv1: left promiscuous mode
[  103.871358][ T8934] !: left promiscuous mode
[  103.872945][ T8934] geneve0: left promiscuous mode
[  103.875876][ T8934] bond22: left promiscuous mode
[  103.877949][ T8934] bridge0: port 1(team0) entered disabled state
[  103.976945][ T8940] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  104.126254][ T8954] xt_CT: You must specify a L4 protocol and not use inversions on it
[  104.269116][ T8976] xt_hashlimit: size too large, truncated to 1048576
[  104.269249][ T8977] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  104.326745][ T8981] vlan3: entered promiscuous mode
[  104.328872][ T8981] gretap0: entered promiscuous mode
[  104.396563][ T8987] tipc: Resetting bearer <eth:syzkaller0>
[  104.424456][ T8987] IPv6: NLM_F_REPLACE set, but no existing node found!
[  104.444346][ T8996] erspan0: left allmulticast mode
[  104.447858][ T8996] batadv_slave_1: left promiscuous mode
[  104.450414][ T8996] macvlan0: left allmulticast mode
[  104.457768][ T8996] mac80211_hwsim hwsim11 wlan0: left promiscuous mode
[  104.461472][ T8996] bond10: left promiscuous mode
[  104.463034][ T8996] bond10: left allmulticast mode
[  104.465548][ T8996] erspan1: left promiscuous mode
[  104.467172][ T8996] erspan1: left allmulticast mode
[  104.471724][ T8996] veth3: left promiscuous mode
[  104.477607][ T8996] bond12: left promiscuous mode
[  104.488720][ T8996] veth9: left promiscuous mode
[  104.494498][ T9000] gre0: left allmulticast mode
[  104.509065][ T9000] 8021q: adding VLAN 0 to HW filter on device team0
[  104.514937][ T9000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.519967][ T5874] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.522868][ T5874] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.526592][ T9004] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  104.530211][ T5874] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.535702][ T5874] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.567948][ T9004] veth0_to_bridge: entered promiscuous mode
[  104.578563][ T9003] veth0_to_bridge: left promiscuous mode
[  104.917312][ T9024] __nla_validate_parse: 22 callbacks suppressed
[  104.917325][ T9024] netlink: 156 bytes leftover after parsing attributes in process `syz.1.776'.
[  105.201707][ T9029] bond17: entered promiscuous mode
[  105.205390][ T9029] bond17: entered allmulticast mode
[  105.208168][ T9029] 8021q: adding VLAN 0 to HW filter on device bond17
[  105.218642][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'.
[  105.256653][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'.
[  105.264385][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'.
[  105.271735][ T9032] 8021q: adding VLAN 0 to HW filter on device bond18
[  105.298253][ T9032] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.301660][ T9032] 8021q: adding VLAN 0 to HW filter on device team0
[  105.305383][ T9032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.341746][ T9041] netlink: 56 bytes leftover after parsing attributes in process `syz.0.780'.
[  105.366963][ T9045] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  105.370261][ T9045] macvlan2: left promiscuous mode
[  105.372282][ T9045] sit1: left promiscuous mode
[  105.375754][ T9045] bond10: left promiscuous mode
[  105.377670][ T9045] veth3: left promiscuous mode
[  105.379604][ T9045] geneve2: left promiscuous mode
[  105.381623][ T9045] macsec1: left promiscuous mode
[  105.385778][ T9045] bond17: left promiscuous mode
[  105.398940][ T9044] bridge13: the hash_elasticity option has been deprecated and is always 16
[  105.401823][ T9044] bridge13: entered allmulticast mode
[  105.425744][ T9045] netlink: 76 bytes leftover after parsing attributes in process `syz.2.782'.
[  105.429830][ T9045] nbd: must specify a size in bytes for the device
[  105.470327][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'.
[  105.474188][ T9051] netlink: 7 bytes leftover after parsing attributes in process `syz.2.786'.
[  105.617702][ T9065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.788'.
[  105.621472][ T9065] netlink: 43 bytes leftover after parsing attributes in process `syz.1.788'.
[  105.915628][ T9087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.919492][ T9087] syzkaller0: entered promiscuous mode
[  105.921211][ T9087] syzkaller0: entered allmulticast mode
[  105.931243][ T9087] sch_fq: defrate 257 ignored.
[  105.942449][ T9087] tipc: Resetting bearer <eth:syzkaller0>
[  106.140654][ T9105] validate_nla: 10 callbacks suppressed
[  106.140664][ T9105] netlink: 'syz.0.801': attribute type 1 has an invalid length.
[  106.213833][ T9099] 0 (unregistering): left promiscuous mode
[  106.324557][ T9124] tipc: Resetting bearer <eth:syzkaller0>
[  106.705964][ T9153] netlink: 'syz.1.812': attribute type 1 has an invalid length.
[  106.869902][ T9168] pim6reg1: entered promiscuous mode
[  106.871692][ T9168] pim6reg1: entered allmulticast mode
[  106.970392][ T9172] netlink: 'syz.2.819': attribute type 1 has an invalid length.
[  106.987933][ T9172] bond19: entered promiscuous mode
[  106.989877][ T9172] 8021q: adding VLAN 0 to HW filter on device bond19
[  107.001450][ T9172] 8021q: adding VLAN 0 to HW filter on device bond19
[  107.004145][ T9172] bond19: (slave wireguard0): The slave device specified does not support setting the MAC address
[  107.007614][ T9172] bond19: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  107.014579][ T9172] bond19: (slave wireguard0): making interface the new active one
[  107.017167][ T9172] wireguard0: entered promiscuous mode
[  107.019704][ T9172] bond19: (slave wireguard0): Enslaving as an active interface with an up link
[  107.033450][ T5828] tipc: Node number set to 869302464
[  107.075603][ T9176] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address
[  107.079595][ T9176] bond20: (slave vxcan1): Error -95 calling set_mac_address
[  107.128997][ T9180] macvlan3: entered promiscuous mode
[  107.130860][ T9180] macvlan3: entered allmulticast mode
[  107.132698][ T9180] bond20: (slave macvlan3): Error -98 calling set_mac_address
[  107.185130][ T9182] netlink: 'syz.0.822': attribute type 21 has an invalid length.
