last executing test programs:

2.03049948s ago: executing program 1 (id=8698):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x74}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66", 0x63}, {0x0}], 0x3, 0xa) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000bd0f956651342886c1a9fa44c900000000100000006995d738d3f3bf0d0bee0577d9c83182d626059a8ce36f9da07ad0d469a959022fc09049f1d651a34fd76a1b82a33472b1624eb4b685e66791e7224e7669c974933094d35905b149f9e10517b8ca3184184812432e83e02424fbc1"], 0x50)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r3=>0x0}) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xfd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x5c4, 0x8000, 0x0, 0x4, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r5, 0xfffffffc)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000e6bf06be19000080000004000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) (async)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r12 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) (async)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

1.97211642s ago: executing program 1 (id=8699):
clock_gettime(0x2, &(0x7f0000000000))
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="c507a0b05aadae7e8dadec26cf63485bb0ee2c7e739b7f6ac42ad2b05022cb979994b045b2cca9acec5e01eb7736b76436cb8c247904bdf61beafb65a3b159c003ce23f0bd795367f910755d4fd2bb64fe98f3bb30c89a9f01c90047c2b99f4a601ef2d6e126e61d2b085d67919dd67ad6fa9d71b2070d6df172df9383093e717e983fe7a848791dc66d15eba87330", 0x8f)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
nanosleep(&(0x7f00000001c0)={r1, r2+60000000}, &(0x7f0000000200))
syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000280)=@ctrl_frame=@ack={{}, {0x4}}, 0xa)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3d}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x8800)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000003c0)=""/253, &(0x7f00000004c0)=0xfd)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r3)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0x300, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x8000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000980)={<r9=>0x0, @rand_addr, @multicast2}, &(0x7f00000009c0)=0xc)
sendmsg$nl_route_sched(r8, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@getqdisc={0x38, 0x26, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xffe0, 0xc}, {0x8, 0x9}, {0x8, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4050)
pselect6(0x40, &(0x7f0000000ac0)={0x401, 0x74, 0x7, 0x80, 0x2, 0x8000000000000001, 0x4, 0x6}, &(0x7f0000000b00)={0x7, 0x4, 0x9a7, 0xb2, 0x1, 0x7, 0x7f, 0x2}, &(0x7f0000000b40)={0xdda, 0x0, 0x8000, 0x800, 0x7fffffffffffffff, 0x3, 0x8, 0x100}, &(0x7f0000000b80), &(0x7f0000000c00)={&(0x7f0000000bc0)={[0x228000000000]}, 0x8})
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000000c40)={<r11=>0xffffffffffffffff})
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r9, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x1d, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4fa4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @ldst={0x2, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0xc, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000e40)={0x1, 0x1, 0x7, 0x13f}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000f00)=[r12], &(0x7f0000000f40)=[{0x0, 0x1, 0x8, 0x6}, {0x1, 0x5, 0x7, 0xa}, {0x0, 0x4, 0x4, 0x8}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x3, 0x4, 0x2}, {0x2, 0x3, 0xe, 0x5}, {0x0, 0x5, 0xd, 0xc}, {0x0, 0x4, 0xb, 0x2}, {0x5, 0x2, 0xa, 0xc}], 0x10, 0x2befff2b}, 0x94)
sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008058)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r3)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f00000013c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xe8, r13, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x5, 0x34}}}}, [@NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "94c5d96201741cba"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e7cd059a2f381629adb9fd736e47177c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "abde30f2eed4f8f5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1ea1dc73ef189c7d69b6e12e96f2bbb1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28106b8404d99fc2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fd601c4b4d10f7995315fe56da38a611"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x28ca}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "09856ade86edeed2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a7ec754fc1608ad7de91bcd05091d17503a120564a152a9d507c64cbc3581b9c"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="327f805f651238082c5c9f474b72fa88"}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x4000884)

621.001326ms ago: executing program 1 (id=8727):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0x2d, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0x404f444)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x19}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
close(0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r7, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000000480)=""/4075, 0xfeb}, {&(0x7f0000001500)=""/99, 0x63}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f00000018c0)=""/182, 0xb6}], 0x6}}], 0x1, 0x40010122, 0x0)
write(r7, &(0x7f00000015c0)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmmsg$inet6(r4, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0)
connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)

620.641719ms ago: executing program 2 (id=8728):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(0x0) (async)
pipe(0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)
shutdown(r3, 0x1) (async)
shutdown(r3, 0x1)
write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r2, r1, 0x0, 0xf03a0005) (async)
sendfile(r2, r1, 0x0, 0xf03a0005)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r5 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[], 0x70}}, 0x4004040)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
write$cgroup_type(r5, &(0x7f00000000c0), 0x9)
sendfile(r5, r4, 0x0, 0x10000)

