last executing test programs:

9.539053824s ago: executing program 1 (id=4095):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto(r2, 0x0, 0x0, 0x4004, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x58, 0x5, "acbabdccfd12dfda2d08f9ac237de1e496f254c9b2bd7d103a5d7b2a73cfb5462a02412f676e5718836b7a2b228fe925c4a61d1c8d326f25091762c7233fcd", 0x35}, 0x80)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, 0x0, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000000c0), 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

9.279485163s ago: executing program 1 (id=4101):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$unix(r2, &(0x7f00000020c0)=[{{&(0x7f00000050c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000001701000002"], 0x28, 0x2000c000}}], 0x2, 0x88)
r3 = accept(0xffffffffffffffff, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private}, &(0x7f00000001c0)=0x80)
getsockopt$MRT6(r3, 0x29, 0xcf, &(0x7f0000000200), &(0x7f0000000240)=0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000280)=@buf)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

9.089451995s ago: executing program 1 (id=4105):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000003c0)={0x2, 0xf0, "82d3f91a79ec8c2d86d81515b590746c16dcd105a738e4a1afe7b6cdd46e4945dd530b0b7c1d63d672ea4515e5cd29ab307803f7fb6bec691c0284d8960e74b4d9b4a077496b459119d5d54c609843af5619ee6f9cfc68ffaa1cefa760c82a637762f7d3cf9d892f3ea179845ad0585cb94db36449b813b23449102d000e6658db7ac7d4e4c5f6ef9a2acde793eeb6b5ea406b11e7b0913601d6e9a408bcff0ce09fbcf0e1e00b5295ea0f812c6a8f3fd4927be7e12281890ad3778901d411d03c98d0c88370d1f068d6d63a659289986fe4cfcabf50d2d260ae048c95279b46371d8e1c25d3b1591cb8fd2dea68514b"}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYRESDEC=r2], 0x24}}, 0x0)

8.997902896s ago: executing program 1 (id=4108):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000c0000000000000071121300000000009500000000000000", @ANYBLOB="7e1a8f62b2fbef98fbd60e8a984506a528edc2525710e2137de4bf373b92fc7cd1d6b876119628b5fd9b68b16ceb6594fb46005bc95e0ca9bd59d8224b0f6d8482c9e865eb65e6dd693edab3a2c6c89afde847f0a223b943b3ead32a3030cb4ccab4fca4216ac6", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

8.930841942s ago: executing program 1 (id=4109):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b99cdfe10723f0f0c10400000000", 0x0, 0x800064fd, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
sendmsg$nl_netfilter(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000015c0)={0x14, 0xf, 0xa, 0x101, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800)

8.07054711s ago: executing program 1 (id=4113):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000000)=0x1000, 0x4) (async)
getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000080))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000940)=ANY=[@ANYBLOB="1416c80073b5e06c5633732659e5b4ac06f25846312c6fb3a4d921e7ef9f2d52a7b85facc4f1d8f6758e5790be48e348149642dfd13297e72c6cb51aea8dc27c69039d9e9d66ead52c1bcea7afddebaacde015ae867161d1575c2bacfb967708000000cddfb2834062cc941b40b1f08f30f94244fe48576376b4987c749871400b23fd3c7c253c8f4d01040000f7379ba83223ee015408f9b2bdc36edde331e4e548fdefdfbedab688f3be783d9cab920af0ab0c794a3acd6f9e902acb5a82966c33aef826622064af591c3fea0cf0ebfd8fe4a6987dc312c108e9fe048155731184dca54c6b1b41687e12e5b94468ec4ee91de4aa4563af713e79a636bbb19b55912136cf0ee92611811c0b9dae4a", @ANYRES64, @ANYBLOB="010025bd7000fddbdf2521000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', <r5=>0x0}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="653812c269d80c4aa7f4fed00100000000000000b6c0936d680205d5f5d39824c6afe005e288bc5c1d17967e643933182f3ca4200f0be1a678ababc29578739092b93db56f56c5be", @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2517000000440006803c00040067636d28616573290000000000000000000000000000000000000000000000001400000096557917d5d82cebae9347436de1ace2fe62c07904000300"], 0x58}}, 0x4004) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) (async)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async)
sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
sendmsg$tipc(r12, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x2}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000640)="699f00000000", 0x6}, {0x0}], 0x2, 0x0, 0x0, 0xc0090}, 0x20000040) (async)
setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)

1.299458043s ago: executing program 2 (id=4191):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54100000", @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000010a010200000000000000000200000060bd6ebd789176abeb09f32f5707da800e95ace79f8ecd8a78e71e2ff5d570241656883442c18a2c1b289d17b7b872b1faad759b8135aca4780061003532f1896a48c9064992e385469307205aa9394539fd778dbdac87f6bfae04fd24562343b0e0287f0374e7dc9800d7e84f7ee94b414d1c87a26a6e3ef44a16106a275c1b096ca11fcffb4ec959c1768d1c334fbb6bb95e8d10a3da2a64c880e3157e50a76678fd02a06670549060c5dd1e59fe52471f3c153ce611d8b3f201d09ea1cfffa9e182616a2dc7f62ad994f6c97fcf41d5e235c5b87f335eac3ac7f12004ec834205f8fb32e2ebb6570cfd7aee5f8eeb900c42c552348b970e9b00ea503d31a0cd4d7a53eb1f6439cf89bb12f02e2c4947e2c99ea262b150a3390688a4f01dc31524d394eaa200291ffa04cb7e9c657a8227c1d14bc7d115456f04711eba66261491105c065fbb9b91734e330bf1d611cd66ac0d90dade346989103fb2fdb20a5469929eecd45476c74d27468021641aa1fd3706b8e0988f3d8ebc3b97d8a0bccb6991da48849201768a177703ef493a5c75bdfb56a5b03d4929ce801dce18f6faed3f7b421590334432a4e5d1c81424a9a5e661edc2f6f0a5c26ce5e7b279220c80f2fdec206b9b330604"], 0x14}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@local, r1}, 0x14)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000090000000800"/20, @ANYRES32, @ANYBLOB="000000758e0eb86788ead720950000d7aef5bf929a910002000989000000000000d6748886e735262730962e228f5ed2597e647c87", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, r6}, 0x14)
syz_emit_ethernet(0x2e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000200000100000119078000000000000000000004e20000cffffff7f0001"], 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0)
getsockopt(r5, 0x518, 0xfffffff8, &(0x7f0000000500)=""/149, &(0x7f0000000080)=0x95)

1.160383031s ago: executing program 2 (id=4192):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000500000000000000010000000900010073"], 0xa4}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x34}, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts]}}}}}}}, 0x0) (async)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x481824ec, 0x4) (async)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0x9, 0x8000, 0x9, 0x8001}, 0x10) (async)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

1.090087667s ago: executing program 2 (id=4193):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, {&(0x7f0000000000)=""/237, 0xed}, &(0x7f0000000100)}, 0xa0) (async)
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req={0x4, 0x1ff, 0xe, 0x2}, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x1, @default, @rose={'rose', 0x0}, 0x5, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r2) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)={0x6, [<r4=>0x0, <r5=>0x0, 0x0, <r6=>0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x1c)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r5, 0x7fff}, &(0x7f0000000400)=0x8)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8)
write$tun(r7, &(0x7f0000000480)={@val={0x0, 0x809b}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@val={0x88a8, 0x5, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "4f52e894a8355c48"}}}}}, 0x2a)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000004c0)={r4, 0x80, 0x30, 0x10, 0x8}, &(0x7f0000000500)=0x18)
socketpair(0x2, 0x5, 0x1, &(0x7f0000000540)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000580)={r6, 0x5, 0x8}, 0x8) (async)
accept4$phonet_pipe(r9, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80800) (async)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x7) (async)
write$tun(r7, &(0x7f0000000640)={@val={0x0, 0x8906}, @val={0x0, 0x0, 0x0, 0x8, 0x8, 0x6}, @x25={0x3, 0x5, 0xfd, "d17c465d4648ea44e778ca69889e27022c"}}, 0x22)
getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 64)
readv(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000000940)=""/196, 0xc4}], 0x3) (async, rerun: 64)
setsockopt(r2, 0xfffffff7, 0x800, &(0x7f0000000a80)="1f4a2bbe896c97cea4f73ea115ce9740d29cc9ce335541243f39aa739ad758626d66be9bc7ffcc276f9117f68d33d35c71324a09ce332e49d31ce8b9568c3404e111be5984c3640b985e9255d59e9ee4944c4687fbc4c2a30d", 0x59) (async)
getsockname$packet(r10, &(0x7f0000000b00)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'ip6_vti0\x00', &(0x7f0000000b80)={'syztnl0\x00', r11, 0x29, 0x5, 0x4, 0xd, 0x26, @empty, @mcast2, 0x7, 0x8000, 0x490fe3b6, 0xeaa}}) (async)
accept$ax25(r9, &(0x7f0000000c40)={{0x3, @netrom}, [@null, @null, @null, @default, @netrom, @remote, @netrom, @null]}, &(0x7f0000000cc0)=0x48)
r12 = gettid()
write$cgroup_pid(r7, &(0x7f0000000d00)=r12, 0x12) (async, rerun: 32)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r10) (rerun: 32)
sendmsg$TIPC_NL_SOCK_GET(r10, &(0x7f0000001180)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000dc0)={0x344, r13, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x232}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xac0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x25}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd758}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x82d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ba}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000)

1.010125606s ago: executing program 2 (id=4194):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
accept(r8, 0x0, 0x0)
writev(r7, &(0x7f0000000380)=[{0x0}, {&(0x7f0000002ac0)='l', 0x1}], 0x2)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r12=>0x0}, &(0x7f0000000180)=0x14)
r13 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'macvlan0\x00', <r14=>0x0})
setsockopt$MRT6_ADD_MIF(r13, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x7, r14, 0x2}, 0xc)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r14], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019640)=@deltfilter={0xc9c, 0x2d, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xf, 0xf}, {0xffff, 0x9143acb5ba949f92}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc5c, 0x2, [@TCA_CGROUP_ACT={0x3f4, 0x1, [@m_mirred={0x160, 0xe, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x2, 0x0, 0x8, 0x83}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbb, 0x40, 0x8, 0x8e45}, 0x4, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x8, 0x2}, 0x3, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xa214, 0x0, 0xff8000, 0x80}, 0x3, r4}}]}, {0xb2, 0x6, "9793d1edaecf02da5149a832bc9bc7bf2c75d00c66a6c03500bbf09d944977649fa1066b268bd9fa50a66cc47697fe4c4b3701f813885d87335e5335bcf81acc34c7dc48af3d208d537cfe73a2116c0d0186ed78bd9685530ee784119e2a2ec9a20608d7b3018a6edb27d7543c1aa31efc8babddad734ba07b9c7cda3fb4ae284c81f7c02055a392515cf9125151c00b3e590ffa1d304be767dc016bd685935b1d0742f592dd808fa5129fc8eaa9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xf0, 0x19, 0x0, 0x0, {{0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d1, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x8, 0x7, 0x100, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5594, 0x7, 0x10000002, 0x9, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x199b, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x159, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x223e, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x428, 0x6, 0x2, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x30000000, 0x9, 0x3, 0x9, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffe, 0x3, 0x0, 0x7fff, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x59b, 0x2, 0xf, 0x400}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x108, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xd4, 0x6, "b8159e5ff2a5e8ffe5af1a593b878e1479958a73fa29d7b1eb60426a33c5e7bdd35f87c919c8c930c27d4debc22cf1851bfc91840d27a3aaf6078cccf733ef497399dfd052fe735855ed79ee7498b439bade2c3a0df229ef67d2a8fa849db250710555ef61fb3c4b1df519bede701c8ffadb57e5ba35e4a2436d8233bc5b1cfac9a9df7ea45fed01c2f61fe36b24572b56a147c3e5579166a344b19760f4ef2054e3e2b8d04e81b8d6094e3553971078ea2bc7f1d84ef9ec4ad3dc31686bcb1018bd99cab1b768a49bf16a892a4a3d9f"}, {0xc}, {0xc}}}, @m_sample={0x98, 0xf, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x800}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffdc8b, 0x7, 0x8, 0x0, 0x22}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xe, 0x4, 0x20000000, 0x61, 0x2}}]}, {0x2c, 0x6, "348bdfb1565dfad4c04314cfd50eae9b6151afdc7761820bc05d678270680f2f6c9970779b3fca63"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_CGROUP_POLICE={0x864, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5bed, 0x3800000f, 0xee7, 0x5, 0x1, {0x1, 0x1, 0x9, 0x401, 0x3, 0x5}, {0x5, 0x2, 0x3, 0x9, 0xffff, 0x7}, 0x6, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x0, 0xfffffffd, 0x6, 0xd, 0x1, 0x0, 0x560, 0x5, 0x2, 0xffffffff, 0x8, 0x6, 0x6, 0x3, 0x8, 0x3, 0x2, 0x8, 0xb5, 0x0, 0x101, 0x708a0b53, 0x81, 0xf7d, 0x4, 0x8, 0x4000000, 0x80000000, 0x1, 0x3, 0x200, 0x2, 0x1, 0x5d, 0x80000000, 0x3, 0xfffffffa, 0xfffffff5, 0xc, 0x400, 0x3, 0x1e000, 0x8000, 0x6, 0xc, 0x7, 0xfffffff9, 0x6, 0x5, 0x0, 0x0, 0x6, 0x3, 0x5, 0x401, 0xbf, 0x4, 0x5, 0x6da4d31c, 0x8, 0x55da, 0xa, 0x6, 0x9, 0x2, 0xc9, 0xd, 0x0, 0x3, 0x2, 0x6c, 0x9, 0x8, 0x2, 0x9, 0xff, 0x167, 0x9, 0x5, 0x5, 0x3, 0x6, 0xa1, 0x5, 0xff, 0xfffffff9, 0x25c7, 0x8, 0x1, 0x0, 0xae, 0xfffffffc, 0x80000000, 0x6, 0xff, 0x7ff, 0x2, 0x22, 0x1, 0xabd4, 0x9, 0x0, 0x4, 0x9, 0x0, 0x2, 0x2, 0x614b31, 0x8, 0x8, 0x6, 0x9, 0xfffffffe, 0x65f, 0x6, 0x3a25, 0x97cf, 0x9, 0x8, 0x9, 0x8, 0xc, 0x4a0c, 0x8, 0xb2, 0x2, 0x9, 0x1, 0x1, 0x9, 0x0, 0x0, 0x9, 0x3, 0x7, 0x10001, 0x2, 0x3, 0x400, 0x87, 0x3, 0xdac, 0x1, 0x5, 0x9, 0x3, 0x80, 0x9, 0x91, 0x4, 0x4, 0x9, 0xfffffffc, 0x893, 0x3, 0xc, 0x5, 0x2, 0x200, 0x5c, 0x4, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x3, 0x5, 0x40, 0x1, 0x44, 0x69a3d97d, 0x5, 0x1, 0xfffffffd, 0x8000, 0xd0, 0x1, 0x6, 0x2, 0x5, 0x5, 0x80, 0x17e, 0x3ff, 0x4b, 0x2, 0xf1, 0xd768, 0xc2, 0x7f, 0xdb, 0x6, 0x10000, 0x3, 0x4a, 0x1, 0x5, 0xfff, 0x2, 0x10001, 0x5, 0x5, 0x7, 0x401, 0x6, 0x7, 0x7, 0x8, 0x5, 0x5, 0x8, 0x4, 0x8d, 0xfffffffd, 0x7, 0x3501, 0xfffffff8, 0x39e2, 0x0, 0x4, 0x5bf0, 0x4, 0x5, 0x6, 0x7ff, 0x411, 0x9, 0x3, 0x6, 0x62e, 0xd, 0x8, 0x10000, 0xe0, 0x8001, 0x7fff, 0x2000, 0x7, 0x7, 0x7fffffff, 0x3, 0x8, 0x8, 0x6, 0x3, 0x4, 0x1, 0x5, 0xff, 0xfff, 0xfffffc00, 0xffffffff, 0xdb1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8, 0xea1, 0x8, 0x9, 0x99, 0x0, 0x0, 0x7, 0x9, 0x5, 0x4, 0x6, 0x949, 0x9, 0x2, 0xcc17, 0x8, 0x4cc, 0x9, 0x7, 0x8, 0xc, 0x2, 0x1, 0x88, 0x2, 0x9, 0x6, 0x5, 0x3, 0x5, 0x7, 0x8, 0x8, 0x1, 0x224c0f70, 0x81, 0xfffffffb, 0x2, 0xba61fbd, 0x7fffffff, 0xd91, 0xffffffff, 0xfffffffa, 0x6, 0x3, 0x1ff, 0x9, 0x1000, 0x4, 0x101, 0x7ff, 0x5, 0xfffffff3, 0xff800000, 0x2, 0x20bf, 0xba, 0x7fff, 0x4, 0x9, 0x5, 0x1, 0x6200, 0xffffffff, 0x6, 0xfffffffa, 0x9, 0x7fffffff, 0xbcfa, 0xb0, 0x554, 0xffffffff, 0x5, 0x7fffffff, 0x3, 0x3, 0x5, 0x6, 0x8, 0x9, 0x6, 0x400, 0x7, 0xb11, 0x6, 0x8000, 0x80000001, 0x2, 0x9, 0x0, 0xe28, 0x7fffffff, 0x9, 0x9, 0x3, 0xc, 0x38, 0x6, 0x9, 0x2, 0x3, 0x4, 0x9, 0x479b, 0xed, 0x3, 0x0, 0x800, 0x6, 0xfffffffc, 0x81, 0xad9, 0x3626, 0xfffffff7, 0x5, 0x1003, 0x7ff, 0x4, 0xf, 0x8dc2, 0xcb43, 0x5e, 0xa4, 0x4, 0x65, 0xfffffffa, 0x4, 0x5, 0x6, 0xb, 0x8, 0x3, 0x0, 0xfffffffe, 0x5, 0x7, 0xff, 0xf232, 0x470, 0x3, 0x3, 0x2b, 0x7, 0x80, 0x7dd, 0x931, 0x4481, 0x7fff, 0xfff, 0x4, 0x4, 0xb, 0x4, 0x1000, 0x4, 0x9, 0xffb1, 0x7, 0x8001, 0x4, 0x800, 0x5, 0x3, 0x7, 0x1, 0x8, 0x8000, 0xff, 0x7fffffff, 0x1, 0x100, 0xffff5471, 0x5, 0x7, 0x0, 0x1, 0x5, 0xff, 0x8, 0xfffffff7, 0x2, 0x0, 0x1, 0x7, 0x5, 0x8, 0xf70, 0x697, 0x10001, 0x81, 0xffffffff, 0x81, 0x80000001, 0x2, 0x1, 0xff, 0x1, 0x1ff, 0x9, 0x4, 0x40, 0x7, 0x9, 0x4a3f, 0x5d, 0x1, 0x8, 0x10, 0x1, 0x10, 0x401, 0xffff, 0x7, 0x5, 0x6, 0x1, 0x1, 0x8e3, 0x1, 0x8, 0x7, 0x2, 0x8, 0x3, 0x80000001, 0x1, 0x6, 0x7, 0x4, 0x3d2, 0x5, 0x6, 0x3026501d, 0x2, 0x6, 0x7, 0x6, 0x1, 0x400, 0x34f, 0x4, 0x6684, 0x1, 0x74, 0x0, 0x9, 0xd7, 0x10, 0x9, 0x3, 0x4, 0x8b56, 0xd, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}]}, 0xc9c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)