[  107.189267][ T9182] netlink: 'syz.0.822': attribute type 6 has an invalid length.
[  107.296931][ T9190] netlink: 'syz.2.826': attribute type 13 has an invalid length.
[  107.299747][ T9190] netlink: 'syz.2.826': attribute type 17 has an invalid length.
[  107.309303][ T9190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.390873][ T9190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.411127][ T9197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.414402][ T9197] syzkaller0: entered promiscuous mode
[  107.416239][ T9197] syzkaller0: entered allmulticast mode
[  107.485726][ T9196] tipc: Resetting bearer <eth:syzkaller0>
[  107.498830][ T9196] tipc: Disabling bearer <eth:syzkaller0>
[  107.713082][ T9223] bridge4: entered promiscuous mode
[  107.716350][ T9223] bridge4: entered allmulticast mode
[  107.720054][ T9223] team0: Port device bridge4 added
[  107.723906][ T9223] IPVS: length: 144 != 24
[  107.750143][ T9226] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  107.778701][ T9226] bond21: (slave geneve3): making interface the new active one
[  107.781503][ T9226] bond21: (slave geneve3): Enslaving as an active interface with an up link
[  107.785235][ T6221] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  107.788477][ T6221] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  107.791385][ T6221] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  107.794507][ T6221] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  107.799653][ T9226] 8021q: adding VLAN 0 to HW filter on device bond21
[  107.964562][ T9239] syzkaller1: entered promiscuous mode
[  107.968292][ T9239] syzkaller1: entered allmulticast mode
[  108.078487][ T9248] netlink: 'syz.2.844': attribute type 1 has an invalid length.
[  108.096055][ T9248] 8021q: adding VLAN 0 to HW filter on device bond22
[  108.112503][ T9248] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  108.123572][ T9248] vlan2: entered allmulticast mode
[  108.125357][ T9248] veth1: entered allmulticast mode
[  108.127706][ T9248] bond22: (slave vlan2): Opening slave failed
[  108.437321][ T9251] xt_CT: No such helper "snmp"
[  108.461479][ T9254] x_tables: unsorted entry at hook 3
[  108.529863][ T9263] pim6reg1: entered promiscuous mode
[  108.531684][ T9263] pim6reg1: entered allmulticast mode
[  108.642584][ T9279] syzkaller0: entered promiscuous mode
[  108.645143][ T9279] syzkaller0: entered allmulticast mode
[  108.737151][ T9288] netlink: 'syz.2.858': attribute type 1 has an invalid length.
[  108.759326][ T9289] bond23: (slave bridge5): Enslaving as a backup interface with an up link
[  108.972662][ T9310] tipc: Resetting bearer <eth:team0>
[  108.979488][ T9310] macvlan0: left allmulticast mode
[  108.981796][ T9310] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  108.986928][ T9310] macvlan2: left allmulticast mode
[  108.990003][ T9310] macsec1: left allmulticast mode
[  108.992070][ T9310] bond17: left allmulticast mode
[  108.995634][ T9310] bond19: left promiscuous mode
[  108.997304][ T9310] wireguard0: left promiscuous mode
[  109.006907][ T9310] bridge4: left promiscuous mode
[  109.008884][ T9310] bridge4: left allmulticast mode
[  109.025203][ T6221] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  109.027993][ T6221] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  109.030698][ T6221] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  109.035289][ T6221] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  109.219860][ T9339] gretap0: entered promiscuous mode
[  109.301801][ T9349] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  109.703401][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  110.246159][ T9373] __nla_validate_parse: 35 callbacks suppressed
[  110.246171][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'.
[  110.251062][ T9373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.878'.
[  110.257331][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'.
[  110.260125][ T9373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.878'.
[  110.296144][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.880'.
[  110.356377][ T9379] syzkaller0: entered promiscuous mode
[  110.358267][ T9379] syzkaller0: entered allmulticast mode
[  110.362703][ T9379] Cannot find add_set index 3 as target
[  110.431982][ T9385] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  110.445257][ T9385] netlink: 104 bytes leftover after parsing attributes in process `syz.1.882'.
[  110.478422][ T9387] 8021q: adding VLAN 0 to HW filter on device bond24
[  110.502355][ T9387] veth7: entered promiscuous mode
[  110.511018][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.514031][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.605822][ T9403] netlink: 20 bytes leftover after parsing attributes in process `syz.1.888'.
[  110.675856][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'.
[  110.817560][ T9431] netlink: 108 bytes leftover after parsing attributes in process `syz.2.895'.
[  110.820519][ T9431] netlink: 108 bytes leftover after parsing attributes in process `syz.2.895'.
[  110.956056][ T9447] 8021q: adding VLAN 0 to HW filter on device bond18
[  110.962895][ T9450] xt_hashlimit: size too large, truncated to 1048576
[  110.972019][ T9447] 8021q: adding VLAN 0 to HW filter on device bond18
[  110.976439][ T9447] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[  110.980444][ T9447] bond18: (slave vxcan3): Error -95 calling set_mac_address
[  110.989487][ T9452] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  110.994202][ T9450] syz.2.901: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  110.999782][ T9450] CPU: 1 UID: 0 PID: 9450 Comm: syz.2.901 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  110.999794][ T9450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.999799][ T9450] Call Trace:
[  110.999802][ T9450]  <TASK>
[  110.999806][ T9450]  dump_stack_lvl+0x189/0x250
[  110.999822][ T9450]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.999831][ T9450]  ? __pfx__printk+0x10/0x10
[  110.999842][ T9450]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  110.999852][ T9450]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  110.999861][ T9450]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  110.999871][ T9450]  warn_alloc+0x214/0x310
[  110.999881][ T9450]  ? __pfx_warn_alloc+0x10/0x10
[  110.999890][ T9450]  ? __get_vm_area_node+0x28f/0x300
[  110.999901][ T9450]  ? htable_create+0xfc/0x7a0
[  110.999913][ T9450]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  110.999934][ T9450]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  110.999946][ T9450]  ? rcu_is_watching+0x15/0xb0
[  110.999956][ T9450]  ? htable_create+0xfc/0x7a0
[  110.999964][ T9450]  ? htable_create+0xfc/0x7a0
[  110.999971][ T9450]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  110.999982][ T9450]  ? htable_create+0xfc/0x7a0
[  110.999989][ T9450]  ? hashlimit_pernet+0x23/0x240
[  111.000000][ T9450]  htable_create+0xfc/0x7a0
[  111.000011][ T9450]  hashlimit_mt_check_common+0x719/0xa10
[  111.000023][ T9450]  hashlimit_mt_check_v1+0x221/0x360
[  111.000032][ T9450]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  111.000043][ T9450]  ? xt_find_match+0x1f7/0x250
[  111.000054][ T9450]  xt_check_match+0x3d1/0xab0
[  111.000061][ T9450]  ? __pfx___mutex_lock+0x10/0x10
[  111.000072][ T9450]  ? __pfx_xt_check_match+0x10/0x10
[  111.000080][ T9450]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  111.000094][ T9450]  ? xt_find_match+0x1f7/0x250
[  111.000105][ T9450]  translate_table+0x1553/0x2040
[  111.000122][ T9450]  ? __pfx_translate_table+0x10/0x10
[  111.000130][ T9450]  ? __might_fault+0xb0/0x130
[  111.000147][ T9450]  ? _copy_from_user+0x94/0xb0
[  111.000159][ T9450]  do_ip6t_set_ctl+0x970/0xce0
[  111.000170][ T9450]  ? rcu_is_watching+0x15/0xb0
[  111.000177][ T9450]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  111.000192][ T9450]  ? __pfx___mutex_lock+0x10/0x10
[  111.000199][ T9450]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  111.000214][ T9450]  ? __lock_acquire+0xab9/0xd20
[  111.000225][ T9450]  nf_setsockopt+0x26f/0x290
[  111.000236][ T9450]  rawv6_setsockopt+0x23b/0x5b0
[  111.000247][ T9450]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  111.000255][ T9450]  ? aa_sock_opt_perm+0x74/0x110
[  111.000264][ T9450]  ? sock_common_setsockopt+0x36/0xc0
[  111.000275][ T9450]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  111.000285][ T9450]  do_sock_setsockopt+0x17c/0x1b0
[  111.000295][ T9450]  __x64_sys_setsockopt+0x13f/0x1b0
[  111.000305][ T9450]  do_syscall_64+0xfa/0x3b0
[  111.000313][ T9450]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.000319][ T9450]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.000326][ T9450]  ? exc_page_fault+0x9f/0xf0
[  111.000333][ T9450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.000340][ T9450] RIP: 0033:0x7f0cff58e9a9
[  111.000347][ T9450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.000353][ T9450] RSP: 002b:00007f0d0036d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  111.000361][ T9450] RAX: ffffffffffffffda RBX: 00007f0cff7b5fa0 RCX: 00007f0cff58e9a9
[  111.000366][ T9450] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a
[  111.000370][ T9450] RBP: 00007f0cff610d69 R08: 00000000000004c0 R09: 0000000000000000
[  111.000374][ T9450] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  111.000378][ T9450] R13: 0000000000000000 R14: 00007f0cff7b5fa0 R15: 00007ffd8d51e438
[  111.000389][ T9450]  </TASK>
[  111.000392][ T9450] Mem-Info:
[  111.041095][ T9460] bond18: (slave bridge14): Enslaving as an active interface with a down link
[  111.062163][ T9450] active_anon:13757 inactive_anon:0 isolated_anon:0
[  111.062163][ T9450]  active_file:1056 inactive_file:38234 isolated_file:0
[  111.062163][ T9450]  unevictable:1768 dirty:50 writeback:0
[  111.062163][ T9450]  slab_reclaimable:10080 slab_unreclaimable:103923
[  111.062163][ T9450]  mapped:18175 shmem:2456 pagetables:1051
[  111.062163][ T9450]  sec_pagetables:0 bounce:0
[  111.062163][ T9450]  kernel_misc_reclaimable:0
[  111.062163][ T9450]  free:231782 free_pcp:25993 free_cma:0
[  111.142523][ T9450] Node 0 active_anon:28612kB inactive_anon:0kB active_file:3116kB inactive_file:45784kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36248kB dirty:184kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5572kB pagetables:2512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.153050][ T9450] Node 1 active_anon:26348kB inactive_anon:0kB active_file:1108kB inactive_file:107152kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36588kB dirty:16kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8028kB pagetables:1896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  111.163569][ T9450] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.172650][ T9450] lowmem_reserve[]: 0 812 812 812 812
[  111.175842][ T9450] Node 0 DMA32 free:308484kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28544kB inactive_anon:0kB active_file:3116kB inactive_file:45784kB unevictable:3536kB writepending:184kB present:1556484kB managed:831796kB mlocked:0kB bounce:0kB free_pcp:42900kB local_pcp:15076kB free_cma:0kB
[  111.187550][ T9450] lowmem_reserve[]: 0 0 0 0 0
[  111.189140][ T9450] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  111.199932][ T9450] lowmem_reserve[]: 0 0 854 854 854
[  111.202479][ T9450] Node 1 Normal free:143928kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26348kB inactive_anon:0kB active_file:1108kB inactive_file:107152kB unevictable:3536kB writepending:16kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:62036kB local_pcp:40772kB free_cma:0kB
[  111.210422][ T9468] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  111.221922][ T9450] lowmem_reserve[]: 0 0 0 0 0
[  111.234880][ T9458] validate_nla: 5 callbacks suppressed
[  111.234889][ T9458] netlink: 'syz.0.902': attribute type 10 has an invalid length.
[  111.239227][ T9458] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  111.243071][ T9450] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  111.247588][ T9450] Node 0 DMA32: 1033*4kB (UME) 322*8kB (UME) 147*16kB (UME) 524*32kB (UME) 135*64kB (UME) 26*128kB (UME) 17*256kB (UME) 6*512kB (UME) 6*1024kB (U) 7*2048kB (UME) 59*4096kB (UM) = 307364kB
[  111.255570][ T9450] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  111.271790][ T9450] Node 1 Normal: 1686*4kB (UME) 116*8kB (UM) 447*16kB (UME) 263*32kB (UME) 63*64kB (UM) 31*128kB (UM) 24*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 4*2048kB (UME) 23*4096kB (UM) = 152072kB
[  111.285647][ T9450] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.292802][ T9450] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.308893][ T9450] 41750 total pagecache pages
[  111.310980][ T9450] 0 pages in swap cache
[  111.312370][ T9450] Free swap  = 124996kB
[  111.324010][ T9450] Total swap = 124996kB
[  111.325424][ T9450] 786301 pages RAM
[  111.326691][ T9450] 0 pages HighMem/MovableOnly
[  111.328265][ T9450] 241104 pages reserved
[  111.329643][ T9450] 0 pages cma reserved
[  111.522108][ T9506] sctp: [Deprecated]: syz.2.910 (pid 9506) Use of int in max_burst socket option.