880.688295ms ago: executing program 2 (id=4195):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000080)={r9, 0x6, 0xd, 0x5, 0x2, 0x7}, &(0x7f00000000c0)=0x14)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={r9, 0xb0, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00', 0x3}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e21, 0xffffff51, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2dc}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x4, @loopback, 0xdca9}, @in6={0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x40}, 0xffff}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e23, @remote}]}, &(0x7f00000000c0)=0x10)
accept4$inet6(r2, 0x0, &(0x7f0000000180), 0x80400)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xffffffffffffff92}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)

270.345377ms ago: executing program 0 (id=4203):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) (async)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x6}]})
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x7) (async)
write$ppp(r0, &(0x7f00000008c0)='\x00\x00', 0x2)

201.58664ms ago: executing program 0 (id=4204):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46}, 0x28)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0)
r2 = socket(0x2a, 0x4, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0xfffffffffffffeab, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c2012c0000000", @ANYRES16=r6, @ANYBLOB="000126bd7000fddbdf25080000000800040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4004095)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x108, r6, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x0, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x0, 0x6, 0xffe}, @IPVS_DEST_ATTR_TUN_TYPE={0x0, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x0, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x41}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0xffffffffffffffcb, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x28}}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50)
unshare(0x20000400)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x58}, 0x55)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x8}}, 0xfffd, 0x7ffe}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000040), &(0x7f0000000080)='%pS    \x00'}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)

201.348435ms ago: executing program 0 (id=4205):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
r4 = socket$netlink(0x10, 0x3, 0x4)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r4, 0xedcac000)

76.34887ms ago: executing program 0 (id=4206):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120500000000009500000000000000", @ANYBLOB="7e1a8f62b2fbef98fbd60e8a984506a528edc2525710e2137de4bf373b92fc7cd1d6b876119628b5fd9b68b16ceb6594fb46005bc95e0ca9bd59d8224b0f6d8482c9e865eb65e6dd693edab3a2c6c89afde847f0a223b943b3ead32a3030cb4ccab4fca4216ac6", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x11000000}, 0x94)

75.950075ms ago: executing program 0 (id=4207):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
close(0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x301, 0x0, 0x0, {0x3}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6e}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x15}]}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x24004815}, 0x40)

69.158766ms ago: executing program 0 (id=4208):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080)
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040000, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10)
connect$unix(r3, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040027bd7000fcdbdf25070000003000068008000700", @ANYRES32=0x0, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b70800001cda00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r7, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x1b)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0xc}, 0xc)
connect$ax25(r7, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
ioctl$sock_proto_private(r5, 0x891d, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r4], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

0s ago: executing program 2 (id=4209):
r0 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) (async)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', <r2=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async)
close(0x3) (async, rerun: 32)
socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
close(0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', <r9=>0x0}) (rerun: 64)
sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r5, 0x101, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async, rerun: 64)
r10 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="59715c2641f241a6aec3d5d6cd430283ac013c39d23b8613a0ecca2f73c4054e5cdb2575aaf11cb3d53b759c8fdcb348c2eca1dc6181f6226c9190fa661c06fe67ecb7a1f29505e05c9a262dae4a469e63de419649170429a730a4127bebc3ba139b46424577ef90a3c2e3ad1321b221ccc19ee7d0a86a03c032bd0a6aa1cb405708d737ddb512882b3a0fc82f4026c818c0f11233555e590c1eef989bc67e4e1b57d6fc055ef9af1159b650d7093be7ee819f8dbb00845248ef7ea7579a5e57", 0xc0}, {&(0x7f0000000000)="c3eef559e0de6a98b8df2070222e2273573598e8598935d08da7c3bbe59997ac3b780f190d8ec77c4c7ca802747674f95d7a82a8df", 0x35}, {&(0x7f0000000180)="ecb145d1c3aebc9d851516ee10d500f1e15b0e9768b07f7f2172de2026250f4578392ebac92abffd21f316f5f61c7f6a890a8c062d728fa7c7513bd4651cbc334f7ee341e46e4abbd43104942a01cf7570339c24e89671a683262eb77c4bcdf14a986747e090bb", 0x67}, {&(0x7f0000000200)="7f8271a1073718abed7129da387b17ac816ca19980e38ce4379c68f81c9f50a1363a001bf9cd66060b0f8e51cee8411d431532ae02fda8da4a36e1f33bdcfa13119372c3919b9afae2615beb892ff3d639565dcdd8a14161f7d7b8a10314958c31f031a0d30da79b84e0911f2e437c0b30be02a95dbd372f45251c6dc8d0be4c6799bc86c1d0a7a00a3ba4a29f462c3e4a67963fe6e33d48375e60cf3f581538cbf07842eb4a8488082d347b3c413e54b6f5db15aac9", 0xb6}, {&(0x7f0000000340)="8c81bec3301051715333a5cc8c6c4a3737358fee364e12e1062bf71defa3c35b6df8a35d8fa378de2a805dd38014280b2f376e6e70de21564048d05de13077c35d7e59f298e77668d4663f21a4bf8d9bebf3e2ccf4c8543c93225e6c37abddb03ccd04ffae2608c93441dc0e1d7269987f5e5599f901d29758a792abf433830c0a777b096fdbd6222371ccd52fabf320e999bf34d12512173b3ba367a31685bd9c74f731cb756ac6c9fa1fb086b5631319a47a3feae53ef634", 0xb9}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x20004080)

kernel console output (not intermixed with test programs):