[  111.522108][ T9506] Use struct sctp_assoc_value instead
[  111.831119][ T9538] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.975949][ T9561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  112.042181][ T9574] veth0: entered allmulticast mode
[  112.130875][ T9583] ipt_ECN: cannot use operation on non-tcp rule
[  112.155581][ T5829] Bluetooth: hci2: link tx timeout
[  112.157853][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  112.160965][   T54] Bluetooth: hci2: link tx timeout
[  112.162785][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  112.342416][ T9598] netlink: 'syz.2.930': attribute type 10 has an invalid length.
[  112.476714][ T9604] netlink: 'syz.1.933': attribute type 10 has an invalid length.
[  112.489848][ T9604] vat: left promiscuous mode
[  112.495418][ T9604] vat: entered promiscuous mode
[  112.503183][ T9604] team0: Device vat failed to register rx_handler
[  112.645175][ T9621] netlink: 'syz.1.937': attribute type 2 has an invalid length.
[  112.650042][ T9620] netlink: 'syz.1.937': attribute type 39 has an invalid length.
[  112.812023][ T9633] netlink: 'syz.1.940': attribute type 10 has an invalid length.
[  112.930491][ T9638] tipc: Resetting bearer <eth:syzkaller0>
[  113.057061][ T9645] bond0: (slave wlan1): Releasing backup interface
[  113.059703][ T9645] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  113.063104][ T9645] team0: Port device bond13 removed
[  113.067648][ T9645] team0: Port device bond14 removed
[  113.070999][ T9645] bond19: (slave wireguard0): Releasing backup interface
[  113.075036][ T9645] team0: Port device bridge4 removed
[  113.077554][ T9645] bond21: (slave geneve3): Releasing active interface
[  113.081177][ T9645] bond23: (slave bridge5): Releasing backup interface
[  113.830466][ T9674] ipt_ECN: cannot use operation on non-tcp rule
[  113.877285][ T9677] vxcan0: entered allmulticast mode
[  113.881364][ T9677] vxcan1: entered allmulticast mode
[  114.024088][ T9680] netlink: 'syz.0.954': attribute type 1 has an invalid length.
[  114.086192][ T9696] netlink: 'syz.0.957': attribute type 1 has an invalid length.
[  114.184450][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  114.200109][ T9702] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.205813][ T9702] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  114.209107][ T9702] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  114.259877][ T9711] vlan7: entered promiscuous mode
[  114.261557][ T9711] bond0: entered promiscuous mode
[  114.584961][ T9732] team0 (unregistering): Port device geneve0 removed
[  114.696301][ T9753] 8021q: adding VLAN 0 to HW filter on device bond19
[  114.702882][ T9753] macvlan4: entered promiscuous mode
[  114.706230][ T9753] macvlan4: entered allmulticast mode
[  114.770541][ T9764] 8021q: adding VLAN 0 to HW filter on device batadv1
[  114.773618][ T9764] team0: Failed to send options change via netlink (err -105)
[  114.778904][ T9764] team0: Port device batadv1 added
[  114.920826][ T9778] netlink: 'syz.2.975': attribute type 7 has an invalid length.
[  114.939187][ T9778] netlink: 'syz.2.975': attribute type 7 has an invalid length.
[  115.146547][ T9792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.157579][ T9792] syzkaller0: entered promiscuous mode
[  115.162833][ T9792] syzkaller0: entered allmulticast mode
[  115.182801][ T9792] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  115.198810][ T9792] tipc: Resetting bearer <eth:syzkaller0>
[  115.214508][ T9797] tipc: Resetting bearer <eth:syzkaller0>
[  115.224476][ T9797] tipc: Disabling bearer <eth:syzkaller0>
[  115.296621][ T9804] bond21: (slave bridge15): Enslaving as a backup interface with an up link
[  115.389178][ T9813] gretap0: left promiscuous mode
[  115.406281][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.411195][ T9813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.421182][ T5657] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  115.485375][ T9820] __nla_validate_parse: 75 callbacks suppressed
[  115.485385][ T9820] netlink: 52 bytes leftover after parsing attributes in process `syz.0.983'.
[  115.495634][ T9817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.982'.
[  115.502131][ T9820] ip6gretap0: entered allmulticast mode
[  115.906086][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'.
[  115.909112][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'.
[  115.921786][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'.
[  115.925937][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'.
[  115.932587][ T9860] vlan2: entered allmulticast mode
[  115.935080][ T9860] bond25: entered allmulticast mode
[  115.950353][ T9861] vlan2: entered allmulticast mode
[  116.114190][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'.
[  116.125032][ T9871] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  116.145818][ T9813] syz.1.982 (9813) used greatest stack depth: 19904 bytes left
[  116.169527][ T9873] netlink: 248 bytes leftover after parsing attributes in process `syz.2.993'.
[  116.189561][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'.
[  116.192508][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'.
[  116.256355][ T9881] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20002
[  116.259425][ T9881] bridge0: entered promiscuous mode
[  116.263468][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  116.339829][ T9884] validate_nla: 4 callbacks suppressed
[  116.339838][ T9884] netlink: 'syz.2.996': attribute type 2 has an invalid length.
[  116.359320][ T9884] : entered promiscuous mode
[  116.422301][ T9896] netlink: 'syz.0.998': attribute type 16 has an invalid length.
[  116.547596][ T9904] sctp: [Deprecated]: syz.0.999 (pid 9904) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.547596][ T9904] Use struct sctp_sack_info instead
[  116.567312][ T9889] xt_time: invalid argument - start or stop time greater than 23:59:59
[  116.819341][ T9927] netlink: 'syz.0.1002': attribute type 1 has an invalid length.
[  116.842289][ T9927] 8021q: adding VLAN 0 to HW filter on device bond25
[  116.996686][ T9945] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  117.056177][ T9951] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  117.148193][ T9964] bond26: entered promiscuous mode
[  117.150021][ T9964] 8021q: adding VLAN 0 to HW filter on device bond26
[  117.186778][ T9972] netlink: 'syz.0.1014': attribute type 1 has an invalid length.
[  117.237023][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.239648][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.246323][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.248949][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.278544][ T9981] sctp: [Deprecated]: syz.0.1017 (pid 9981) Use of int in max_burst socket option deprecated.
[  117.278544][ T9981] Use struct sctp_assoc_value instead
[  117.349288][ T9988] netlink: 'syz.2.1016': attribute type 13 has an invalid length.
[  117.592644][ T9994] x_tables: duplicate underflow at hook 1
[  117.595055][ T9994] netlink: 'syz.0.1019': attribute type 13 has an invalid length.
[  119.303754][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  120.392677][ T9994] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  120.436715][T10001] netlink: 'syz.2.1020': attribute type 2 has an invalid length.
[  120.542804][T10009] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  120.673184][T10012] netlink: 'syz.0.1025': attribute type 16 has an invalid length.
[  120.676633][T10012] netlink: 'syz.0.1025': attribute type 17 has an invalid length.
[  120.734043][T10011] __nla_validate_parse: 14 callbacks suppressed
[  120.734055][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'.
[  120.739279][T10013] veth0: entered promiscuous mode
[  120.741099][ T5657] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.747036][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'.
[  120.750196][ T5657] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.752926][ T5657] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.804999][T10013] veth0 (unregistering): left promiscuous mode
[  120.836786][ T5657] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.397638][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'.
[  121.401427][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'.
[  121.405542][T10030] netlink: 'syz.2.1028': attribute type 5 has an invalid length.
[  121.408027][T10030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1028'.
[  121.415890][T10030] geneve4: entered promiscuous mode
[  121.417633][T10030] geneve4: entered allmulticast mode
[  121.419977][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  121.422743][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  121.431733][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  121.436472][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  121.452333][T10035] netlink: 'syz.2.1029': attribute type 4 has an invalid length.
[  121.456671][T10034] netlink: 'syz.2.1029': attribute type 4 has an invalid length.
[  121.459861][T10034] netlink: 'syz.2.1029': attribute type 4 has an invalid length.
[  121.492321][T10037] netlink: 'syz.2.1030': attribute type 1 has an invalid length.
[  121.520776][T10037] veth1: entered promiscuous mode
[  121.524987][T10037] bond27: (slave veth1): Enslaving as a backup interface with a down link
[  121.530622][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1030'.
[  121.536112][T10037] 8021q: adding VLAN 0 to HW filter on device bond27
[  121.560453][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'.
[  121.779559][T10049] macsec2: entered promiscuous mode
[  121.781424][T10049] macsec2: entered allmulticast mode
[  121.958779][T10060] macvlan0: entered promiscuous mode
[  121.960518][T10060] macvlan0: entered allmulticast mode
[  122.084854][T10070] netlink: 'syz.0.1039': attribute type 1 has an invalid length.
[  122.107823][T10070] 8021q: adding VLAN 0 to HW filter on device bond27
[  122.119605][T10070] bond27: (slave ip6gretap3): making interface the new active one
[  122.125560][T10070] bond27: (slave ip6gretap3): Enslaving as an active interface with an up link
[  122.146488][T10070] veth7: entered promiscuous mode
[  122.149916][T10070] bond27: (slave veth7): Enslaving as an active interface with a down link
[  122.159257][T10070] erspan0: entered allmulticast mode
[  122.166825][T10070] bond27: (slave erspan0): Enslaving as an active interface with an up link
[  122.675470][T10114] smc: net device bond0 applied user defined pnetid SYZ2
[  123.112945][T10118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1052'.
[  123.151845][T10122] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.179387][T10124] netlink: 'syz.2.1054': attribute type 1 has an invalid length.
[  123.193414][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1054'.
[  123.196595][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'.
[  123.452079][T10161] netlink: 'syz.2.1061': attribute type 1 has an invalid length.
[  123.504917][T10164] netlink: 'syz.0.1062': attribute type 7 has an invalid length.
[  123.507420][T10164] netlink: 'syz.0.1062': attribute type 8 has an invalid length.
[  123.530277][T10161] tipc: Disabling bearer <eth:team0>
[  123.537177][T10161] team0 (unregistering): Port device batadv1 removed
[  123.725003][T10181] netlink: 'syz.0.1066': attribute type 11 has an invalid length.
[  123.785236][T10186] atomic_op ffff8881287bb998 conn xmit_atomic 0000000000000000
[  124.021751][T10194] erspan0: left allmulticast mode
[  124.058813][T10194] ip6gretap0: left allmulticast mode
[  124.070403][T10194] 8021q: adding VLAN 0 to HW filter on device team0
[  124.090140][T10194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.166903][T10205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.170460][T10205] syzkaller0: entered promiscuous mode
[  124.172250][T10205] syzkaller0: entered allmulticast mode
[  124.208073][T10205] tipc: Resetting bearer <eth:syzkaller0>
[  124.217926][T10204] tipc: Resetting bearer <eth:syzkaller0>
[  124.229589][T10204] tipc: Disabling bearer <eth:syzkaller0>
[  124.520534][T10229] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.525074][T10229] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  124.556532][T10229] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.560094][T10229] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  124.582991][T10230] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.585731][T10230] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  124.607515][T10229] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.610952][T10229] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  124.657063][T10229] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.660310][T10229] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  124.935042][ T6221] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.938049][ T6221] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  124.941290][ T6221] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.944156][ T6221] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  124.957001][ T6221] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.960011][ T6221] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  124.971405][ T6221] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.974787][ T6221] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  125.481305][T10249] 8021q: adding VLAN 0 to HW filter on device bond29
[  125.490755][T10249] vxcan5: entered allmulticast mode
[  125.493576][    C0] Illegal XDP return value 16128 on prog  (id 402) dev lo, expect packet loss!