te type 22 has an invalid length.
[  215.951448][T14370] netlink: 'syz.0.2470': attribute type 23 has an invalid length.
[  215.955296][T14370] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2470'.
[  215.983996][T14366] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2471'.
[  216.106587][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2476'.
[  216.127218][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  216.129818][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  216.133219][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  216.135837][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  216.174833][T14400] syzkaller0: entered promiscuous mode
[  216.176607][T14400] syzkaller0: entered allmulticast mode
[  216.179835][T14400] 0: reclassify loop, rule prio 0, protocol 800
[  216.208555][T14404] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2481'.
[  216.218120][T14404] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.243206][T14406] bond0: Device is already in use.
[  216.267020][T14404] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.278706][T14411] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2484'.
[  216.325364][T14404] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.357421][T14414] bond16: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  216.361750][T14414] bond16 (unregistering): Released all slaves
[  216.378815][T14404] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.401589][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'.
[  216.410947][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'.
[  216.448184][T14420] netlink: 'syz.2.2487': attribute type 1 has an invalid length.
[  216.464335][T14420] bond13: entered promiscuous mode
[  216.467599][T14420] 8021q: adding VLAN 0 to HW filter on device bond13
[  216.475519][T14420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2487'.
[  216.478842][T14420] bond13: entered allmulticast mode
[  216.509108][ T8630] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.520409][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.529322][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.539928][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.649831][T14434] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2490'.
[  217.020411][T14465] netlink: 'syz.1.2501': attribute type 29 has an invalid length.
[  217.032498][T14465] netlink: 'syz.1.2501': attribute type 29 has an invalid length.
[  217.063793][T14467] syzkaller0: entered promiscuous mode
[  217.065557][T14467] syzkaller0: entered allmulticast mode
[  217.069526][T14467] syzkaller0: left allmulticast mode
[  217.170609][T14476] bond0: option arp_validate: invalid value (55553)
[  217.209850][T14480] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.214482][T14480] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.217440][T14480] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  217.265612][T14480] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.269292][T14480] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.273497][T14480] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  217.315478][T14480] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.319299][T14480] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.323357][T14480] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  217.374907][T14480] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.378030][T14480] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.381385][T14480] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  217.452391][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.455273][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  217.457919][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  217.466667][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.469413][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  217.472405][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  217.479420][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.482283][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  217.484948][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  217.497258][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.502213][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  217.505591][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  217.536665][T14485] bond0: Caught tx_queue_len zero misconfig
[  217.676079][T14497] xt_connbytes: Forcing CT accounting to be enabled
[  217.800091][T14511] syzkaller1: entered promiscuous mode
[  217.802785][T14511] syzkaller1: entered allmulticast mode
[  217.866868][T14515] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4.
[  217.916026][T14518] syzkaller0: entered promiscuous mode
[  217.918465][T14518] syzkaller0: entered allmulticast mode
[  218.302533][T14532] can: request_module (can-proto-0) failed.
[  218.460442][T14538] lo speed is unknown, defaulting to 1000
[  218.468843][T14544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.795430][T14559] syzkaller0: entered promiscuous mode
[  218.797716][T14559] syzkaller0: entered allmulticast mode
[  219.575351][T14576] !9: entered promiscuous mode
[  219.583390][T14576] !9: left promiscuous mode
[  219.825289][T14589] bridge0: entered allmulticast mode
[  219.828851][T14589] batadv1: left allmulticast mode
[  219.830534][T14589] batadv1: left promiscuous mode
[  219.834960][T14589] bridge0: port 3(batadv1) entered disabled state
[  220.191768][T14604] validate_nla: 7 callbacks suppressed
[  220.191778][T14604] netlink: 'syz.2.2540': attribute type 21 has an invalid length.
[  220.322564][T14611] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  220.340438][T14611] bond7: (slave lo): making interface the new active one
[  220.344785][T14611] bond7: (slave lo): Enslaving as an active interface with an up link
[  220.350798][T14611] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  220.357909][ T5873] lo speed is unknown, defaulting to 1000
[  220.358794][ T5845] lo speed is unknown, defaulting to 1000
[  220.362851][ T5542] lo speed is unknown, defaulting to 1000
[  220.365449][  T784] lo speed is unknown, defaulting to 1000
[  220.367752][   T10] lo speed is unknown, defaulting to 1000
[  220.370779][T14613] mac80211_hwsim hwsim6 ;: renamed from wlan0
[  220.447913][T14620] xt_hashlimit: size too large, truncated to 1048576
[  220.528098][T14626] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  220.810471][T14646] x_tables: duplicate underflow at hook 3
[  220.870169][T14653] batadv_slave_0: entered allmulticast mode
[  221.016731][T14658] __nla_validate_parse: 35 callbacks suppressed
[  221.016741][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2555'.
[  221.428120][T14682] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  221.513057][T14688] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2563'.
[  221.525480][T14691] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  221.529397][T14691] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  221.616633][T14698] syzkaller0: entered promiscuous mode
[  221.619754][T14698] syzkaller0: entered allmulticast mode
[  221.676216][   T24] lo speed is unknown, defaulting to 1000
[  221.680592][T14698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.687364][T14698] tipc: Resetting bearer <eth:syzkaller0>
[  221.689583][T14698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.692546][T14698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.700525][T14697] tipc: Resetting bearer <eth:syzkaller0>
[  221.710606][T14703] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  221.717748][T14697] tipc: Disabling bearer <eth:syzkaller0>
[  221.756973][T14710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2567'.
[  222.007189][T14734] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2575'.
[  222.010486][T14734] netlink: 'syz.1.2575': attribute type 21 has an invalid length.
[  222.017110][T14734] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2575'.
[  222.168467][T14749] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2580'.
[  222.177240][T14750] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2580'.
[  222.236267][T14745] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2578'.
[  222.240257][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'.
[  222.515725][T14764] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  222.648910][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'.
[  222.703007][T14800] netlink: 'syz.2.2592': attribute type 11 has an invalid length.
[  222.705494][T14800] netlink: 'syz.2.2592': attribute type 23 has an invalid length.
[  222.730536][T14802] netlink: 'syz.0.2594': attribute type 29 has an invalid length.
[  222.735286][T14802] netlink: 'syz.0.2594': attribute type 29 has an invalid length.
[  222.735532][T14804] netlink: 'syz.1.2595': attribute type 21 has an invalid length.
[  222.775745][T14802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  222.778792][T14802] IPv6: NLM_F_CREATE should be set when creating new route
[  222.842749][T14814] netlink: 'syz.0.2597': attribute type 58 has an invalid length.
[  222.907447][T14811] bond24: entered promiscuous mode
[  222.915799][T14811] bond24: entered allmulticast mode
[  222.920720][T14811] 8021q: adding VLAN 0 to HW filter on device bond24
[  222.984940][T14822] netlink: 'syz.1.2600': attribute type 21 has an invalid length.
[  223.115177][T14838] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  223.119038][T14838] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  223.385932][T14852] netlink: 'syz.1.2610': attribute type 21 has an invalid length.
[  223.397380][T14850] syzkaller0: entered promiscuous mode
[  223.399618][T14850] syzkaller0: entered allmulticast mode
[  223.415880][T14850] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  224.440740][T14866] vlan0: entered promiscuous mode
[  224.442607][T14866] bond0: entered promiscuous mode
[  224.444318][T14866] vlan0: entered allmulticast mode
[  224.446019][T14866] bond0: entered allmulticast mode
[  224.505711][T14874] netlink: 'syz.0.2618': attribute type 21 has an invalid length.
[  224.695208][  T784] IPVS: starting estimator thread 0...
[  224.775890][T14898] lo speed is unknown, defaulting to 1000
[  224.785736][T14900] IPVS: using max 83 ests per chain, 199200 per kthread
[  224.846490][T14913] openvswitch: netlink: IP tunnel TTL not specified.
[  224.919664][T14918] ipt_REJECT: TCP_RESET invalid for non-tcp
[  225.346225][ T8630] bond0: (slave bond_slave_0): interface is now down
[  225.352267][ T8630] bond0: (slave bond_slave_1): interface is now down
[  225.363369][ T8630] bond0: (slave dummy0): interface is now down
[  225.379571][T14938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.392448][ T8630] bond0: (slave bond_slave_0): interface is now down
[  225.395030][ T8630] bond0: (slave bond_slave_1): interface is now down
[  225.397593][ T8630] bond0: (slave dummy0): interface is now down
[  225.412223][   T13] bond0: (slave bond_slave_0): interface is now down
[  225.415032][   T13] bond0: (slave bond_slave_1): interface is now down
[  225.417689][   T13] bond0: (slave dummy0): interface is now down
[  225.452494][ T5821] bond0: (slave bond_slave_0): interface is now down
[  225.457495][ T5821] bond0: (slave bond_slave_1): interface is now down
[  225.460009][ T5821] bond0: (slave dummy0): interface is now down
[  225.483640][ T5821] bond0: (slave bond_slave_0): interface is now down
[  225.486408][ T5821] bond0: (slave bond_slave_1): interface is now down
[  225.489153][ T5821] bond0: (slave dummy0): interface is now down
[  225.496585][ T5821] bond0: now running without any active interface!
[  225.601146][T14964] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  225.797715][T14987] gtp0: entered promiscuous mode
[  225.909351][T14991] lo speed is unknown, defaulting to 1000
[  225.909616][T14998] validate_nla: 4 callbacks suppressed
[  225.909626][T14998] netlink: 'syz.1.2660': attribute type 21 has an invalid length.
[  225.953649][T14984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  225.978923][T15001] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  226.192951][T15006] netlink: 'syz.2.2662': attribute type 4 has an invalid length.
[  226.195546][T15006] __nla_validate_parse: 48 callbacks suppressed
[  226.195554][T15006] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2662'.
[  226.213597][T15006] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2662'.
[  226.216759][T15006] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  226.307515][T15011] team0: Device gtp0 is of different type
[  226.378725][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2664'.
[  226.533245][T15023] netlink: 'syz.0.2667': attribute type 21 has an invalid length.
[  226.539221][T15023] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2667'.
[  226.591652][T15027] bond14: entered promiscuous mode
[  226.598791][T15027] 8021q: adding VLAN 0 to HW filter on device bond14
[  226.668441][T15034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.712860][T15036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2672'.
[  226.716618][T15036] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  226.719533][T15036] IPv6: NLM_F_CREATE should be set when creating new route
[  226.726618][T15036] syzkaller0: entered promiscuous mode
[  226.731893][T15036] syzkaller0: entered allmulticast mode
[  226.933763][T15046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  226.936364][T15046] IPv6: NLM_F_CREATE should be set when creating new route
[  226.942365][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'.
[  227.188967][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2678'.
[  227.192583][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'.
[  227.270830][T13462] smc: removing ib device !yz!
[  227.447660][T15061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.669283][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'.
[  227.680710][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'.
[  227.842620][T15089] sctp: [Deprecated]: syz.2.2686 (pid 15089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  227.842620][T15089] Use struct sctp_sack_info instead
[  227.873654][T15086] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  228.464505][T15124] netlink: 'syz.0.2699': attribute type 1 has an invalid length.
[  228.468476][T15124] netlink: 'syz.0.2699': attribute type 1 has an invalid length.
[  228.495301][T15127] xt_l2tp: wrong L2TP version: 0
[  228.497938][T15127] netlink: 'syz.0.2700': attribute type 21 has an invalid length.
[  228.819053][T15138] IPVS: set_ctl: invalid protocol: 225 255.255.255.255:20002
[  228.879155][T15151] netlink: 'syz.2.2707': attribute type 21 has an invalid length.
[  228.976482][T15160] dvmrp1: entered allmulticast mode
[  229.025769][T15169] x_tables: duplicate underflow at hook 3
[  229.139174][T15182] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  229.334508][T15209] netlink: 'syz.1.2721': attribute type 28 has an invalid length.
[  229.336968][T15209] netlink: 'syz.1.2721': attribute type 3 has an invalid length.
[  229.368726][T15213] netlink: 'syz.1.2722': attribute type 3 has an invalid length.
[  229.461508][  T111] block nbd1: Possible stuck request ffff8881093b0000: control (read@0,1024B). Runtime 150 seconds
[  229.466137][  T111] block nbd1: Possible stuck request ffff8881093b0200: control (read@1024,1024B). Runtime 150 seconds
[  229.469862][  T111] block nbd1: Possible stuck request ffff8881093b0400: control (read@2048,1024B). Runtime 150 seconds
[  229.473662][  T111] block nbd1: Possible stuck request ffff8881093b0600: control (read@3072,1024B). Runtime 150 seconds
[  229.646091][T15231] 8021q: adding VLAN 0 to HW filter on device bond15
[  229.660900][T15231] vlan2: entered promiscuous mode
[  229.664399][T15231] bond15: entered promiscuous mode
[  229.666356][T15231] vlan2: entered allmulticast mode
[  229.668713][T15231] bond15: entered allmulticast mode
[  229.750883][T15249] syzkaller0: entered promiscuous mode
[  229.753209][T15249] syzkaller0: entered allmulticast mode
[  229.758340][T15249] TC_ACT_REPEAT abuse ?
[  229.936966][T15259] .71: renamed from .70
[  229.940503][T15259] .71: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  229.943967][T15259] .71: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.947809][T15259] A link change request failed with some changes committed already. Interface .71 may have been left with an inconsistent configuration, please check.
[  230.895938][T15290] lo speed is unknown, defaulting to 1000
[  231.101086][T15298] validate_nla: 5 callbacks suppressed
[  231.101126][T15298] netlink: 'syz.1.2749': attribute type 21 has an invalid length.
[  231.225519][T15304] __nla_validate_parse: 31 callbacks suppressed
[  231.225531][T15304] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2751'.
[  231.232447][T15304] netlink: 'syz.0.2751': attribute type 21 has an invalid length.
[  231.236500][T15304] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2751'.
[  231.342834][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2752'.
[  231.478352][T15319] syzkaller0: entered promiscuous mode
[  231.480409][T15319] syzkaller0: entered allmulticast mode
[  231.484721][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2754'.
[  231.654979][T15334] IPVS: length: 118 != 8
[  231.659308][T15334] pimreg: entered allmulticast mode
[  231.661192][T15330] lo speed is unknown, defaulting to 1000
[  231.661775][T15334] pimreg: left allmulticast mode
[  231.695272][T15335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2759'.
[  231.753401][T15337] syzkaller0: entered promiscuous mode
[  231.755297][T15337] syzkaller0: entered allmulticast mode
[  231.867902][T15341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2763'.
[  231.891651][T15341] IPVS: ip_vs_add_dest(): server weight less than zero
[  231.924823][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'.
[  232.010789][T15352] netlink: 'syz.2.2765': attribute type 1 has an invalid length.
[  232.015186][T15352] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2765'.
[  232.076579][T15356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2768'.
[  232.183011][T15365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  232.253841][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'.
[  232.315442][T15378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  232.317751][T15378] IPv6: NLM_F_CREATE should be set when creating new route
[  232.320129][T15378] IPv6: NLM_F_CREATE should be set when creating new route
[  232.326235][T15378] netlink: 'syz.2.2775': attribute type 21 has an invalid length.
[  232.376826][T15385] netlink: 'syz.2.2777': attribute type 1 has an invalid length.
[  232.396148][T15385] 8021q: adding VLAN 0 to HW filter on device bond16
[  232.425410][T15385] 8021q: adding VLAN 0 to HW filter on device bond16
[  232.428482][T15385] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address
[  232.433464][T15385] bond16: (slave vxcan3): Error -95 calling set_mac_address
[  232.458649][T15388] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode
[  232.462522][T15388] bond16: (slave wlan0): Opening slave failed
[  232.517869][T15390] pim6reg: entered allmulticast mode
[  232.612690][T15400] siw: device registration error -23
[  232.786922][T15410] netlink: 'syz.2.2785': attribute type 15 has an invalid length.
[  232.881326][T15419] sctp: [Deprecated]: syz.2.2787 (pid 15419) Use of struct sctp_assoc_value in delayed_ack socket option.
[  232.881326][T15419] Use struct sctp_sack_info instead
[  236.482533][   T61] block nbd0: Possible stuck request ffff888109360000: control (read@0,1024B). Runtime 90 seconds
[  236.486714][   T61] block nbd0: Possible stuck request ffff888109360200: control (read@1024,1024B). Runtime 90 seconds
[  236.490265][   T61] block nbd0: Possible stuck request ffff888109360400: control (read@2048,1024B). Runtime 90 seconds
[  236.494329][   T61] block nbd0: Possible stuck request ffff888109360600: control (read@3072,1024B). Runtime 90 seconds
[  249.820230][T15429] __nla_validate_parse: 11 callbacks suppressed
[  249.820245][T15429] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2792'.
[  249.868694][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2793'.
[  249.887030][T15431] team0: entered promiscuous mode
[  249.889118][T15431] team0: entered allmulticast mode
[  249.891538][T15431] 8021q: adding VLAN 0 to HW filter on device team0
[  249.901497][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2793'.
[  249.914178][T15431] team1: entered promiscuous mode
[  249.915732][T15431] team1: entered allmulticast mode
[  249.917625][T15431] 8021q: adding VLAN 0 to HW filter on device team1
[  249.924520][T15431] team0: Mode changed to "activebackup"
[  249.998454][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2794'.
[  250.106407][T15449] bond26: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  250.118907][T15449] bond26 (unregistering): Released all slaves
[  250.140834][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2796'.
[  250.147561][T15454] netlink: 'syz.2.2798': attribute type 11 has an invalid length.
[  250.155717][T15455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2796'.
[  250.187659][T15441] bond16 (unregistering): Released all slaves
[  250.209982][T15459] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  250.313149][T15462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2801'.
[  250.492422][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'.
[  250.495240][T15475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.537935][T15481] netlink: 'syz.2.2805': attribute type 2 has an invalid length.
[  250.657413][T15490] lo speed is unknown, defaulting to 1000
[  250.827930][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2811'.
[  250.831978][T15505] openvswitch: netlink: Flow actions attr not present in new flow.
[  250.863107][T15504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2812'.
[  250.890786][T15504] team0: entered promiscuous mode
[  250.893433][T15504] team0: entered allmulticast mode
[  250.896087][T15504] 8021q: adding VLAN 0 to HW filter on device team0
[  250.918694][T15504] team1: entered promiscuous mode
[  250.920686][T15504] team1: entered allmulticast mode
[  250.923459][T15504] 8021q: adding VLAN 0 to HW filter on device team1
[  250.958267][T15504] team0: Mode changed to "activebackup"
[  251.212396][T15522] syzkaller1: entered promiscuous mode
[  251.214214][T15522] syzkaller1: entered allmulticast mode
[  251.254090][T15529] netlink: 'syz.1.2821': attribute type 1 has an invalid length.
[  251.264840][T15529] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR
[  251.300678][T15538] macsec1: entered promiscuous mode
[  251.598464][T15561] veth21: entered promiscuous mode
[  252.333925][T15579] gtp2: entered promiscuous mode
[  252.336119][T15579] gtp2: entered allmulticast mode
[  252.339571][T15579] team0: Port device gtp2 added
[  252.752112][T15592] infiniband sy: set down
[  252.753815][T15592] infiniband sy: added bond_slave_0
[  252.770669][T15592] RDS/IB: sy: added
[  252.773403][T15592] smc: adding ib device sy with port count 1
[  252.775930][T15592] smc:    ib device sy port 1 has no pnetid
[  253.315733][T15609] netlink: 'syz.2.2847': attribute type 21 has an invalid length.
[  253.318464][T15609] netlink: 'syz.2.2847': attribute type 5 has an invalid length.
[  253.321096][T15609] netlink: 'syz.2.2847': attribute type 6 has an invalid length.
[  253.368144][T15609] netlink: 'syz.2.2847': attribute type 4 has an invalid length.
[  253.373299][T15609] netlink: 'syz.2.2847': attribute type 4 has an invalid length.
[  253.436243][T15614] vlan4: entered promiscuous mode
[  253.437913][T15614] team0: entered promiscuous mode
[  253.439504][T15614] team_slave_0: entered promiscuous mode
[  253.441424][T15614] team_slave_1: entered promiscuous mode
[  253.514036][T15617] IPv6: Can't replace route, no match found
[  253.566483][T15624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.578285][T15623] tipc: Disabling bearer <eth:syzkaller0>
[  253.713317][T15629] netlink: 'syz.1.2853': attribute type 2 has an invalid length.
[  253.884469][T15641] veth24: entered allmulticast mode
[  254.732324][T15644] netlink: 'syz.0.2856': attribute type 8 has an invalid length.
[  254.765897][T15648] syzkaller0: entered promiscuous mode
[  254.767661][T15648] syzkaller0: entered allmulticast mode
[  254.778512][T15648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.782815][T15648] tipc: Resetting bearer <eth:syzkaller0>
[  254.784682][T15648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.787247][T15648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.794951][T15646] tipc: Resetting bearer <eth:syzkaller0>
[  254.803701][T15646] tipc: Disabling bearer <eth:syzkaller0>
[  254.984009][T15671] __nla_validate_parse: 158 callbacks suppressed
[  254.984024][T15671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2863'.
[  255.083269][T15677] xt_ecn: cannot match TCP bits for non-tcp packets
[  255.088392][T15677] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.091525][T15677] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  255.094807][T15677] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  255.135021][T15677] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.138637][T15677] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  255.141765][T15677] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  255.149016][T15678] mac80211_hwsim hwsim17 wlan0: Caught tx_queue_len zero misconfig
[  255.155276][T15678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2866'.
[  255.184838][T15677] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.188064][T15677] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  255.191139][T15677] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  255.216761][T15680] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2867'.
[  255.248391][T15677] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.251599][T15677] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  255.256060][T15677] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  255.312697][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  255.315889][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  255.319272][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  255.329533][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  255.334263][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  255.339457][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  255.349367][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  255.358621][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  255.361341][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  255.369395][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  255.374082][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  255.376836][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  255.450469][T15692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.497937][T15696] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.501224][T15696] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  255.504586][T15696] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  255.586648][T15696] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.590546][T15696] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  255.594530][T15696] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  255.649966][T15696] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.656824][T15696] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  255.660894][T15696] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  255.707721][T15696] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.711564][T15696] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  255.715911][T15696] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  255.827018][T15707] wg1 speed is unknown, defaulting to 1000
[  255.829581][T15707] wg1 speed is unknown, defaulting to 1000
[  255.834247][T15707] wg1 speed is unknown, defaulting to 1000
[  255.847632][T15707] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98
[  255.869459][T15707] wg1 speed is unknown, defaulting to 1000
[  255.875234][T15707] wg1 speed is unknown, defaulting to 1000
[  255.878553][T15708] x_tables: ip_tables: ah match: only valid for protocol 51
[  255.878862][T15707] wg1 speed is unknown, defaulting to 1000
[  255.941676][T15708] xt_TCPMSS: Only works on TCP SYN packets
[  256.263479][T15717] siw: device registration error -23
[  256.701366][T15741] batadv_slave_0: left allmulticast mode
[  256.704439][T15741] .70: left allmulticast mode
[  256.706419][T15741] hsr_slave_0: left allmulticast mode
[  256.708559][T15741] hsr_slave_1: left allmulticast mode
[  256.711160][T15741] bond11: left promiscuous mode
[  256.714800][T15741] veth15: left promiscuous mode
[  256.717110][T15741] bridge15: left promiscuous mode
[  256.718929][T15741] bond13: left promiscuous mode
[  256.720462][T15741] bond13: left allmulticast mode
[  256.723040][T15741] mac80211_hwsim hwsim34 wlan0: left promiscuous mode
[  256.725895][T15741] bond14: left promiscuous mode
[  256.730494][T15741] vlan2: left promiscuous mode
[  256.733896][T15741] bond15: left promiscuous mode
[  256.735933][T15741] vlan2: left allmulticast mode
[  256.742209][T15741] bond15: left allmulticast mode
[  256.747950][T15741] veth21: left promiscuous mode
[  256.830457][T15744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2885'.
[  257.117248][T15759] xfrm0: Caught tx_queue_len zero misconfig
[  257.157854][T15751] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2886'.
[  257.270595][T15769] nbd: nbd0 already in use
[  257.345128][T15777] validate_nla: 1 callbacks suppressed
[  257.345138][T15777] netlink: 'syz.0.2895': attribute type 13 has an invalid length.
[  257.668688][T15790] bridge0: port 1(veth0_to_bridge) entered blocking state
[  257.671151][T15790] bridge0: port 1(veth0_to_bridge) entered disabled state
[  257.674685][T15790] veth0_to_bridge: entered allmulticast mode
[  257.677713][T15790] veth0_to_bridge: entered promiscuous mode
[  257.694182][T15782] smc: adding net device wlan0 with user defined pnetid SYZ0
[  257.730992][T15782] smc: removing net device wlan0 with user defined pnetid SYZ0
[  257.786277][T15803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2901'.
[  257.808485][T15803] syzkaller0: entered promiscuous mode
[  257.810445][T15803] syzkaller0: entered allmulticast mode
[  258.011352][T15821] x_tables: duplicate underflow at hook 1
[  258.021123][T15822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.022284][T15814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  258.049872][T15821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2902'.
[  258.073497][T15821] bond26: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  258.078783][T15821] bond26 (unregistering): Released all slaves
[  258.106309][T15833] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2902'.
[  258.245479][T15831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2907'.
[  258.639654][T15838] netlink: 'syz.0.2909': attribute type 1 has an invalid length.
[  258.884288][T15845] netlink: 'syz.1.2911': attribute type 1 has an invalid length.
[  258.887515][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'.
[  258.985551][T15856] gtp0: entered promiscuous mode
[  258.989377][T15856] team0: Device gtp0 is of different type
[  259.106715][T15862] lo speed is unknown, defaulting to 1000
[  259.309791][T15862] wg1 speed is unknown, defaulting to 1000
[  259.368134][T15878] netlink: 'syz.2.2920': attribute type 1 has an invalid length.
[  259.397223][T15878] openvswitch: netlink: Invalid VLAN frame
[  259.450196][T15887] gtp1: entered promiscuous mode
[  259.454702][T15887] gtp1: entered allmulticast mode
[  259.457110][T15887] team0: Port device gtp1 added
[  259.511147][T15891] netlink: 'syz.2.2924': attribute type 1 has an invalid length.
[  259.527673][  T111] block nbd1: Possible stuck request ffff8881093b0000: control (read@0,1024B). Runtime 180 seconds
[  259.531698][  T111] block nbd1: Possible stuck request ffff8881093b0200: control (read@1024,1024B). Runtime 180 seconds
[  259.535414][  T111] block nbd1: Possible stuck request ffff8881093b0400: control (read@2048,1024B). Runtime 180 seconds
[  259.538915][  T111] block nbd1: Possible stuck request ffff8881093b0600: control (read@3072,1024B). Runtime 180 seconds
[  259.635134][T15891] 8021q: adding VLAN 0 to HW filter on device bond18
[  259.776928][T15909] gtp3: entered promiscuous mode
[  259.779115][T15909] gtp3: entered allmulticast mode
[  259.782416][T15909] team0: Port device gtp3 added
[  259.813075][T15911] syzkaller0: entered promiscuous mode
[  259.815368][T15911] syzkaller0: entered allmulticast mode
[  259.856685][T15913] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  259.891470][T15913] bond19 (unregistering): Released all slaves
[  259.955458][T15914] bond19 (unregistering): Released all slaves
[  259.989179][T15930] netlink: 'syz.1.2936': attribute type 4 has an invalid length.
[  259.995529][T15930] netlink: 'syz.1.2936': attribute type 4 has an invalid length.
[  260.012229][T15930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.103503][T15938] netlink: 'syz.2.2938': attribute type 10 has an invalid length.
[  260.131050][T15941] gtp2: entered promiscuous mode
[  260.133771][T15941] gtp2: entered allmulticast mode
[  260.136263][T15941] team0: Port device gtp2 added
[  260.150608][T15941] __nla_validate_parse: 10 callbacks suppressed
[  260.150619][T15941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2940'.
[  260.307452][T15960] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2946'.
[  260.319198][T15945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2941'.
[  260.330588][T15960] lo speed is unknown, defaulting to 1000
[  260.385782][T15967] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2948'.
[  260.471307][T15975] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2949'.
[  260.477183][T15975] netlink: 'syz.1.2949': attribute type 21 has an invalid length.
[  260.480073][T15975] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2949'.
[  260.512161][T15977] netlink: 188036 bytes leftover after parsing attributes in process `syz.2.2950'.
[  260.516629][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'.
[  260.519522][T15980] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  260.523379][T15980] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  260.565992][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2952'.
[  260.614377][  T784] wg1 speed is unknown, defaulting to 1000
[  260.626312][T15982] 8021q: adding VLAN 0 to HW filter on device bond19
[  260.628976][T15960] wg1 speed is unknown, defaulting to 1000
[  260.719203][T15982] syzkaller1: entered promiscuous mode
[  260.721154][T15982] syzkaller1: entered allmulticast mode
[  260.866300][T15997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.980179][T16001] tipc: Resetting bearer <eth:syzkaller0>
[  261.387752][T16003] tipc: Enabled bearer <eth:tunl0>, priority 10
[  261.420635][T16007] bridge0: entered allmulticast mode
[  261.428091][T16007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2958'.
[  261.494413][T16007] bond5: (slave .`): Releasing backup interface
[  261.500310][T16007] .` (unregistering): (slave c5): Releasing backup interface
[  261.508029][T16007] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.511423][T16007] .` (unregistering): (slave veth5): Releasing backup interface
[  261.515138][T16007] .` (unregistering): (slave veth0_to_bond): Releasing backup interface
[  261.518830][T16007] .` (unregistering): (slave veth7): Releasing backup interface
[  261.522108][T16007] .` (unregistering): Released all slaves
[  261.537280][T16010] bridge_slave_1: left allmulticast mode
[  261.539609][T16010] bridge_slave_1: left promiscuous mode
[  261.542586][T16010] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.547316][T16010] x9: left allmulticast mode
[  261.549306][T16010] x9: left promiscuous mode
[  261.551384][T16010] bridge0: port 1(1x9) entered disabled state
[  261.635336][T15996] tipc: Disabling bearer <eth:syzkaller0>
[  261.655010][T16015] lo speed is unknown, defaulting to 1000
[  261.885827][T16029] geneve5: entered promiscuous mode
[  262.009210][T16015] wg1 speed is unknown, defaulting to 1000
[  262.310441][T16066] xfrm1: entered promiscuous mode
[  262.314148][T16066] xfrm1: entered allmulticast mode
[  262.386583][ T5542] tipc: Node number set to 2766030414
[  262.412834][T16074] netlink: 'syz.1.2976': attribute type 3 has an invalid length.
[  262.578510][T16087] bond20: entered promiscuous mode
[  263.894680][T16141] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.106733][T16162] xt_hashlimit: size too large, truncated to 1048576
[  264.134126][T16164] netlink: 'syz.1.3007': attribute type 1 has an invalid length.
[  264.733353][T16189] tipc: Can't bind to reserved service type 2
[  265.187452][T16222] __nla_validate_parse: 25 callbacks suppressed
[  265.187465][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'.
[  265.219767][T16224] 8021q: VLANs not supported on sit0
[  265.241645][T16228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3027'.
[  265.253226][T16228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3027'.
[  265.507441][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3033'.
[  265.510296][T16248] netlink: 'syz.1.3033': attribute type 9 has an invalid length.
[  265.515455][T16252] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3034'.
[  265.547488][T16256] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3036'.
[  265.552979][T16255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3035'.
[  265.644649][T16265] gtp3: entered promiscuous mode
[  265.646793][T16265] gtp3: entered allmulticast mode
[  265.649469][T16265] team0: Port device gtp3 added
[  265.674323][T16265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3040'.
[  265.709294][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3039'.
[  265.754300][T16274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.761412][T16273] tipc: Disabling bearer <eth:syzkaller0>
[  265.870225][T16283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.905140][T16284] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3042'.
[  265.913067][T16286] netlink: 'syz.0.3045': attribute type 5 has an invalid length.
[  266.572315][   T61] block nbd0: Possible stuck request ffff888109360000: control (read@0,1024B). Runtime 120 seconds
[  266.576802][   T61] block nbd0: Possible stuck request ffff888109360200: control (read@1024,1024B). Runtime 120 seconds
[  266.581160][   T61] block nbd0: Possible stuck request ffff888109360400: control (read@2048,1024B). Runtime 120 seconds
[  266.586306][   T61] block nbd0: Possible stuck request ffff888109360600: control (read@3072,1024B). Runtime 120 seconds
[  268.805413][ T5252] udevd[5252]: worker [5811] /devices/virtual/block/nbd1 timeout; kill it
[  268.808786][ T5252] udevd[5252]: seq 11146 '/devices/virtual/block/nbd1' killed
[  268.925403][T16294] lo speed is unknown, defaulting to 1000
[  269.046987][   T56] block nbd4: Receive control failed (result -32)
[  269.133846][T16310] ipvlan1: entered promiscuous mode
[  269.252044][T16315] lo speed is unknown, defaulting to 1000
[  269.269355][T16303] lo speed is unknown, defaulting to 1000
[  269.355581][T16294] wg1 speed is unknown, defaulting to 1000
[  269.454820][T16327] netlink: 'syz.1.3057': attribute type 1 has an invalid length.
[  269.518882][T16327] 8021q: adding VLAN 0 to HW filter on device bond26
[  269.528280][T16330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.533711][T16330] bond26: (slave batadv0): making interface the new active one
[  269.537671][T16330] bond26: (slave batadv0): Enslaving as an active interface with an up link
[  269.764427][T16327] bond26 (unregistering): (slave batadv0): Releasing active interface
[  269.775131][T16327] bond26 (unregistering): Released all slaves
[  269.789425][T16315] wg1 speed is unknown, defaulting to 1000
[  269.934101][T16303] wg1 speed is unknown, defaulting to 1000
[  270.063008][T16336] syzkaller0: entered promiscuous mode
[  270.076292][T16336] syzkaller0: entered allmulticast mode
[  270.165230][T16343] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  270.228865][T16345] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  270.271445][T16345] __nla_validate_parse: 6 callbacks suppressed
[  270.271458][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'.
[  270.434256][T16358] netlink: 'syz.0.3064': attribute type 1 has an invalid length.
[  270.524491][T16358] 8021q: adding VLAN 0 to HW filter on device bond16
[  270.541049][T16360] vlan1: entered promiscuous mode
[  270.545262][T16360] bond16: entered promiscuous mode
[  270.549737][T16360] vlan1: entered allmulticast mode
[  270.552297][T16360] bond16: entered allmulticast mode
[  270.706936][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'.
[  270.710619][T16365] sit0: Master is either lo or non-ether device
[  270.714688][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'.