[  125.502021][T10249] 8021q: adding VLAN 0 to HW filter on device bond29
[  125.504557][T10249] bond29: (slave vxcan5): The slave device specified does not support setting the MAC address
[  125.508771][T10249] bond29: (slave vxcan5): Error -95 calling set_mac_address
[  125.771340][T10267] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  125.859964][T10273] pim6reg: entered allmulticast mode
[  125.865565][T10273] pim6reg: left allmulticast mode
[  125.938550][T10279] macsec0: entered promiscuous mode
[  125.940837][T10279] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  125.943526][T10279] macsec0: left promiscuous mode
[  125.945257][T10279] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  125.974759][T10282] veth0: entered allmulticast mode
[  125.980477][T10284] __nla_validate_parse: 19 callbacks suppressed
[  125.980487][T10284] netlink: 4208 bytes leftover after parsing attributes in process `syz.2.1086'.
[  126.108971][T10301] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.155034][T10307] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1094'.
[  126.158813][T10307] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  126.507066][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'.
[  126.553123][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1102'.
[  126.562134][T10343] validate_nla: 8 callbacks suppressed
[  126.562144][T10343] netlink: 'syz.0.1102': attribute type 10 has an invalid length.
[  126.568528][T10343] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  126.580304][T10343] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  126.595399][T10343] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  126.602984][T10343] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  126.607602][T10343] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  126.619100][T10348] netlink: 'syz.1.1103': attribute type 1 has an invalid length.
[  126.652115][T10348] 8021q: adding VLAN 0 to HW filter on device bond22
[  126.671939][T10348] 8021q: adding VLAN 0 to HW filter on device bond22
[  126.676169][T10348] bond22: (slave vxcan3): The slave device specified does not support setting the MAC address
[  126.681987][T10348] bond22: (slave vxcan3): Error -95 calling set_mac_address
[  126.712693][T10355] macvlan5: entered promiscuous mode
[  126.718092][T10355] macvlan5: entered allmulticast mode
[  126.720223][T10355] bond22: entered promiscuous mode
[  126.722781][T10355] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  126.728160][T10355] bond22: left promiscuous mode
[  126.954280][T10378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1105'.
[  127.074364][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'.
[  127.215841][T10395] netlink: 'syz.2.1107': attribute type 4 has an invalid length.
[  127.253717][T10398] syzkaller0: mtu less than device minimum
[  127.523126][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'.
[  127.537434][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'.
[  127.540487][T10422] netlink: 'syz.0.1113': attribute type 2 has an invalid length.
[  127.543030][T10422] netlink: 'syz.0.1113': attribute type 1 has an invalid length.
[  127.550885][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'.
[  127.562908][T10428] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.628830][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1118'.
[  127.721370][T10441] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  127.735926][T10443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.739247][T10443] syzkaller0: entered promiscuous mode
[  127.741293][T10443] syzkaller0: entered allmulticast mode
[  127.764138][T10445] tipc: Resetting bearer <eth:syzkaller0>
[  127.778021][T10445] tipc: Disabling bearer <eth:syzkaller0>
[  127.783881][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  127.800072][T10455] netlink: 'syz.1.1123': attribute type 1 has an invalid length.
[  127.824519][T10458] bond23: entered promiscuous mode
[  127.827619][T10458] bond23: entered allmulticast mode
[  127.830449][T10458] 8021q: adding VLAN 0 to HW filter on device bond23
[  127.878317][T10473] x_tables: unsorted underflow at hook 3
[  128.079343][T10505] netlink: 'syz.1.1134': attribute type 12 has an invalid length.
[  128.156601][T10508] smc: net device bond0 applied user defined pnetid SYZ2
[  128.170427][T10508] smc: removing net device bond0 with user defined pnetid SYZ2
[  128.173443][T10508] bond0 (unregistering): Released all slaves
[  128.281008][T10512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.490581][T10526] xfrm0: entered promiscuous mode
[  128.492272][T10526] xfrm0: entered allmulticast mode
[  128.548831][T10531] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  128.554155][T10533] xt_l2tp: v2 sid > 0xffff: 4294901760
[  128.612222][T10535] netlink: 'syz.1.1143': attribute type 7 has an invalid length.
[  128.616128][T10535] netlink: 'syz.1.1143': attribute type 8 has an invalid length.
[  128.632296][T10535] gretap0: entered promiscuous mode
[  128.636979][T10535] batadv_slave_1: entered promiscuous mode
[  128.640204][T10535] erspan0: entered promiscuous mode
[  128.643008][T10535] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  128.649520][T10535] Cannot create hsr debugfs directory
[  128.651905][T10535] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.783746][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.786820][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.799934][T10548] set match dimension is over the limit!
[  128.824178][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  128.904973][T10558] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.908156][T10558] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  128.928130][T10558] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.934417][T10558] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  128.997737][T10558] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.001051][T10558] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  129.015197][T10568] tap0: tun_chr_ioctl cmd 1074025677
[  129.017064][T10568] tap0: linktype set to 769
[  129.046701][T10558] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.050377][T10558] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  129.106438][ T6995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.109079][ T6995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.128420][ T5874] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.132106][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  129.143605][ T6221] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.146255][ T6221] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  129.154981][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.157721][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  129.168410][ T6221] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.171105][ T6221] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  129.245981][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  129.313544][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  129.525871][T10584] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  129.528528][T10584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.595532][T10585] tap0: tun_chr_ioctl cmd 1074025677
[  129.597970][T10585] tap0: linktype set to 769
[  129.754258][T10595] syzkaller0: create flow: hash 1944689816 index 1
[  129.767551][ T6221] syzkaller0: tun_net_xmit 76
[  129.769410][ T6221] syzkaller0: tun_net_xmit 48
[  129.793730][   T47] syzkaller0: tun_net_xmit 76
[  129.803806][T10595] syzkaller0: delete flow: hash 1944689816 index 1
[  129.932608][T10604] netlink: 'syz.1.1158': attribute type 13 has an invalid length.
[  130.688864][T10614] set match dimension is over the limit!
[  130.963019][T10646] bond13: (slave veth7): Releasing active interface
[  130.966965][T10646] bond15: (slave ip6gretap1): Removing an active aggregator
[  130.969770][T10646] bond15: (slave ip6gretap1): Releasing backup interface
[  130.974135][T10646] bond18: (slave bridge14): Releasing active interface
[  130.979175][T10646] bond21: (slave bridge15): Releasing backup interface
[  130.984857][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  130.997681][T10646] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.003315][T10646] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  131.054721][T10652] __nla_validate_parse: 14 callbacks suppressed
[  131.054730][T10652] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1172'.