[  270.718713][T16365] sit0: Master is either lo or non-ether device
[  270.867222][T16369] wg0: Caught tx_queue_len zero misconfig
[  270.909070][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'.
[  270.940076][T16374] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.999961][T16374] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.053973][T16374] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.107535][T16374] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.199037][ T8630] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.215958][ T8630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.219008][ T8630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.228428][ T8630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.338387][T16381] netlink: 'syz.2.3072': attribute type 1 has an invalid length.
[  271.354070][T16381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3072'.
[  271.357631][T16381] sit4: entered promiscuous mode
[  271.359635][T16381] sit4: entered allmulticast mode
[  271.424481][T16385] syzkaller1: entered promiscuous mode
[  271.426821][T16385] syzkaller1: entered allmulticast mode
[  271.554182][T16391] team0: No ports can be present during mode change
[  271.564025][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'.
[  271.640181][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3080'.
[  271.643634][T16400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3080'.
[  271.754455][T16409] Bluetooth: hci1: Opcode 0x0401 failed: -22
[  272.469919][T16412] netlink: 'syz.2.3083': attribute type 12 has an invalid length.
[  272.472694][T16412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3083'.
[  272.613861][T16422] netlink: 'syz.0.3087': attribute type 3 has an invalid length.
[  272.616344][T16422] netlink: 772 bytes leftover after parsing attributes in process `syz.0.3087'.
[  272.619446][T16422] netlink: 'syz.0.3087': attribute type 3 has an invalid length.
[  272.804877][T16436] vlan2: entered allmulticast mode
[  272.806663][T16436] veth0_to_bond: entered allmulticast mode
[  272.966843][T16453] ..0{X: entered promiscuous mode
[  272.983774][T16455] bridge14: entered allmulticast mode
[  272.998863][T16456] bridge15: entered allmulticast mode
[  273.034467][T16461] syzkaller0: entered promiscuous mode
[  273.036281][T16461] syzkaller0: entered allmulticast mode
[  273.208718][T16467] smc: adding net device wlan0 with user defined pnetid SYZ0
[  273.247698][T16467] ip6_vti0: Caught tx_queue_len zero misconfig
[  273.467038][T16480] macvlan7: entered promiscuous mode
[  273.468960][T16480] macvlan7: entered allmulticast mode
[  273.470975][T16480] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode
[  273.537196][T16487] pim6reg0: tun_chr_ioctl cmd 1074025677
[  273.539182][T16487] pim6reg0: linktype set to 804
[  273.542929][T16487] netlink: 'syz.2.3109': attribute type 29 has an invalid length.
[  273.546386][T16487] netlink: 'syz.2.3109': attribute type 29 has an invalid length.
[  273.573534][T16487] syzkaller1: entered promiscuous mode
[  273.575807][T16487] syzkaller1: entered allmulticast mode
[  273.583827][T16487] unsupported nla_type 58
[  273.735405][T16499] IPVS: length: 132 != 8
[  273.740665][T16497] tap0: tun_chr_ioctl cmd 35111
[  273.819153][T16501] x_tables: duplicate underflow at hook 2
[  273.980781][T16514] veth0: entered promiscuous mode
[  274.005398][T16514] veth0 (unregistering): left promiscuous mode
[  274.229159][T16539] nbd: must specify an index to disconnect
[  274.233956][T16542] xt_ecn: cannot match TCP bits for non-tcp packets
[  274.239829][T16542] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.286060][T16542] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.345128][T16542] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.366596][T16553] netlink: 'syz.0.3127': attribute type 16 has an invalid length.
[  274.369043][T16553] netlink: 'syz.0.3127': attribute type 17 has an invalid length.
[  274.386393][T16553] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.390886][T16553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  274.400832][T16542] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.439290][T14856] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.446607][T14856] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.454563][T14856] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.463150][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.542583][T16558] bond17: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  274.546724][T16558] bond17 (unregistering): Released all slaves
[  274.931100][T16584] bridge18: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  274.945079][T16586] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  275.213110][T16605] bond17: option resend_igmp: invalid value (2878)
[  275.215980][T16605] bond17: option resend_igmp: allowed values 0 - 255
[  275.220140][T16605] bond17 (unregistering): Released all slaves
[  275.344369][T16610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.379740][T16610] tipc: Disabling bearer <eth:syzkaller0>
[  275.387028][T16617] bond12: option mode: unable to set because the bond device has slaves
[  275.389880][T16617] __nla_validate_parse: 24 callbacks suppressed
[  275.389911][T16617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3146'.
[  275.409120][T16619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3147'.
[  275.420393][T16622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3148'.
[  275.421162][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'.
[  275.429130][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3147'.
[  275.435625][T16619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3147'.
[  275.491092][T16622] lo speed is unknown, defaulting to 1000
[  275.524071][T16625] lo speed is unknown, defaulting to 1000
[  275.544581][T16628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3148'.
[  275.576019][T16630] bond17: ARP target 9.0.0.0 is already present
[  275.578126][T16630] bond17: option arp_ip_target: invalid value (9)
[  275.583793][T16630] bond17 (unregistering): Released all slaves
[  275.779228][T16622] wg1 speed is unknown, defaulting to 1000
[  275.875034][T16640] gretap0: entered allmulticast mode
[  276.027431][T16625] wg1 speed is unknown, defaulting to 1000
[  276.349988][T16673] netlink: 'syz.1.3158': attribute type 4 has an invalid length.
[  276.410017][T16678] gretap0: entered allmulticast mode
[  276.538055][T16689] lo speed is unknown, defaulting to 1000
[  276.596646][T16698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3162'.
[  276.599677][T16698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3162'.
[  276.603173][T16698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3162'.
[  276.704131][T16700] gtp4: entered promiscuous mode
[  276.705908][T16700] gtp4: entered allmulticast mode
[  276.708046][T16700] team0: Port device gtp4 added
[  276.806711][T16689] wg1 speed is unknown, defaulting to 1000
[  276.885092][T16705] netlink: 'syz.0.3166': attribute type 21 has an invalid length.
[  277.071620][T16719] gtp1: entered promiscuous mode
[  277.074093][T16719] team0: Device gtp1 is of different type
[  277.166189][T16726] netlink: 'syz.2.3173': attribute type 1 has an invalid length.
[  277.182663][T16726] 8021q: adding VLAN 0 to HW filter on device bond21
[  277.197610][T16726] bond21: (slave veth23): Enslaving as an active interface with a down link
[  277.205955][T16727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.208416][T16727] bond21: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  277.475140][T16746] lo speed is unknown, defaulting to 1000
[  277.527271][T16748] netlink: 'syz.1.3179': attribute type 3 has an invalid length.
[  277.779815][T16746] wg1 speed is unknown, defaulting to 1000
[  277.927035][T16765] IPVS: set_ctl: invalid protocol: 108 172.30.1.2:20004
[  278.625101][T16792] netlink: 'syz.0.3193': attribute type 13 has an invalid length.
[  279.008339][T16807] bond1: left promiscuous mode
[  279.010400][T16807] wireguard0: left promiscuous mode
[  279.013147][T16807] ip6tnl1: left promiscuous mode
[  279.015262][T16807] gretap1: left promiscuous mode
[  279.017432][T16807] bond9: left promiscuous mode
[  279.019483][T16807] geneve2: left promiscuous mode
[  279.021597][T16807] geneve3: left promiscuous mode
[  279.025688][T16807] bond15: left promiscuous mode
[  279.027783][T16807] vlan0: left promiscuous mode
[  279.029748][T16807] bond0: left promiscuous mode
[  279.031952][T16807] gtp0: left promiscuous mode
[  279.034442][T16807] team0: left promiscuous mode
[  279.036379][T16807] gtp1: left promiscuous mode
[  279.038495][T16807] gtp2: left promiscuous mode
[  279.040504][T16807] gtp3: left promiscuous mode
[  279.043336][T16807] gtp4: left promiscuous mode
[  279.045473][T16807] team1: left promiscuous mode
[  279.048811][T16807] xfrm1: left promiscuous mode
[  279.051150][T16807] ipvlan1: left promiscuous mode
[  279.064629][T16807] vlan1: left promiscuous mode
[  279.066599][T16807] bond16: left promiscuous mode
[  279.283976][T16832] x_tables: ip_tables: icmp match: only valid for protocol 1
[  279.368402][T16843] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  279.371347][T16843] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  279.519624][T16850] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!!b.>nS#^'
[  279.527699][T16850] CPU: 0 UID: 0 PID: 16850 Comm: syz.2.3209 Not tainted syzkaller #0 PREEMPT(full) 
[  279.527718][T16850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  279.527726][T16850] Call Trace:
[  279.527732][T16850]  <TASK>
[  279.527737][T16850]  dump_stack_lvl+0xe8/0x150
[  279.527761][T16850]  sysfs_warn_dup+0x8e/0xa0
[  279.527775][T16850]  sysfs_do_create_link_sd+0xc0/0x110
[  279.527789][T16850]  device_add_class_symlinks+0x1cf/0x240
[  279.527812][T16850]  device_add+0x475/0xb70
[  279.527832][T16850]  wiphy_register+0x1d6c/0x2d50
[  279.527862][T16850]  ? __pfx_wiphy_register+0x10/0x10
[  279.527907][T16850]  ? __pfx_netdev_run_todo+0x10/0x10
[  279.527922][T16850]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  279.527943][T16850]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  279.527961][T16850]  ieee80211_register_hw+0x34d2/0x4150
[  279.527976][T16850]  ? __lock_acquire+0x6b5/0x2cf0
[  279.527999][T16850]  ? ieee80211_register_hw+0x14b1/0x4150
[  279.528020][T16850]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  279.528046][T16850]  ? __hrtimer_setup+0x181/0x200
[  279.528061][T16850]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  279.528078][T16850]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  279.528112][T16850]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  279.528123][T16850]  ? kstrndup+0xbf/0x160
[  279.528144][T16850]  hwsim_new_radio_nl+0xf35/0x1bd0
[  279.528191][T16850]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  279.528217][T16850]  ? rcu_is_watching+0x15/0xb0
[  279.528235][T16850]  ? __nla_parse+0x40/0x60
[  279.528251][T16850]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  279.528275][T16850]  genl_family_rcv_msg_doit+0x22a/0x330
[  279.528297][T16850]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  279.528324][T16850]  ? bpf_lsm_capable+0x9/0x20
[  279.528338][T16850]  ? security_capable+0x7e/0x2c0
[  279.528359][T16850]  genl_rcv_msg+0x61c/0x7a0
[  279.528380][T16850]  ? __pfx_genl_rcv_msg+0x10/0x10
[  279.528395][T16850]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  279.528418][T16850]  netlink_rcv_skb+0x232/0x4b0
[  279.528433][T16850]  ? __pfx_genl_rcv_msg+0x10/0x10
[  279.528450][T16850]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  279.528461][T16850]  ? genl_rcv+0x19/0x40
[  279.528490][T16850]  ? down_read+0x272/0x2e0
[  279.528504][T16850]  ? genl_rcv+0xd/0x40
[  279.528527][T16850]  genl_rcv+0x28/0x40
[  279.528542][T16850]  netlink_unicast+0x80f/0x9b0
[  279.528561][T16850]  ? __pfx_netlink_unicast+0x10/0x10
[  279.528576][T16850]  ? netlink_sendmsg+0x650/0xb40
[  279.528588][T16850]  ? skb_put+0x11b/0x210
[  279.528604][T16850]  netlink_sendmsg+0x813/0xb40
[  279.528625][T16850]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.528641][T16850]  ? aa_sock_msg_perm+0xf1/0x1b0
[  279.528659][T16850]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  279.528670][T16850]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.528685][T16850]  __sock_sendmsg+0x21c/0x270
[  279.528703][T16850]  ____sys_sendmsg+0x4d7/0x810
[  279.528716][T16850]  ? __might_fault+0xaf/0x130
[  279.528739][T16850]  ? __pfx_____sys_sendmsg+0x10/0x10
[  279.528758][T16850]  ? import_iovec+0x73/0xa0
[  279.528773][T16850]  ___sys_sendmsg+0x2a5/0x360
[  279.528784][T16850]  ? __lock_acquire+0x6b5/0x2cf0
[  279.528799][T16850]  ? __pfx____sys_sendmsg+0x10/0x10
[  279.528813][T16850]  ? futex_wait+0x29a/0x380
[  279.528845][T16850]  ? __fget_files+0x2a/0x420
[  279.528859][T16850]  ? __fget_files+0x3a0/0x420
[  279.528905][T16850]  __x64_sys_sendmsg+0x1bd/0x2a0
[  279.528921][T16850]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  279.528951][T16850]  do_syscall_64+0xe2/0xf80
[  279.528964][T16850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.528975][T16850]  ? trace_irq_disable+0x37/0x100
[  279.528992][T16850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.529002][T16850] RIP: 0033:0x7f308659acb9
[  279.529014][T16850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.529023][T16850] RSP: 002b:00007f308740a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  279.529038][T16850] RAX: ffffffffffffffda RBX: 00007f3086815fa0 RCX: 00007f308659acb9
[  279.529045][T16850] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007
[  279.529053][T16850] RBP: 00007f3086608bf7 R08: 0000000000000000 R09: 0000000000000000
[  279.529061][T16850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.529068][T16850] R13: 00007f3086816038 R14: 00007f3086815fa0 R15: 00007ffc63d0e958
[  279.529088][T16850]  </TASK>
[  279.764613][T16858] gretap0: mtu less than device minimum
[  279.791346][T16860] gtp1: entered promiscuous mode
[  279.795014][T16860] team0: Device gtp1 is of different type
[  280.766927][T16936] netlink: 'syz.1.3234': attribute type 1 has an invalid length.
[  280.770510][T16936] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR
[  280.819294][T16945] IPVS: length: 132 != 8
[  280.828889][T16945] pimreg: entered allmulticast mode
[  280.865376][T16948] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  281.356139][T16964] xt_policy: output policy not valid in PREROUTING and INPUT
[  281.385736][T16960] lo speed is unknown, defaulting to 1000
[  281.539949][T16971] __nla_validate_parse: 106 callbacks suppressed
[  281.539965][T16971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3244'.
[  281.602293][T16960] wg1 speed is unknown, defaulting to 1000
[  281.730484][T16982] netlink: 'syz.2.3249': attribute type 10 has an invalid length.
[  281.735214][T16982] bond0: (slave dummy0): Releasing backup interface
[  281.746586][T16982] dummy0: left promiscuous mode
[  281.756535][T16982] dummy0: entered promiscuous mode
[  281.759640][T16982] team0: Port device dummy0 added
[  281.770150][T16982] netlink: 'syz.2.3249': attribute type 10 has an invalid length.
[  281.783064][T16982] dummy0: left promiscuous mode
[  281.790574][T16982] team0: Port device dummy0 removed
[  281.798585][T16982] dummy0: entered promiscuous mode
[  281.800667][T16982] bond0: (slave dummy0): Enslaving as an active interface with a down link
[  281.902744][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3250'.
[  281.912214][T16990] sit0: Master is either lo or non-ether device
[  281.923173][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3250'.
[  281.926726][T16990] sit0: Master is either lo or non-ether device
[  282.064473][T16998] netlink: 'syz.1.3252': attribute type 4 has an invalid length.
[  282.067750][T16998] netlink: 'syz.1.3252': attribute type 8 has an invalid length.
[  282.070976][T16998] netlink: 'syz.1.3252': attribute type 1 has an invalid length.
[  282.074501][T16998] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3252'.
[  282.078260][T16998] NCSI netlink: No device for ifindex 3282240187
[  282.080894][T16997] netlink: 'syz.1.3252': attribute type 4 has an invalid length.
[  282.103251][T16997] netlink: 'syz.1.3252': attribute type 8 has an invalid length.
[  282.106344][T16997] netlink: 'syz.1.3252': attribute type 1 has an invalid length.
[  282.109551][T16997] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3252'.
[  282.114470][T16997] NCSI netlink: No device for ifindex 3282240187
[  282.215425][T17002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3253'.
[  282.235919][T17004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3254'.
[  282.240051][T17004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3254'.
[  282.275831][T17006] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3255'.
[  282.311164][T17006] lo speed is unknown, defaulting to 1000
[  282.612213][T17019] gtp5: entered allmulticast mode
[  282.615319][T17019] team0: Port device gtp5 added
[  282.634486][T17019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3259'.
[  282.668399][T17006] wg1 speed is unknown, defaulting to 1000
[  282.772477][T17027] netlink: 'syz.1.3262': attribute type 11 has an invalid length.
[  283.024262][T17036] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.067903][T17036] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.123631][T17036] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.191163][T17036] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.333802][ T8630] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  283.392775][ T8630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  283.398201][ T8630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  283.421328][ T8630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.627419][T17073] bridge0: entered promiscuous mode
[  283.629145][T17073] bridge0: entered allmulticast mode
[  283.679430][T17080] 8021q: VLANs not supported on caif0
[  283.710409][T17083] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  283.745027][T17085] lo speed is unknown, defaulting to 1000
[  283.808617][T17087] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2381054743/2381054745
[  283.813287][T17087] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2381054743/2381054745
[  283.816983][T17087] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2381054743/2381054745
[  283.942880][T17085] wg1 speed is unknown, defaulting to 1000
[  283.950171][T17090] lo speed is unknown, defaulting to 1000
[  283.953364][T17090] lo speed is unknown, defaulting to 1000
[  283.958237][T17090] lo speed is unknown, defaulting to 1000
[  283.976762][T17090] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  284.007382][T17090] lo speed is unknown, defaulting to 1000
[  284.011397][T17090] lo speed is unknown, defaulting to 1000
[  284.015473][T17090] lo speed is unknown, defaulting to 1000
[  284.019272][T17090] lo speed is unknown, defaulting to 1000
[  284.369662][T17101] bond27: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  284.374274][T17101] bond27 (unregistering): Released all slaves
[  284.814240][T17126] netlink: 'syz.0.3293': attribute type 1 has an invalid length.
[  284.988982][T17139] tipc: New replicast peer: 255.255.255.255
[  284.991283][T17139] tipc: Enabled bearer <udp:syz2>, priority 10
[  284.997925][T17139] netlink: 'syz.1.3298': attribute type 13 has an invalid length.
[  285.053241][T17146] xt_HMARK: spi-set and port-set can't be combined
[  285.100470][T17151] xt_ecn: cannot match TCP bits for non-tcp packets
[  285.283432][T17145] gtp6: entered allmulticast mode
[  285.285758][T17145] team0: Port device gtp6 added
[  285.292756][ T8630] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.302370][ T8630] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.305901][ T8630] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.309288][ T8630] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  285.366833][T17156] !: entered promiscuous mode
[  285.396535][T17163] lo speed is unknown, defaulting to 1000
[  285.447456][T17169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.685739][T17163] wg1 speed is unknown, defaulting to 1000
[  285.688405][T17163] lo speed is unknown, defaulting to 1000
[  285.696594][T17187] gtp1: entered promiscuous mode
[  285.698233][T17187] team0: Device gtp1 is of different type
[  285.928765][T17201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.940528][T17200] tipc: Disabling bearer <eth:syzkaller0>
[  286.325182][T17218] bond0: (slave sit0): Error: Device type is different from other slaves
[  286.521553][T17229] gtp4: entered promiscuous mode
[  286.523418][T17229] gtp4: entered allmulticast mode
[  286.525632][T17229] team0: Port device gtp4 added
[  286.703477][T17242] xt_ecn: cannot match TCP bits for non-tcp packets
[  286.835724][T17253] validate_nla: 3 callbacks suppressed
[  286.835735][T17253] netlink: 'syz.1.3333': attribute type 10 has an invalid length.
[  286.840490][T17253] __nla_validate_parse: 26 callbacks suppressed
[  286.840507][T17253] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3333'.
[  287.038311][T17256] 8021q: adding VLAN 0 to HW filter on device bond22
[  287.109812][T17272] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3338'.
[  287.198722][T17277] bond12: option mode: unable to set because the bond device has slaves
[  287.225694][T17284] lo speed is unknown, defaulting to 1000
[  287.273546][T17289] netlink: 'syz.1.3343': attribute type 10 has an invalid length.
[  287.276339][T17289] syz_tun: entered promiscuous mode
[  287.334114][T17289] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  287.375706][T17297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3345'.
[  287.387829][T17297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3345'.
[  287.460766][T17284] wg1 speed is unknown, defaulting to 1000
[  287.463569][T17284] lo speed is unknown, defaulting to 1000
[  287.581387][T17314] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3349'.
[  287.714984][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3352'.
[  287.821551][T17328] gretap1: entered allmulticast mode
[  287.834789][T17337] netlink: 'syz.2.3355': attribute type 1 has an invalid length.
[  287.847701][T17337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3355'.
[  287.947853][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3357'.
[  288.105710][T17355] lo speed is unknown, defaulting to 1000
[  288.151770][T17360] tipc: Resetting bearer <eth:tunl0>
[  288.166149][T17360] .70: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  288.304034][T17355] wg1 speed is unknown, defaulting to 1000
[  288.306703][T17355] lo speed is unknown, defaulting to 1000
[  288.339933][T17366] batadv_slave_0: entered allmulticast mode
[  288.533431][T17377] syzkaller0: entered promiscuous mode
[  288.535738][T17377] syzkaller0: entered allmulticast mode
[  288.547698][T17377] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  288.579125][T17379] netlink: 'syz.0.3365': attribute type 21 has an invalid length.
[  288.597927][T17379] netlink: 'syz.0.3365': attribute type 21 has an invalid length.
[  288.600950][T17379] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3365'.
[  288.753814][T17386] gtp7: entered allmulticast mode
[  288.756360][T17386] team0: Port device gtp7 added
[  288.764461][T17386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3367'.
[  289.020205][T17410] netlink: 'syz.2.3372': attribute type 13 has an invalid length.
[  289.182322][T17400] nbd: nbd0 already in use
[  289.602401][  T111] block nbd1: Possible stuck request ffff8881093b0000: control (read@0,1024B). Runtime 210 seconds
[  289.605765][  T111] block nbd1: Possible stuck request ffff8881093b0200: control (read@1024,1024B). Runtime 210 seconds
[  289.609214][  T111] block nbd1: Possible stuck request ffff8881093b0400: control (read@2048,1024B). Runtime 210 seconds
[  289.612717][  T111] block nbd1: Possible stuck request ffff8881093b0600: control (read@3072,1024B). Runtime 210 seconds
[  289.746963][T17417] gtp1: entered promiscuous mode
[  289.749204][T17417] team0: Device gtp1 is of different type
[  289.850395][T17423] netlink: 'syz.1.3377': attribute type 8 has an invalid length.
[  290.005260][T17430] gretap6: entered promiscuous mode
[  290.371730][T17457] netlink: 'syz.2.3387': attribute type 3 has an invalid length.
[  290.375144][T17457] netlink: 'syz.2.3387': attribute type 3 has an invalid length.
[  290.436511][T17459] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  290.534427][T17470] syzkaller0: entered promiscuous mode
[  290.536411][T17470] syzkaller0: entered allmulticast mode
[  290.592174][T17472] .70: renamed from .71
[  290.595567][T17472] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  290.599270][T17472] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  290.605467][T17472] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  290.646620][T17474] gtp1: entered promiscuous mode
[  290.648591][T17474] team0: Device gtp1 is of different type
[  290.823205][T17482] netlink: 'syz.0.3396': attribute type 1 has an invalid length.
[  290.925592][T17491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.928703][T17491] syzkaller0: entered promiscuous mode
[  290.930600][T17491] syzkaller0: entered allmulticast mode
[  290.946811][T17491] tipc: Resetting bearer <eth:syzkaller0>
[  290.955153][T17490] tipc: Resetting bearer <eth:syzkaller0>
[  290.966127][T17490] tipc: Disabling bearer <eth:syzkaller0>
[  291.095877][T17499] gtp8: entered allmulticast mode
[  291.098975][T17499] team0: Port device gtp8 added
[  291.174302][T17503] 8021q: adding VLAN 0 to HW filter on device bond19
[  291.177693][T17503] bond18: (slave bond19): making interface the new active one
[  291.180445][T17503] bond18: (slave bond19): Enslaving as an active interface with an up link
[  291.183858][T17506] syzkaller0: entered promiscuous mode
[  291.185591][T17506] syzkaller0: entered allmulticast mode
[  291.195358][T17503] 8021q: adding VLAN 0 to HW filter on device bond18
[  291.458498][T17522] gtp9: entered allmulticast mode
[  291.460874][T17522] team0: Port device gtp9 added
[  291.538212][T17528] sit2: entered promiscuous mode
[  291.540234][T17528] sit2: entered allmulticast mode
[  291.713530][T17539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  291.716387][T17539] IPv6: NLM_F_CREATE should be set when creating new route
[  291.831048][T17550] gretap1: entered allmulticast mode
[  291.839698][T17550] bond27: (slave gretap1): making interface the new active one
[  291.847308][T17550] bond27: (slave gretap1): Enslaving as an active interface with an up link
[  291.882587][T17556] __nla_validate_parse: 22 callbacks suppressed
[  291.882601][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3422'.
[  291.923752][T17556] validate_nla: 5 callbacks suppressed
[  291.923779][T17556] netlink: 'syz.1.3422': attribute type 5 has an invalid length.
[  291.933925][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3422'.
[  291.984512][T17563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3425'.
[  291.984903][T17565] netlink: 476 bytes leftover after parsing attributes in process `syz.1.3426'.
[  292.031600][T17570] sy: rxe_newlink: already configured on bond_slave_0
[  292.033900][T17569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3428'.
[  292.093849][T17574] sctp: [Deprecated]: syz.1.3430 (pid 17574) Use of int in maxseg socket option.
[  292.093849][T17574] Use struct sctp_assoc_value instead
[  292.094608][T17576] gtp10: entered allmulticast mode
[  292.100647][T17576] team0: Port device gtp10 added
[  292.119341][T17576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3431'.
[  292.160758][T17578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3432'.
[  292.367932][T17600] syzkaller0: entered promiscuous mode
[  292.369662][T17600] syzkaller0: entered allmulticast mode
[  292.380260][T17602] gtp1: entered promiscuous mode
[  292.382663][T17602] team0: Device gtp1 is of different type
[  292.425072][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3439'.
[  292.518191][T17607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3441'.
[  293.040800][T17613] netlink: 'syz.0.3443': attribute type 13 has an invalid length.
[  293.096730][T17614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3443'.
[  293.538288][T17618] lo speed is unknown, defaulting to 1000
[  293.558191][T17623] team0: No ports can be present during mode change
[  293.599892][T17628] netlink: 'syz.1.3447': attribute type 1 has an invalid length.
[  293.603398][T17628] netlink: 'syz.1.3447': attribute type 4 has an invalid length.
[  293.612390][T17628] netlink: 'syz.1.3447': attribute type 1 has an invalid length.
[  293.613184][T17626] netlink: 'syz.2.3444': attribute type 1 has an invalid length.
[  293.615636][T17628] netlink: 'syz.1.3447': attribute type 4 has an invalid length.
[  293.631772][T17628] dvmrp1: entered allmulticast mode
[  293.653737][T17628] pimreg: left allmulticast mode
[  293.655933][T17628] dvmrp1: left allmulticast mode
[  293.770938][T17632] netlink: 'syz.1.3449': attribute type 1 has an invalid length.
[  293.837943][T17618] wg1 speed is unknown, defaulting to 1000
[  293.841592][T17618] lo speed is unknown, defaulting to 1000
[  294.162245][T17657] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) !
[  294.245835][T17668] gtp5: entered promiscuous mode
[  294.247470][T17668] gtp5: entered allmulticast mode
[  294.249457][T17668] team0: Port device gtp5 added
[  294.263733][T17670] m1Ie5n: entered promiscuous mode
[  294.470505][T17702] openvswitch: netlink: Unknown key attributes 2
[  294.508941][T17704] syzkaller1: entered promiscuous mode
[  294.510788][T17704] syzkaller1: entered allmulticast mode
[  294.514711][T17702] netlink: 'syz.0.3470': attribute type 7 has an invalid length.
[  294.517209][T17702] netlink: 'syz.0.3470': attribute type 8 has an invalid length.
[  294.548406][T17699] lo speed is unknown, defaulting to 1000
[  294.555506][T17709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.559721][T17710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.580860][T17705] lo speed is unknown, defaulting to 1000
[  294.593044][T17709] syzkaller1: tun_chr_ioctl cmd 1074025677
[  294.595038][T17709] syzkaller1: Linktype set failed because interface is up
[  294.695102][T17714] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  294.836549][T17699] wg1 speed is unknown, defaulting to 1000
[  294.839097][T17699] lo speed is unknown, defaulting to 1000
[  295.017523][T17705] wg1 speed is unknown, defaulting to 1000
[  295.020009][T17705] lo speed is unknown, defaulting to 1000
[  295.352042][T17744] xt_ecn: cannot match TCP bits for non-tcp packets
[  295.620596][T17754] lo speed is unknown, defaulting to 1000
[  295.835891][T17754] wg1 speed is unknown, defaulting to 1000
[  295.838441][T17754] lo speed is unknown, defaulting to 1000
[  296.087275][T17787] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.089897][T17787] syzkaller0: entered promiscuous mode
[  296.091506][T17787] syzkaller0: entered allmulticast mode
[  296.135250][T17787] tipc: Resetting bearer <eth:syzkaller0>
[  296.140353][T17786] tipc: Resetting bearer <eth:syzkaller0>
[  296.166930][T17786] tipc: Disabling bearer <eth:syzkaller0>
[  296.180838][T17797] bridge20: entered allmulticast mode
[  296.203831][T17778] lo speed is unknown, defaulting to 1000
[  296.385251][T17778] wg1 speed is unknown, defaulting to 1000
[  296.388131][T17778] lo speed is unknown, defaulting to 1000
[  296.509108][T17809] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  296.515263][T17809] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  296.643409][   T61] block nbd0: Possible stuck request ffff888109360000: control (read@0,1024B). Runtime 150 seconds
[  296.647628][   T61] block nbd0: Possible stuck request ffff888109360200: control (read@1024,1024B). Runtime 150 seconds
[  296.652343][   T61] block nbd0: Possible stuck request ffff888109360400: control (read@2048,1024B). Runtime 150 seconds
[  296.656635][   T61] block nbd0: Possible stuck request ffff888109360600: control (read@3072,1024B). Runtime 150 seconds
[  296.916080][T17814] syzkaller0: entered promiscuous mode
[  296.918264][T17814] syzkaller0: entered allmulticast mode
[  297.176697][T17822] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  297.322905][T17830] bond23: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  297.328760][T17830] bond23 (unregistering): Released all slaves
[  297.394668][T17832] __nla_validate_parse: 37 callbacks suppressed
[  297.394688][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'.
[  297.435035][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3510'.
[  297.458179][T17834] validate_nla: 2 callbacks suppressed
[  297.458191][T17834] netlink: 'syz.1.3512': attribute type 14 has an invalid length.
[  297.462937][T17834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3512'.
[  297.467309][T17834] bond0: option xmit_hash_policy: invalid value (8)
[  297.506624][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'.
[  297.512054][T17839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3514'.
[  297.602545][T17844] netlink: 'syz.2.3515': attribute type 3 has an invalid length.
[  297.605330][T17844] netlink: 'syz.2.3515': attribute type 1 has an invalid length.
[  297.607898][T17844] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3515'.
[  297.615571][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3515'.
[  297.619470][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3515'.
[  297.675767][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3517'.
[  297.679120][T17847] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  297.682555][T17847] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  297.713590][T17854] SET target dimension over the limit!
[  297.744865][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3520'.
[  298.034031][T17880] lo speed is unknown, defaulting to 1000
[  298.156683][T17881] lo speed is unknown, defaulting to 1000
[  298.314298][T17880] wg1 speed is unknown, defaulting to 1000
[  298.323529][T17880] lo speed is unknown, defaulting to 1000
[  298.358189][T17888] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  298.451268][T17881] wg1 speed is unknown, defaulting to 1000
[  298.454083][T17881] lo speed is unknown, defaulting to 1000
[  298.747071][T17903] xt_bpf: check failed: parse error
[  298.815287][T17908] netlink: 'syz.1.3534': attribute type 1 has an invalid length.
[  298.915341][T17914] netlink: 'syz.0.3536': attribute type 4 has an invalid length.
[  299.003380][T17921] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  299.006980][T17921] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  299.141410][T17926] syzkaller0: entered promiscuous mode
[  299.145216][T17926] syzkaller0: entered allmulticast mode
[  299.159847][T17926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.184309][T17926] tipc: Resetting bearer <eth:syzkaller0>
[  299.186291][T17926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.189237][T17926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.193606][T17924] tipc: Resetting bearer <eth:syzkaller0>
[  299.252758][T17924] tipc: Disabling bearer <eth:syzkaller0>
[  299.427431][T17934] lo speed is unknown, defaulting to 1000
[  299.760999][T17934] wg1 speed is unknown, defaulting to 1000
[  299.764251][T17934] lo speed is unknown, defaulting to 1000
[  299.925488][T17949] netlink: 'syz.2.3545': attribute type 1 has an invalid length.
[  299.945521][T17946] lo speed is unknown, defaulting to 1000
[  299.972048][T17949] veth31: entered promiscuous mode
[  299.991229][T17950] gretap2: entered promiscuous mode
[  299.994040][T17950] batman_adv: batadv0: Adding interface: gretap2
[  299.996543][T17950] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532.
[  300.007386][T17950] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
[  300.058596][T17952] vlan4: entered promiscuous mode
[  300.060239][T17952] bridge0: entered promiscuous mode
[  300.136080][T17952] netlink: 'syz.2.3546': attribute type 11 has an invalid length.
[  300.163372][T17946] wg1 speed is unknown, defaulting to 1000
[  300.166326][T17946] lo speed is unknown, defaulting to 1000
[  300.280122][T14856] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.282965][T14856] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.289464][T14856] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  300.296518][T14856] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  300.595597][T17973] openvswitch: netlink: IP tunnel TTL not specified.
[  300.699106][T17991] syzkaller0: entered promiscuous mode
[  300.701909][T17991] syzkaller0: entered allmulticast mode
[  300.747175][T17994] netlink: 'syz.0.3561': attribute type 39 has an invalid length.
[  300.747177][T17993] netlink: 'syz.0.3561': attribute type 39 has an invalid length.
[  300.789824][T17994] netlink: 'syz.0.3561': attribute type 5 has an invalid length.
[  301.057705][T18004] lo speed is unknown, defaulting to 1000
[  301.305863][T18004] wg1 speed is unknown, defaulting to 1000
[  301.308400][T18004] lo speed is unknown, defaulting to 1000
[  301.547927][T18044] bond20: (slave bridge21): Enslaving as an active interface with an up link
[  301.689716][T18060] vti0: entered promiscuous mode
[  302.576160][T18121] __nla_validate_parse: 38 callbacks suppressed
[  302.576178][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'.
[  302.596137][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'.
[  302.623544][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3600'.
[  302.626337][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3600'.
[  302.629239][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3600'.
[  302.632892][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3600'.
[  302.636222][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3600'.
[  302.642004][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3600'.
[  302.649186][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3600'.
[  302.652294][T18122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3600'.
[  302.742392][T18130] lo speed is unknown, defaulting to 1000
[  302.922589][T18130] wg1 speed is unknown, defaulting to 1000
[  302.925275][T18130] lo speed is unknown, defaulting to 1000
[  303.305158][T18153] netlink: 'syz.0.3612': attribute type 1 has an invalid length.
[  303.333843][T18153] 8021q: adding VLAN 0 to HW filter on device batadv2
[  303.337064][T18153] bond21: (slave batadv2): making interface the new active one
[  303.341985][T18153] bond21: (slave batadv2): Enslaving as an active interface with an up link
[  303.366820][T18154] 8021q: adding VLAN 0 to HW filter on device batadv3
[  303.370241][T18154] bond21: (slave batadv3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  303.405386][T18160] netlink: 'syz.2.3614': attribute type 32 has an invalid length.
[  303.424823][T18160] bond23: option coupled_control: invalid value (12)
[  303.434402][T18160] bond23 (unregistering): Released all slaves
[  303.587154][T18171] netlink: 'syz.2.3617': attribute type 10 has an invalid length.
[  303.691445][T18171] lo speed is unknown, defaulting to 1000
[  303.887886][T18171] wg1 speed is unknown, defaulting to 1000
[  303.890531][T18171] lo speed is unknown, defaulting to 1000
[  304.105229][T18199] syzkaller1: entered promiscuous mode
[  304.107399][T18199] syzkaller1: entered allmulticast mode
[  304.258674][T18206] syzkaller1: entered promiscuous mode
[  304.260572][T18206] syzkaller1: entered allmulticast mode
[  304.273827][T18208] netlink: 'syz.0.3627': attribute type 2 has an invalid length.
[  304.284231][T18208] netlink: 'syz.0.3627': attribute type 2 has an invalid length.
[  304.382836][T18216] xt_hashlimit: size too large, truncated to 1048576
[  305.211776][T18327] netlink: 'syz.2.3645': attribute type 83 has an invalid length.
[  305.323108][T18224] workqueue: Failed to create a rescuer kthread for wq "bond89": -EINTR
[  305.367643][T18346] xt_ecn: cannot match TCP bits for non-tcp packets
[  305.378744][T18346] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.426370][T18346] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.477964][T18346] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.519096][T18346] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.609477][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  305.617713][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  305.637097][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  305.652081][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  305.704338][T18364] netlink: 'syz.1.3652': attribute type 5 has an invalid length.
[  305.785464][T18374] gtp11: entered allmulticast mode
[  305.787778][T18374] team0: Port device gtp11 added
[  306.001237][T18394] netlink: 'syz.1.3663': attribute type 39 has an invalid length.
[  306.075141][T18401] gtp1: entered promiscuous mode
[  306.078103][T18401] team0: Device gtp1 is of different type
[  306.152516][T18404] syzkaller0: entered promiscuous mode
[  306.154246][T18404] syzkaller0: entered allmulticast mode