[  131.133419][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  131.652401][T10655] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1173'.
[  131.655636][T10655] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1173'.
[  131.690416][T10657] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  131.698729][T10657] bond27: (slave erspan0): Releasing active interface
[  131.701028][T10657] ip6gretap3: entered promiscuous mode
[  131.708116][T10657] team0: Port device 0! removed
[  131.711515][T10657] team0: Port device geneve0 removed
[  131.715561][T10657] bond0: (slave wlan1): Releasing backup interface
[  131.718371][T10657] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  131.721433][T10657] bond4: (slave gretap1): Releasing active interface
[  131.726133][T10657] bond5: (slave ip6gretap1): Removing an active aggregator
[  131.729031][T10657] bond5: (slave ip6gretap1): Releasing backup interface
[  131.732802][T10657] team0: Port device bond8 removed
[  131.735818][T10657] bond9: (slave veth3): Releasing active interface
[  131.739505][T10657] team0: Port device batadv1 removed
[  131.742001][T10657] bond15: (slave bridge2): Releasing active interface
[  131.744437][T10657] bond15: (slave bridge2): the permanent HWaddr of slave - b2:ef:7a:34:1e:e8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  131.750042][T10657] bond15: (slave gretap2): making interface the new active one
[  131.754838][T10657] bond15: (slave gretap2): Releasing active interface
[  131.758699][T10657] team0: Port device bond22 removed
[  131.761978][T10657] bond27: (slave ip6gretap3): Releasing active interface
[  131.764450][T10657] bond27: (slave ip6gretap3): the permanent HWaddr of slave - 86:57:03:14:cb:51 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  131.770056][T10657] ip6gretap3: left promiscuous mode
[  131.775010][T10657] bond27: (slave veth7): Releasing active interface
[  131.785882][T10657] validate_nla: 1 callbacks suppressed
[  131.785900][T10657] netlink: 'syz.0.1174': attribute type 10 has an invalid length.
[  131.790300][T10657] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  131.802766][T10657] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  131.805591][T10657] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  131.812998][T10657] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.816403][T10657] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  131.905985][T10663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1176'.
[  132.237195][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'.
[  132.242252][T10686] xt_bpf: check failed: parse error
[  132.386367][T10696] netlink: 'syz.2.1186': attribute type 1 has an invalid length.
[  132.413577][T10696] bond31: entered promiscuous mode
[  132.415486][T10696] bond31: entered allmulticast mode
[  132.417702][T10696] 8021q: adding VLAN 0 to HW filter on device bond31
[  132.432527][T10696] bridge7: entered promiscuous mode
[  132.434547][T10696] bridge7: entered allmulticast mode
[  132.436678][T10696] bond31: (slave bridge7): Enslaving as a backup interface with an up link
[  132.442241][T10696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1186'.
[  132.533812][ T6221] bond31: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  132.568736][ T5874] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.572956][ T5874] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  132.583434][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  132.586691][ T5874] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.589619][ T5874] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  132.592763][ T5874] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.602855][ T5874] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  132.618110][ T5874] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.631822][ T5874] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  132.702117][T10720] netlink: 'syz.0.1189': attribute type 4 has an invalid length.
[  132.734353][T10720] netlink: 'syz.0.1189': attribute type 1 has an invalid length.
[  132.754706][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'.
[  132.912364][T10746] 
[  132.913386][T10746] ======================================================
[  132.916201][T10746] WARNING: possible circular locking dependency detected
[  132.919085][T10746] 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 Not tainted
[  132.922914][T10746] ------------------------------------------------------
[  132.925557][T10746] syz.2.1194/10746 is trying to acquire lock:
[  132.928013][T10746] ffffffff8f677cf8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  132.931711][T10746] 
[  132.931711][T10746] but task is already holding lock:
[  132.934655][T10746] ffff8881279a0370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  132.938222][T10746] 
[  132.938222][T10746] which lock already depends on the new lock.
[  132.938222][T10746] 
[  132.942238][T10746] 
[  132.942238][T10746] the existing dependency chain (in reverse order) is:
[  132.945387][T10746] 
[  132.945387][T10746] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  132.948053][T10746]        lock_acquire+0x120/0x360
[  132.949773][T10746]        _raw_spin_lock_bh+0x36/0x50
[  132.951652][T10746]        nr_rt_ioctl+0x193/0xd50
[  132.953431][T10746]        sock_do_ioctl+0xdc/0x300
[  132.955124][T10746]        sock_ioctl+0x576/0x790
[  132.956924][T10746]        __se_sys_ioctl+0xfc/0x170
[  132.958983][T10746]        do_syscall_64+0xfa/0x3b0
[  132.961059][T10746]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.963436][T10746] 
[  132.963436][T10746] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  132.966083][T10746]        lock_acquire+0x120/0x360
[  132.968048][T10746]        _raw_spin_lock_bh+0x36/0x50
[  132.970221][T10746]        nr_rt_device_down+0xa9/0x720
[  132.971969][T10746]        nr_device_event+0x137/0x150
[  132.974065][T10746]        notifier_call_chain+0x1b6/0x3e0
[  132.976378][T10746]        __dev_notify_flags+0x18d/0x2e0
[  132.978670][T10746]        netif_change_flags+0xe8/0x1a0
[  132.980922][T10746]        dev_change_flags+0x130/0x260
[  132.982977][T10746]        dev_ioctl+0x7b4/0x1150
[  132.984612][T10746]        sock_do_ioctl+0x22c/0x300
[  132.986299][T10746]        sock_ioctl+0x576/0x790
[  132.987932][T10746]        __se_sys_ioctl+0xfc/0x170