[  306.347170][T18416] tap0: tun_chr_ioctl cmd 35111
[  306.851191][T18424] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  306.945122][T18431] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  307.037560][T18436] netlink: 'syz.0.3677': attribute type 39 has an invalid length.
[  307.058429][T18437] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  307.258857][   T34] audit: type=1800 audit(1769964340.001:7): pid=18442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3678" name="memory.events" dev="tmpfs" ino=6169 res=0 errno=0
[  307.373026][T18441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.379929][T18452] netlink: 'syz.1.3681': attribute type 1 has an invalid length.
[  307.630790][T18459] __nla_validate_parse: 105 callbacks suppressed
[  307.630805][T18459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3684'.
[  307.636873][T18459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3684'.
[  307.657652][T18459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3684'.
[  307.696110][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3685'.
[  307.704155][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  307.706789][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  307.709412][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  307.712005][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3685'.
[  307.713060][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  307.797438][   T34] audit: type=1804 audit(1769964340.541:8): pid=18471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3687" name="/newroot/1304/memory.events" dev="tmpfs" ino=6621 res=1 errno=0
[  307.806879][   T34] audit: type=1800 audit(1769964340.541:9): pid=18471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3687" name="memory.events" dev="tmpfs" ino=6621 res=0 errno=0
[  307.806944][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'.
[  307.914570][T18479] xt_hashlimit: max too large, truncated to 1048576
[  307.961948][T18481] bond22: entered promiscuous mode
[  307.963861][T18481] 8021q: adding VLAN 0 to HW filter on device bond22
[  307.979676][T18481] 8021q: adding VLAN 0 to HW filter on device bond23
[  307.984831][T18481] bond22: (slave bond23): making interface the new active one
[  307.987330][T18481] bond23: entered promiscuous mode
[  307.989590][T18481] bond22: (slave bond23): Enslaving as an active interface with an up link
[  308.194468][T18494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3694'.
[  308.289217][T18498] netlink: 'syz.0.3696': attribute type 11 has an invalid length.
[  308.438221][T18506] lo speed is unknown, defaulting to 1000
[  308.592376][T18506] wg1 speed is unknown, defaulting to 1000
[  308.594967][T18506] lo speed is unknown, defaulting to 1000
[  308.664822][T18510] syzkaller1: entered promiscuous mode
[  308.666691][T18510] syzkaller1: entered allmulticast mode
[  309.075579][T18528] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3706'.
[  309.315476][T18538] syzkaller0: entered promiscuous mode
[  309.317236][T18538] syzkaller0: entered allmulticast mode
[  309.363985][T18546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3711'.
[  309.437963][T18546] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3711'.
[  309.506215][T18549] xfrm3: entered allmulticast mode
[  309.637292][T18563] validate_nla: 3 callbacks suppressed
[  309.637305][T18563] netlink: 'syz.1.3718': attribute type 5 has an invalid length.
[  309.665157][T18571] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  309.668129][T18571] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  309.851374][T18593] netlink: 'syz.0.3726': attribute type 1 has an invalid length.
[  309.973364][T18595] Can't find ip_set type hash:i,port,ip
[  310.226603][T18618] bridge17: port 1(ip6gretap5) entered blocking state
[  310.229565][T18618] bridge17: port 1(ip6gretap5) entered disabled state
[  310.233206][T18618] ip6gretap5: entered allmulticast mode
[  310.237022][T18618] ip6gretap5: entered promiscuous mode
[  310.339273][T18621] Timeout policy `syz0' can only be used by L3 protocol number 33011
[  310.567195][T18627] bond0: (slave macvlan0): Opening slave failed
[  310.697237][T18631] lo speed is unknown, defaulting to 1000
[  310.729503][T18635] netlink: 'syz.2.3741': attribute type 5 has an invalid length.
[  310.736070][T18634] lo speed is unknown, defaulting to 1000
[  310.860275][T18636] netlink: 'syz.1.3742': attribute type 2 has an invalid length.
[  310.910955][T18631] wg1 speed is unknown, defaulting to 1000
[  310.913763][T18631] lo speed is unknown, defaulting to 1000
[  310.947527][T18637] netlink: 'syz.1.3742': attribute type 7 has an invalid length.
[  310.950848][T18637] netlink: 'syz.1.3742': attribute type 8 has an invalid length.
[  310.954154][T18637] netlink: 'syz.1.3742': attribute type 9 has an invalid length.
[  311.046492][T18644] netlink: 'syz.0.3745': attribute type 1 has an invalid length.
[  311.100939][T18644] 8021q: adding VLAN 0 to HW filter on device bond24
[  311.135499][T18648] 8021q: adding VLAN 0 to HW filter on device bond24
[  311.139336][T18648] bond24: (slave vxcan7): The slave device specified does not support setting the MAC address
[  311.148011][T18648] bond24: (slave vxcan7): Error -95 calling set_mac_address
[  311.153645][T18642] netlink: 'syz.2.3744': attribute type 1 has an invalid length.
[  311.175687][T18644] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode
[  311.179238][T18644] bond24: (slave wlan0): Opening slave failed
[  311.214779][T18634] wg1 speed is unknown, defaulting to 1000
[  311.245472][T18651] vti0: entered promiscuous mode
[  311.247079][T18651] vti0: entered allmulticast mode
[  311.248915][T18634] lo speed is unknown, defaulting to 1000
[  312.390700][T18746] pimreg: tun_chr_ioctl cmd 1074812117
[  312.523103][T18749] netlink: 'syz.1.3773': attribute type 1 has an invalid length.
[  312.580618][T18759] x_tables: duplicate underflow at hook 3
[  312.747682][T18774] sctp: [Deprecated]: syz.1.3779 (pid 18774) Use of int in max_burst socket option.
[  312.747682][T18774] Use struct sctp_assoc_value instead
[  312.822772][T18776] syzkaller0: entered promiscuous mode
[  312.825018][T18776] syzkaller0: entered allmulticast mode
[  312.847783][T18758] bond23: option arp_interval: invalid value (18446744073709551615)
[  312.851178][T18758] bond23: option arp_interval: allowed values 0 - 2147483647
[  312.856756][T18758] bond23 (unregistering): Released all slaves
[  313.133450][T18791] __nla_validate_parse: 22 callbacks suppressed
[  313.133467][T18791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3785'.
[  313.339920][T18795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3786'.
[  313.346215][T18795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3786'.
[  313.645508][T18799] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  313.651970][T18799] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  313.738914][T18813] geneve4: entered promiscuous mode
[  313.741450][T14856] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.747326][T14856] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.750012][T14856] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.753132][T14856] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.170031][T18834] xt_hashlimit: max too large, truncated to 1048576
[  314.177259][T18834] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  314.194271][   T24] lo speed is unknown, defaulting to 1000
[  314.196113][   T24] syz2: Port: 1 Link ACTIVE
[  314.359874][T18839] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3801'.
[  314.426378][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3803'.
[  314.442369][T18844] openvswitch: netlink: Flow actions attr not present in new flow.
[  314.446563][T18843] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  314.472420][T18847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3804'.
[  314.487309][T18849] sctp: [Deprecated]: syz.1.3805 (pid 18849) Use of int in max_burst socket option deprecated.
[  314.487309][T18849] Use struct sctp_assoc_value instead
[  314.567079][T18853] bond89: entered promiscuous mode
[  314.570353][T18853] 8021q: adding VLAN 0 to HW filter on device bond89
[  314.595382][T18853] bond89: (slave bridge18): making interface the new active one
[  314.598612][T18853] bridge18: entered promiscuous mode
[  314.601774][T18853] bond89: (slave bridge18): Enslaving as an active interface with an up link
[  314.657766][T18851] validate_nla: 7 callbacks suppressed
[  314.657782][T18851] netlink: 'syz.2.3806': attribute type 1 has an invalid length.
[  314.663477][T18851] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3806'.
[  314.795016][T18863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3811'.
[  314.798102][T18863] netlink: 'syz.1.3811': attribute type 7 has an invalid length.
[  314.800762][T18863] netlink: 'syz.1.3811': attribute type 8 has an invalid length.
[  314.804159][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3811'.
[  315.038214][T18871] lo speed is unknown, defaulting to 1000
[  315.077392][T18873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3813'.
[  315.270751][T18871] wg1 speed is unknown, defaulting to 1000
[  315.273395][T18871] lo speed is unknown, defaulting to 1000
[  315.576888][T18889] netlink: 'syz.0.3818': attribute type 1 has an invalid length.
[  315.633155][T18889] 8021q: adding VLAN 0 to HW filter on device bond25
[  315.644996][T18890] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  315.659336][T18890] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  315.723469][T18889] bond25: (slave veth13): Enslaving as an active interface with a down link
[  315.730222][T18889] netlink: 'syz.0.3818': attribute type 1 has an invalid length.
[  315.753369][T18889] 8021q: adding VLAN 0 to HW filter on device batadv3
[  315.755638][T18889] bond25: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  316.743036][T18903] lo speed is unknown, defaulting to 1000
[  316.783784][T18908] lo speed is unknown, defaulting to 1000
[  316.959448][T18903] wg1 speed is unknown, defaulting to 1000
[  316.969877][T18903] lo speed is unknown, defaulting to 1000
[  317.095368][T18908] wg1 speed is unknown, defaulting to 1000
[  317.105476][T18908] lo speed is unknown, defaulting to 1000
[  317.336448][T18931] netlink: 'syz.1.3832': attribute type 11 has an invalid length.
[  317.339027][T18931] netlink: 'syz.1.3832': attribute type 11 has an invalid length.
[  317.569467][T18938] syzkaller0: entered promiscuous mode
[  317.571632][T18938] syzkaller0: entered allmulticast mode
[  318.709151][T18945] lo speed is unknown, defaulting to 1000
[  318.776338][T18955] __nla_validate_parse: 14 callbacks suppressed
[  318.776351][T18955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3838'.
[  318.785228][T18954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3837'.
[  318.847080][T18957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.850238][T18957] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3839'.
[  318.859941][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3837'.
[  318.868416][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3837'.
[  318.882810][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3837'.
[  318.885673][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3837'.
[  318.888625][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3837'.
[  318.891514][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3837'.
[  318.900946][T18945] wg1 speed is unknown, defaulting to 1000
[  318.904061][T18945] lo speed is unknown, defaulting to 1000
[  318.927252][T18963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3841'.
[  318.962571][T18969] netlink: 'syz.1.3843': attribute type 10 has an invalid length.
[  318.994994][T18970] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  319.086971][T18978] netlink: 'syz.2.3846': attribute type 1 has an invalid length.
[  319.133212][T18978] bond23: entered promiscuous mode
[  319.134951][T18978] bond23: entered allmulticast mode
[  319.136894][T18978] 8021q: adding VLAN 0 to HW filter on device bond23
[  319.160429][T18978] erspan2: entered allmulticast mode
[  319.189444][T18978] bond23: (slave erspan2): making interface the new active one
[  319.192193][T18978] erspan2: entered promiscuous mode
[  319.194649][T18978] bond23: (slave erspan2): Enslaving as an active interface with an up link
[  319.563423][T19015] netlink: 'syz.1.3857': attribute type 12 has an invalid length.
[  319.689609][  T111] block nbd1: Possible stuck request ffff8881093b0000: control (read@0,1024B). Runtime 240 seconds
[  319.694336][  T111] block nbd1: Possible stuck request ffff8881093b0200: control (read@1024,1024B). Runtime 240 seconds
[  319.697761][  T111] block nbd1: Possible stuck request ffff8881093b0400: control (read@2048,1024B). Runtime 240 seconds
[  319.701084][  T111] block nbd1: Possible stuck request ffff8881093b0600: control (read@3072,1024B). Runtime 240 seconds
[  320.023153][T19042] netlink: 'syz.0.3865': attribute type 1 has an invalid length.
[  320.226437][T19056] lo speed is unknown, defaulting to 1000
[  320.368747][T19064] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  320.489955][T19057] lo speed is unknown, defaulting to 1000
[  320.587192][T19056] wg1 speed is unknown, defaulting to 1000
[  320.604029][T19056] lo speed is unknown, defaulting to 1000
[  320.620125][T19075] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  320.803873][T19057] wg1 speed is unknown, defaulting to 1000
[  320.806455][T19057] lo speed is unknown, defaulting to 1000
[  320.916164][T19097] netlink: 'syz.1.3877': attribute type 1 has an invalid length.
[  321.009090][T19106] netlink: 'syz.0.3881': attribute type 4 has an invalid length.
[  321.117665][T19112] netlink: 'syz.2.3884': attribute type 1 has an invalid length.
[  321.120202][T19112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.212042][T19125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.239918][T19125] tipc: Disabling bearer <eth:syzkaller0>
[  321.566159][T19154] 8021q: adding VLAN 0 to HW filter on device bond24
[  321.674989][T19167] netlink: 'syz.2.3900': attribute type 1 has an invalid length.
[  321.683196][T19165] syzkaller0: entered promiscuous mode
[  321.684997][T19165] syzkaller0: entered allmulticast mode
[  321.690571][T19167] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.705510][T19167] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.796001][T19183] syzkaller0: entered promiscuous mode
[  322.797816][T19183] syzkaller0: entered allmulticast mode
[  322.805544][T19183] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  322.811151][T19167] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.836009][T19185] tipc: Bearer <eth:syzkaller0>: already 2 bearers with priority 10
[  322.839256][T19185] tipc: Bearer <eth:syzkaller0>: trying with adjusted priority
[  322.843955][T19185] tipc: Enabled bearer <eth:syzkaller0>, priority 9
[  322.847457][T19186] syzkaller0: entered promiscuous mode
[  322.849854][T19186] syzkaller0: entered allmulticast mode
[  322.856550][T19167] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  322.870927][T19186] tipc: Resetting bearer <eth:syzkaller0>
[  322.894443][T19186] tipc: Disabling bearer <eth:syzkaller0>
[  322.953374][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  322.960083][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  322.966903][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  322.989916][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  323.045425][T19198] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  323.140345][T19200] netlink: 'syz.0.3911': attribute type 1 has an invalid length.
[  323.360477][T19208] pim6reg: entered allmulticast mode
[  323.380870][T19209] pim6reg: left allmulticast mode
[  323.579321][T19223] macsec1: entered allmulticast mode
[  323.581386][T19223] dummy0: entered allmulticast mode
[  323.585077][T19223] dummy0: left allmulticast mode
[  323.674106][T19227] vlan2: entered allmulticast mode
[  323.703947][T19227] bond0 (unregistering): Released all slaves
[  323.810060][T19230] lo speed is unknown, defaulting to 1000
[  323.850099][T19236] netlink: 'syz.0.3921': attribute type 11 has an invalid length.
[  323.855538][T19236] __nla_validate_parse: 14 callbacks suppressed
[  323.855551][T19236] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3921'.
[  323.998296][T19243] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3924'.
[  324.108345][T19245] netlink: 'syz.1.3925': attribute type 1 has an invalid length.
[  324.110907][T19245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3925'.
[  324.136648][T19230] wg1 speed is unknown, defaulting to 1000
[  324.140399][T19230] lo speed is unknown, defaulting to 1000
[  324.286305][T19252] tipc: Trying to set illegal importance in message
[  324.441008][T19273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3933'.
[  324.485977][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'.
[  324.570321][T19279] lo speed is unknown, defaulting to 1000
[  324.587211][T19280] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3935'.
[  324.648447][T19290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3939'.
[  324.687767][T19293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  324.694869][T19293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3941'.
[  324.707321][T19293] 8021q: adding VLAN 0 to HW filter on device bond90
[  324.715149][T19293] bond90: entered allmulticast mode
[  324.735339][T19293] bridge19: entered allmulticast mode
[  324.737628][T19293] bond90: (slave bridge19): Enslaving as an active interface with an up link
[  324.948696][T19320] netlink: 'syz.1.3946': attribute type 21 has an invalid length.
[  324.951542][T19320] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3946'.
[  324.963934][T19279] wg1 speed is unknown, defaulting to 1000
[  324.966721][T19279] lo speed is unknown, defaulting to 1000
[  325.083951][T19332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3950'.
[  325.644289][T19371] lo speed is unknown, defaulting to 1000
[  325.857990][T19388] syzkaller1: entered promiscuous mode
[  325.860233][T19388] syzkaller1: entered allmulticast mode
[  325.920963][T19371] wg1 speed is unknown, defaulting to 1000
[  325.925471][T19371] lo speed is unknown, defaulting to 1000
[  326.224554][T19395] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  326.230648][T19395] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  326.349442][T19408] netlink: 'syz.0.3976': attribute type 29 has an invalid length.
[  326.353089][T19408] netlink: 'syz.0.3976': attribute type 29 has an invalid length.
[  326.432840][T19415] macsec0: entered allmulticast mode
[  326.435004][T19415] veth1_macvtap: entered allmulticast mode
[  326.436762][T19415] macsec0: left allmulticast mode
[  326.438357][T19415] veth1_macvtap: left allmulticast mode
[  326.509953][T19419] xt_l2tp: v2 sid > 0xffff: 4294967293
[  326.722246][   T61] block nbd0: Possible stuck request ffff888109360000: control (read@0,1024B). Runtime 180 seconds
[  326.726597][   T61] block nbd0: Possible stuck request ffff888109360200: control (read@1024,1024B). Runtime 180 seconds
[  326.731070][   T61] block nbd0: Possible stuck request ffff888109360400: control (read@2048,1024B). Runtime 180 seconds
[  326.735789][   T61] block nbd0: Possible stuck request ffff888109360600: control (read@3072,1024B). Runtime 180 seconds
[  327.166992][T19426] netlink: 'syz.2.3982': attribute type 2 has an invalid length.
[  327.170426][T19427] netlink: 'syz.2.3982': attribute type 2 has an invalid length.
[  327.232647][T19433] lo speed is unknown, defaulting to 1000
[  327.398994][T19433] wg1 speed is unknown, defaulting to 1000
[  327.401385][T19433] lo speed is unknown, defaulting to 1000
[  327.506433][T19444] lo speed is unknown, defaulting to 1000
[  327.597855][T19449] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  327.612060][T19449] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  327.628884][T19451] netlink: 'syz.2.3990': attribute type 1 has an invalid length.
[  327.631769][T19452] netlink: 'syz.2.3990': attribute type 1 has an invalid length.
[  327.650317][T19445] netlink: 'syz.0.3987': attribute type 2 has an invalid length.
[  327.655771][T19451] 8021q: adding VLAN 0 to HW filter on device bond25
[  327.703352][T19458] tipc: Resetting bearer <eth:tunl0>
[  327.747333][   T24] lo speed is unknown, defaulting to 1000
[  327.749449][T11738] wg1 speed is unknown, defaulting to 1000
[  327.867058][T19444] wg1 speed is unknown, defaulting to 1000
[  327.870010][T19444] lo speed is unknown, defaulting to 1000
[  328.280826][T19477] netlink: 'syz.0.3996': attribute type 1 has an invalid length.
[  328.326119][T19477] bond0: (slave vxcan7): The slave device specified does not support setting the MAC address
[  328.329392][T19477] bond0: (slave vxcan7): Setting fail_over_mac to active for active-backup mode
[  328.335304][T19477] bond0: (slave vxcan7): making interface the new active one
[  328.337948][T19477] bond0: (slave vxcan7): Enslaving as an active interface with an up link
[  328.343320][T19477] bond0 (unregistering): (slave vxcan7): Releasing backup interface
[  328.347371][T19477] bond0 (unregistering): Released all slaves
[  328.519351][T19487] lo speed is unknown, defaulting to 1000
[  328.520876][T19456] delete_channel: no stack
[  328.609687][T19498] syzkaller0: entered promiscuous mode
[  328.611372][T19498] syzkaller0: entered allmulticast mode
[  328.791589][T19487] wg1 speed is unknown, defaulting to 1000
[  328.795852][T19487] lo speed is unknown, defaulting to 1000
[  328.798697][T19507] netlink: 'syz.0.4005': attribute type 1 has an invalid length.
[  328.881550][T19513] sctp: [Deprecated]: syz.0.4007 (pid 19513) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.881550][T19513] Use struct sctp_sack_info instead
[  329.432306][T19526] __nla_validate_parse: 21 callbacks suppressed
[  329.432316][T19526] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4011'.
[  329.439873][T19526] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4011'.
[  329.443103][T19526] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4011'.
[  329.498593][T19528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4012'.
[  329.769539][T19543] gtp6: entered promiscuous mode
[  329.771332][T19543] gtp6: entered allmulticast mode
[  329.773710][T19543] team0: Port device gtp6 added
[  329.775620][T19541] tap0: tun_chr_ioctl cmd 2147767506
[  329.779021][T19543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4017'.
[  329.808840][T19545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4018'.
[  329.877966][T19549] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4020'.
[  329.908250][T19549] lo speed is unknown, defaulting to 1000
[  330.018077][T19559] lo speed is unknown, defaulting to 1000
[  330.027895][T19563] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4024'.
[  330.120591][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4027'.
[  330.125575][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4027'.
[  330.205748][T19549] wg1 speed is unknown, defaulting to 1000
[  330.208352][T19549] lo speed is unknown, defaulting to 1000
[  330.347012][T19559] wg1 speed is unknown, defaulting to 1000
[  330.349980][T19559] lo speed is unknown, defaulting to 1000
[  330.862440][T19595] lo: entered allmulticast mode
[  330.864284][T19595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  330.995158][T19599] tap0: tun_chr_ioctl cmd 35111
[  331.338278][T19628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  331.341538][T19632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  331.345246][T19635] netlink: 'syz.2.4047': attribute type 10 has an invalid length.
[  331.435987][T19647] syzkaller1: entered promiscuous mode
[  331.442100][T19647] syzkaller1: entered allmulticast mode
[  331.643746][T19664] xt_ecn: cannot match TCP bits for non-tcp packets
[  332.106569][T19698] netlink: 'syz.0.4066': attribute type 10 has an invalid length.
[  332.117710][T19698] netlink: 'syz.0.4066': attribute type 1 has an invalid length.
[  332.166356][T19700] netlink: 'syz.0.4067': attribute type 1 has an invalid length.
[  332.218911][T19702] netlink: 'syz.1.4068': attribute type 13 has an invalid length.
[  332.338544][  T784] lo speed is unknown, defaulting to 1000
[  332.340857][  T784] syz2: Port: 1 Link DOWN
[  332.359164][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.361909][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.365682][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.368224][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  332.483356][T19716] gtp12: entered allmulticast mode
[  332.485475][T19716] team0: Port device gtp12 added
[  332.778494][T19726] netlink: 'syz.1.4076': attribute type 1 has an invalid length.
[  332.824970][T19726] 8021q: adding VLAN 0 to HW filter on device bond91
[  332.827685][T19735] mac80211_hwsim hwsim34 wlan0: default FDB implementation only supports local addresses
[  332.836989][T19736] bond91: (slave geneve6): making interface the new active one
[  332.840770][T19736] bond91: (slave geneve6): Enslaving as an active interface with an up link
[  332.844259][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.847183][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.872470][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.875121][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.055001][T19759] netlink: 'syz.0.4087': attribute type 5 has an invalid length.
[  333.057925][T19759] netlink: 'syz.0.4087': attribute type 5 has an invalid length.
[  333.143456][T19768] gtp13: entered allmulticast mode
[  333.145608][T19768] team0: Port device gtp13 added
[  333.299899][T19784] netlink: 'syz.2.4097': attribute type 20 has an invalid length.
[  333.306077][T19784] netlink: 'syz.2.4097': attribute type 20 has an invalid length.
[  333.364856][T19782] bond26: option miimon: invalid value (18446744073709551607)
[  333.369772][T19782] bond26: option miimon: allowed values 0 - 2147483647
[  333.377819][T19782] bond26 (unregistering): Released all slaves
[  333.400318][T19785] bond26: option miimon: invalid value (18446744073709551607)
[  333.422111][T19785] bond26: option miimon: allowed values 0 - 2147483647
[  333.425376][T19785] bond26 (unregistering): Released all slaves
[  333.455270][T19793] gtp1: entered promiscuous mode
[  333.456994][T19793] team0: Device gtp1 is of different type
[  333.493862][T19795] bond7: (slave lo): Releasing active interface
[  333.496357][T19795] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  333.499896][T19795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  333.505483][ T5542] lo speed is unknown, defaulting to 1000
[  333.507486][ T5542] syz0: Port: 1 Link DOWN
[  333.595838][T19810] x_tables: duplicate underflow at hook 4
[  333.647039][T19807] vlan0: entered promiscuous mode
[  333.649045][T19807] bond0: entered promiscuous mode
[  333.775827][T19825] netlink: 'syz.1.4105': attribute type 3 has an invalid length.
[  333.961281][T19834] xt_CT: No such helper "pptp"
[  334.768593][T19856] __nla_validate_parse: 40 callbacks suppressed
[  334.768607][T19856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4113'.
[  335.249917][T19865] lo speed is unknown, defaulting to 1000
[  335.296691][T19867] ipt_REJECT: TCP_RESET invalid for non-tcp
[  335.410927][T19865] wg1 speed is unknown, defaulting to 1000
[  335.414511][T19865] lo speed is unknown, defaulting to 1000
[  335.739950][T19875] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4117'.
[  335.769446][T14856] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.773223][T14856] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.776488][T14856] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.779798][T14856] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.793875][T19872] syzkaller1: entered promiscuous mode
[  335.795681][T19872] syzkaller1: entered allmulticast mode
[  336.146834][T19885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4121'.
[  336.294467][T19893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4124'.
[  336.398706][T19900] gtp1: entered promiscuous mode
[  336.400984][T19900] team0: Device gtp1 is of different type
[  336.456361][T19901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4126'.
[  336.622281][T19912] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4130'.
[  336.716493][T19915] bond26: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  336.720559][T19915] bond26 (unregistering): Released all slaves
[  336.828343][T19917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4131'.
[  336.905809][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4133'.
[  337.020330][T19942] xt_addrtype: ipv6 does not support BROADCAST matching
[  337.267387][T19957] validate_nla: 2 callbacks suppressed
[  337.267402][T19957] netlink: 'syz.0.4142': attribute type 10 has an invalid length.
[  337.282139][T19957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4142'.
[  337.426921][T19972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4147'.
[  337.663588][T19979] syzkaller0: entered promiscuous mode
[  337.665419][T19979] syzkaller0: entered allmulticast mode
[  338.267767][T19992] syzkaller0: entered promiscuous mode
[  338.269985][T19992] syzkaller0: entered allmulticast mode
[  338.387384][T19996] gtp1: entered promiscuous mode
[  338.389484][T19996] team0: Device gtp1 is of different type
[  338.758092][T20009] block nbd5: Unsupported socket: should be TCP or UNIX.
[  338.813931][T20007] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  338.834890][T20007] delete_channel: no stack
[  338.870055][T20025] lo speed is unknown, defaulting to 1000
[  338.893818][T20028] vlan4: entered allmulticast mode
[  338.895412][T20028] bond0: entered allmulticast mode
[  338.896993][T20028] bond_slave_0: entered allmulticast mode
[  338.898733][T20028] bond_slave_1: entered allmulticast mode
[  338.900440][T20028] dummy0: entered allmulticast mode
[  338.935333][T20028] bond0 (unregistering): left promiscuous mode
[  338.937471][T20028] bond_slave_0: left promiscuous mode
[  338.939370][T20028] bond_slave_1: left promiscuous mode
[  338.941135][T20028] dummy0: left promiscuous mode
[  338.943990][T20028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  338.946722][T20028] bond_slave_0: left allmulticast mode
[  338.949112][T20028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  338.952314][T20028] bond_slave_1: left allmulticast mode
[  338.962314][T20028] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  338.965344][T20028] dummy0: left allmulticast mode
[  338.967436][T20028] bond0 (unregistering): Released all slaves
[  339.095210][T20025] wg1 speed is unknown, defaulting to 1000
[  339.097973][T20025] lo speed is unknown, defaulting to 1000
[  339.159435][T20039] netlink: 'syz.2.4167': attribute type 1 has an invalid length.
[  339.250221][T20041] netlink: 'syz.2.4168': attribute type 7 has an invalid length.
[  339.380219][T20048] syzkaller0: entered promiscuous mode
[  339.384421][T20048] syzkaller0: entered allmulticast mode
[  339.388529][T20048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.399698][T20047] tipc: Resetting bearer <eth:syzkaller0>
[  339.416182][T20047] tipc: Disabling bearer <eth:syzkaller0>
[  339.510235][T20052] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  341.068241][T20097] __nla_validate_parse: 12 callbacks suppressed
[  341.068256][T20097] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4185'.
[  341.719492][T20127] sctp: [Deprecated]: syz.2.4193 (pid 20127) Use of struct sctp_assoc_value in delayed_ack socket option.
[  341.719492][T20127] Use struct sctp_sack_info instead
[  341.813028][T20134] macvlan0: entered allmulticast mode
[  341.822858][T20134] macvlan0 (unregistering): left allmulticast mode
[  341.935908][T20136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4195'.
[  342.013395][T20137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4195'.
[  342.078036][T20140] netlink: 'syz.0.4196': attribute type 4 has an invalid length.
[  342.084236][T20140] netlink: 'syz.0.4196': attribute type 4 has an invalid length.
[  342.087404][T20140] netlink: 'syz.0.4196': attribute type 4 has an invalid length.
[  342.090513][T20140] netlink: 'syz.0.4196': attribute type 4 has an invalid length.
[  342.094128][T20140] netlink: 'syz.0.4196': attribute type 4 has an invalid length.
[  342.097239][T20140] netlink: 'syz.0.4196': attribute type 4 has an invalid length.
[  342.100364][T20140] netlink: 'syz.0.4196': attribute type 4 has an invalid length.
[  342.225445][T20147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4199'.
[  342.354222][T20155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.357489][T20155] syzkaller0: entered promiscuous mode
[  342.359867][T20155] syzkaller0: entered allmulticast mode
[  342.379178][T20154] tipc: Resetting bearer <eth:syzkaller0>
[  342.391080][T20154] tipc: Disabling bearer <eth:syzkaller0>
[  342.488539][ T5252] udevd[5252]: worker [5815] /devices/virtual/block/nbd0 timeout; kill it
[  342.492345][ T5252] udevd[5252]: seq 15644 '/devices/virtual/block/nbd0' killed
[  342.626355][T20166] veth0: entered promiscuous mode
[  342.628541][T20166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4205'.
[  342.650144][T20166] veth0 (unregistering): left promiscuous mode
[  342.785197][T20173] validate_nla: 26 callbacks suppressed
[  342.785212][T20173] netlink: 'syz.0.4208': attribute type 4 has an invalid length.
[  342.817199][T20176] netlink: 'syz.2.4209': attribute type 8 has an invalid length.
[  342.821470][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4209'.
[  342.848954][T20173] 
[  342.849979][T20173] ======================================================
[  342.852761][T20173] WARNING: possible circular locking dependency detected
[  342.855558][T20173] syzkaller #0 Not tainted
[  342.857378][T20173] ------------------------------------------------------
[  342.860210][T20173] syz.0.4208/20173 is trying to acquire lock:
[  342.862647][T20173] ffffffff8f926f18 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  342.866351][T20173] 
[  342.866351][T20173] but task is already holding lock:
[  342.869348][T20173] ffffffff8f926eb8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  342.873180][T20173] 
[  342.873180][T20173] which lock already depends on the new lock.
[  342.873180][T20173] 
[  342.877326][T20173] 
[  342.877326][T20173] the existing dependency chain (in reverse order) is:
[  342.880842][T20173] 
[  342.880842][T20173] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  342.883871][T20173]        _raw_spin_lock_bh+0x36/0x50
[  342.885975][T20173]        nr_rt_ioctl+0x3e1/0xdf0
[  342.887840][T20173]        sock_do_ioctl+0x101/0x320
[  342.889871][T20173]        sock_ioctl+0x5c6/0x7f0
[  342.891833][T20173]        __se_sys_ioctl+0xfc/0x170
[  342.893769][T20173]        do_syscall_64+0xe2/0xf80
[  342.895694][T20173]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.898158][T20173] 
[  342.898158][T20173] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  342.901296][T20173]        _raw_spin_lock_bh+0x36/0x50
[  342.903370][T20173]        nr_rt_ioctl+0x1e4/0xdf0
[  342.905375][T20173]        sock_do_ioctl+0x101/0x320
[  342.907447][T20173]        sock_ioctl+0x5c6/0x7f0
[  342.909392][T20173]        __se_sys_ioctl+0xfc/0x170
[  342.911456][T20173]        do_syscall_64+0xe2/0xf80
[  342.913479][T20173]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.916004][T20173] 
[  342.916004][T20173] -> #0 (nr_node_list_lock){+...}-{3:3}:
[  342.919038][T20173]        __lock_acquire+0x15a5/0x2cf0
[  342.921132][T20173]        lock_acquire+0x106/0x330
[  342.923110][T20173]        _raw_spin_lock_bh+0x36/0x50
[  342.925205][T20173]        nr_rt_device_down+0xa9/0x720
[  342.927365][T20173]        nr_device_event+0x137/0x150
[  342.929417][T20173]        notifier_call_chain+0x19d/0x3a0
[  342.931659][T20173]        __dev_notify_flags+0x16d/0x310
[  342.933851][T20173]        netif_change_flags+0xe8/0x1a0
[  342.936034][T20173]        dev_change_flags+0x130/0x260
[  342.938131][T20173]        dev_ioctl+0x7b4/0x1150
[  342.940045][T20173]        sock_do_ioctl+0x23e/0x320
[  342.942040][T20173]        sock_ioctl+0x5c6/0x7f0
[  342.943908][T20173]        __se_sys_ioctl+0xfc/0x170
[  342.945949][T20173]        do_syscall_64+0xe2/0xf80
[  342.947985][T20173]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.950432][T20173] 
[  342.950432][T20173] other info that might help us debug this:
[  342.950432][T20173] 
[  342.954470][T20173] Chain exists of:
[  342.954470][T20173]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  342.954470][T20173] 
[  342.959881][T20173]  Possible unsafe locking scenario:
[  342.959881][T20173] 
[  342.962860][T20173]        CPU0                    CPU1
[  342.964924][T20173]        ----                    ----
[  342.966995][T20173]   lock(nr_neigh_list_lock);
[  342.968855][T20173]                                lock(&nr_node->node_lock);
[  342.971664][T20173]                                lock(nr_neigh_list_lock);
[  342.974561][T20173]   lock(nr_node_list_lock);
[  342.976422][T20173] 
[  342.976422][T20173]  *** DEADLOCK ***
[  342.976422][T20173] 
[  342.979613][T20173] 2 locks held by syz.0.4208/20173:
[  342.981716][T20173]  #0: ffffffff8f7a9ec8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  342.985109][T20173]  #1: ffffffff8f926eb8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  342.989020][T20173] 
[  342.989020][T20173] stack backtrace:
[  342.991381][T20173] CPU: 0 UID: 0 PID: 20173 Comm: syz.0.4208 Not tainted syzkaller #0 PREEMPT(full) 
[  342.991397][T20173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.991405][T20173] Call Trace:
[  342.991414][T20173]  <TASK>
[  342.991420][T20173]  dump_stack_lvl+0xe8/0x150
[  342.991439][T20173]  print_circular_bug+0x2e1/0x300
[  342.991458][T20173]  check_noncircular+0x12e/0x150
[  342.991475][T20173]  __lock_acquire+0x15a5/0x2cf0
[  342.991491][T20173]  ? __lock_acquire+0x6b5/0x2cf0
[  342.991505][T20173]  ? dsa_user_netdevice_event+0x495/0x2850
[  342.991523][T20173]  ? packet_notifier+0x126/0xcd0
[  342.991539][T20173]  ? nr_rt_device_down+0xa9/0x720
[  342.991550][T20173]  lock_acquire+0x106/0x330
[  342.991561][T20173]  ? nr_rt_device_down+0xa9/0x720
[  342.991574][T20173]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  342.991627][T20173]  ? nr_rt_device_down+0xa9/0x720
[  342.991640][T20173]  _raw_spin_lock_bh+0x36/0x50
[  342.991651][T20173]  ? nr_rt_device_down+0xa9/0x720
[  342.991663][T20173]  nr_rt_device_down+0xa9/0x720
[  342.991678][T20173]  nr_device_event+0x137/0x150
[  342.991691][T20173]  notifier_call_chain+0x19d/0x3a0
[  342.991710][T20173]  __dev_notify_flags+0x16d/0x310
[  342.991724][T20173]  ? __pfx___dev_notify_flags+0x10/0x10
[  342.991736][T20173]  ? __dev_change_flags+0x4c6/0x690
[  342.991750][T20173]  ? __pfx___dev_change_flags+0x10/0x10
[  342.991763][T20173]  ? full_name_hash+0x92/0xe0
[  342.991779][T20173]  netif_change_flags+0xe8/0x1a0
[  342.991793][T20173]  dev_change_flags+0x130/0x260
[  342.991806][T20173]  dev_ioctl+0x7b4/0x1150
[  342.991818][T20173]  sock_do_ioctl+0x23e/0x320
[  342.991833][T20173]  ? __pfx_sock_do_ioctl+0x10/0x10
[  342.991846][T20173]  ? do_futex+0x333/0x420
[  342.991863][T20173]  sock_ioctl+0x5c6/0x7f0
[  342.991877][T20173]  ? __pfx_sock_ioctl+0x10/0x10
[  342.991890][T20173]  ? __fget_files+0x2a/0x420
[  342.991905][T20173]  ? __fget_files+0x3a0/0x420
[  342.991918][T20173]  ? __fget_files+0x2a/0x420
[  342.991932][T20173]  ? bpf_lsm_file_ioctl+0x9/0x20
[  342.991945][T20173]  ? __pfx_sock_ioctl+0x10/0x10
[  342.991959][T20173]  __se_sys_ioctl+0xfc/0x170
[  342.991977][T20173]  do_syscall_64+0xe2/0xf80
[  342.991990][T20173]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.992001][T20173]  ? trace_irq_disable+0x37/0x100
[  342.992017][T20173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.992029][T20173] RIP: 0033:0x7f33b4b9acb9
[  342.992039][T20173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.992048][T20173] RSP: 002b:00007f33b5a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  342.992061][T20173] RAX: ffffffffffffffda RBX: 00007f33b4e15fa0 RCX: 00007f33b4b9acb9
[  342.992072][T20173] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009
[  342.992079][T20173] RBP: 00007f33b4c08bf7 R08: 0000000000000000 R09: 0000000000000000
[  342.992086][T20173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  342.992094][T20173] R13: 00007f33b4e16038 R14: 00007f33b4e15fa0 R15: 00007fff02301d28
[  342.992107][T20173]  </TASK>
[  343.114994][T20183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4210'.
[  349.772789][  T111] block nbd1: Possible stuck request ffff8881093b0000: control (read@0,1024B). Runtime 270 seconds
[  349.777251][  T111] block nbd1: Possible stuck request ffff8881093b0200: control (read@1024,1024B). Runtime 270 seconds
[  349.781457][  T111] block nbd1: Possible stuck request ffff8881093b0400: control (read@2048,1024B). Runtime 270 seconds
[  349.786112][  T111] block nbd1: Possible stuck request ffff8881093b0600: control (read@3072,1024B). Runtime 270 seconds