[  132.989632][T10746]        do_syscall_64+0xfa/0x3b0
[  132.991305][T10746]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.993407][T10746] 
[  132.993407][T10746] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  132.996363][T10746]        validate_chain+0xb9b/0x2140
[  132.998250][T10746]        __lock_acquire+0xab9/0xd20
[  132.999989][T10746]        lock_acquire+0x120/0x360
[  133.001687][T10746]        _raw_spin_lock_bh+0x36/0x50
[  133.003452][T10746]        nr_rt_ioctl+0x390/0xd50
[  133.005248][T10746]        sock_do_ioctl+0xdc/0x300
[  133.006909][T10746]        sock_ioctl+0x576/0x790
[  133.008665][T10746]        __se_sys_ioctl+0xfc/0x170
[  133.010375][T10746]        do_syscall_64+0xfa/0x3b0
[  133.012068][T10746]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.014224][T10746] 
[  133.014224][T10746] other info that might help us debug this:
[  133.014224][T10746] 
[  133.017557][T10746] Chain exists of:
[  133.017557][T10746]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  133.017557][T10746] 
[  133.022314][T10746]  Possible unsafe locking scenario:
[  133.022314][T10746] 
[  133.024959][T10746]        CPU0                    CPU1
[  133.026752][T10746]        ----                    ----
[  133.028555][T10746]   lock(&nr_node->node_lock);
[  133.030169][T10746]                                lock(nr_node_list_lock);
[  133.032618][T10746]                                lock(&nr_node->node_lock);
[  133.034988][T10746]   lock(nr_neigh_list_lock);
[  133.036623][T10746] 
[  133.036623][T10746]  *** DEADLOCK ***
[  133.036623][T10746] 
[  133.039326][T10746] 2 locks held by syz.2.1194/10746:
[  133.041036][T10746]  #0: ffffffff8f677d58 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  133.044121][T10746]  #1: ffff8881279a0370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  133.047300][T10746] 
[  133.047300][T10746] stack backtrace:
[  133.049267][T10746] CPU: 0 UID: 0 PID: 10746 Comm: syz.2.1194 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  133.049279][T10746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.049284][T10746] Call Trace:
[  133.049288][T10746]  <TASK>
[  133.049293][T10746]  dump_stack_lvl+0x189/0x250
[  133.049305][T10746]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.049313][T10746]  ? __pfx__printk+0x10/0x10
[  133.049323][T10746]  ? stack_trace_save+0x9c/0xe0
[  133.049335][T10746]  print_circular_bug+0x2ee/0x310
[  133.049346][T10746]  check_noncircular+0x134/0x160
[  133.049356][T10746]  validate_chain+0xb9b/0x2140
[  133.049370][T10746]  __lock_acquire+0xab9/0xd20
[  133.049378][T10746]  ? nr_rt_ioctl+0x390/0xd50
[  133.049388][T10746]  lock_acquire+0x120/0x360
[  133.049395][T10746]  ? nr_rt_ioctl+0x390/0xd50
[  133.049405][T10746]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  133.049414][T10746]  ? nr_rt_ioctl+0x390/0xd50
[  133.049423][T10746]  _raw_spin_lock_bh+0x36/0x50
[  133.049433][T10746]  ? nr_rt_ioctl+0x390/0xd50
[  133.049443][T10746]  nr_rt_ioctl+0x390/0xd50
[  133.049453][T10746]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  133.049463][T10746]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  133.049473][T10746]  ? apparmor_capable+0x137/0x1b0
[  133.049483][T10746]  ? capable+0x89/0xe0
[  133.049491][T10746]  ? nr_ioctl+0x1b1/0x3b0
[  133.049499][T10746]  sock_do_ioctl+0xdc/0x300
[  133.049509][T10746]  ? __pfx_sock_do_ioctl+0x10/0x10
[  133.049517][T10746]  ? __lock_acquire+0xab9/0xd20
[  133.049525][T10746]  sock_ioctl+0x576/0x790
[  133.049535][T10746]  ? __pfx_sock_ioctl+0x10/0x10
[  133.049544][T10746]  ? __fget_files+0x2a/0x420
[  133.049549][T10746]  ? __fget_files+0x3a0/0x420
[  133.049554][T10746]  ? __fget_files+0x2a/0x420
[  133.049560][T10746]  ? bpf_lsm_file_ioctl+0x9/0x20
[  133.049568][T10746]  ? __pfx_sock_ioctl+0x10/0x10
[  133.049576][T10746]  __se_sys_ioctl+0xfc/0x170
[  133.049584][T10746]  do_syscall_64+0xfa/0x3b0
[  133.049614][T10746]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.049623][T10746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.049630][T10746]  ? exc_page_fault+0x9f/0xf0
[  133.049637][T10746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.049645][T10746] RIP: 0033:0x7f0cff58e9a9
[  133.049653][T10746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  133.049659][T10746] RSP: 002b:00007f0d0036d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  133.049667][T10746] RAX: ffffffffffffffda RBX: 00007f0cff7b5fa0 RCX: 00007f0cff58e9a9
[  133.049673][T10746] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008
[  133.049678][T10746] RBP: 00007f0cff610d69 R08: 0000000000000000 R09: 0000000000000000
[  133.049683][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  133.049688][T10746] R13: 0000000000000000 R14: 00007f0cff7b5fa0 R15: 00007ffd8d51e438
[  133.049695][T10746]  </TASK>
[  139.943398][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!

VM DIAGNOSIS:
15:22:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001143 RDI=0000000000001144 RBP=00000000000003f8 RSP=ffffc9000302f150
R8 =ffff8881083a0237 R9 =1ffff11021074046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99aff8b4 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0d0036d6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000c2c0 CR3=000000010aafa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0cff786478 00007f0cff786450 XMM03=00007f0cff786488 00007f0cff786480
XMM04=00007f0d002ed100 00007f0cff786440 XMM05=00007f0cff786458 00007f0cff7864a0
XMM06=00007f0cff786498 00007f0cff786490 XMM07=00007f0cff786488 00007f0cff786480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f0cff611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff820a0d14 RBX=ffff8881148c5a00 RCX=0000000000000001 RDX=00000000127e6025
RSI=ffff88810abf0b60 RDI=ffff8881148c5a00 RBP=00000000127e6025 RSP=ffffc9000316f940
R8 =ffffea000049f987 R9 =1ffffd4000093f30 R10=dffffc0000000000 R11=fffff94000093f31
R12=ffff88810bfd9390 R13=dffffc0000000000 R14=ffff88810abf0b60 R15=0000000000000001
RIP=ffffffff822d5ea2 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557dd31500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f91087628d0 CR3=0000000116462000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007ffdc62367c0 0000003000000018
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f9108811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