562.199817ms ago: executing program 0 (id=8729):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000", 0x11}, {&(0x7f0000000200)="b7", 0x1}, {&(0x7f0000000100)="cc8b9b2251a9d92e1fc45219ba008fed80a21fc2912949782b436e3ca180e832c6243f930621bbba0cbadc46f61224cde3f74496f6f477ab786e0ad0438d809e1301fadc7412e8fb00af52e0dd514f2e6bf63dcb21370b7b21e65b38be5815", 0x5f}, {&(0x7f0000000540)="0e37b90261e76309b1cac9fade2e9c7d97027847ae3dd4c8ad9bacdc9eb40588f815d4a7290ec85ec1d6e62099c8862720d7231bfc91e78093bec7882a6db8419c6df7296622b23d8d5f7d7d1d196ad5aaba08a8731c748a", 0x58}], 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000)

560.759123ms ago: executing program 1 (id=8730):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x28000600)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt(r1, 0x111, 0x6, 0x0, &(0x7f0000000080))
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022e10000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db00300010010000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf}, 0x20)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
socket$inet_sctp(0x2, 0x7, 0x84)
socket$netlink(0x10, 0x3, 0x6720f15ce8555866)
r3 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
listen(r3, 0x7f)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000300)=@generic={0x0, 0x0, 0x7})
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvmsg(r4, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x10142)
ioctl$SIOCGSTAMP(r4, 0x8906, 0x0)
ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000080))
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000280)=0xffffffffffffff5f)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x8}, 0x8)

468.903014ms ago: executing program 1 (id=8731):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
bind$packet(r1, &(0x7f0000000180), 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000580)={{<r3=>r1, &(0x7f0000000300)='bond\x00', 0x88080, &(0x7f00000003c0)={@_ha_fsid={[0x9, 0xc]}, {0x5, 0x4c, 0x7, 0x4e3}}, 0x4, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x6}, {[0x4, 0x9, 0x7f, 0x3]}, 0x0, 0xda, &(0x7f0000000480)=""/218})
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000600)={'caif0\x00', @local})
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}}, 0x8810)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x5, 0x7}, @sack_perm, @window={0x3, 0x0, 0x5}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @mss={0x2, 0x2bd5}], 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r5, &(0x7f0000000100)="8704fa841b9c510a0d8e", 0xa, 0x1, &(0x7f00000002c0)={0xa, 0x4e20, 0x8a, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000200)="6b1966343d839f7b0ea45812bc76098e9d3444d85a4cbfbeaa6cdb360822ccd1c57be08687", 0x25, 0x8010, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000)='<', 0x1, 0x805, 0x0, 0x0)

468.452123ms ago: executing program 2 (id=8732):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000200000020002072c0004802800018007000100637400001c0002800800014000000010080002400000000405400300010000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macvtap0\x00', 0x10) (async)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x1c)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000300)) (async)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e20, 0x4, @empty}, 0x1c) (async)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async)
recvmmsg(r3, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10)

342.457678ms ago: executing program 2 (id=8733):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @mcast2, 0xe7a}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50)
listen(r0, 0x716e)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000)
accept$inet6(r0, 0x0, 0x0)

340.950147ms ago: executing program 2 (id=8734):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000092c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

270.236204ms ago: executing program 2 (id=8735):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x9, 0x7860, 0xfff}, 0x4c}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) (async)
socket$inet(0x2, 0x2, 0x1) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_enable(r9, &(0x7f0000000080)='1', 0x1) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24000) (async)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r10, 0x800000}, 0x38) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async)
listen(r0, 0x0)

268.464658ms ago: executing program 0 (id=8736):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket(0x10, 0x800, 0x0)
epoll_create(0x8) (async)
bind$inet(r0, 0x0, 0x0) (async)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a9500d3400"], 0x48) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0}) (async)
pipe(0x0)
r2 = socket(0x2a, 0x2, 0x0) (async, rerun: 32)
r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000d80)="f2435f0100088000008508004dae", 0xe, 0x45, &(0x7f0000000100)={0x11, 0xf5, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async, rerun: 64)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20240028}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x18be000, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x5) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0xa8, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x88, 0x6, "5ec79ff1ba8587fc1bdd53aebdc2231556e5007b2b66308df3c146e76ce38ea3681e1ef8ad161b9c96f431b8c81c12404d96af1b7210df284fa4e49c433a3a2330ff2006d99a8934cd8de652d0a98581d2d21b69f3881bcee15c38cd0dc133054fda0e98a689ead2f6cb630a29d3f31b91dd34ed086e0f74b0f650a4721219c242350cf4"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000080) (async, rerun: 64)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), 0x0) (rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r8, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[], 0x10}}], 0x1, 0x4048004) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, 0x0, 0x4050) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf250100000005000600af000000080003000600400005000500000000"], 0x2c}}, 0x24000806) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800140600fe880000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50190000907803b6a98f0acee7df04405efef0ea8cf56ec4a11453ceb179abe1f2f3a3d59e81116a61be17af84320ecb2022190af93026fafde90074531bc7ce2b7f801412834bc6380302d4d80bdae7de82bc20f7b5f3e9407e204d7108fa7c8e74536f7046ce1158d3e20554b97a9dd70559cd27990da60e18b60ab37cfd142f472b34611e4440e72ff79f921243164c8d1e570400000000"], 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)

212.364907ms ago: executing program 2 (id=8737):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r0, &(0x7f0000000200)="b99d48f97178c9446095ca57cc2368dc433a52a46eb39b035a469ff58112309d", 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r1, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r3)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffea9, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000b2c00070103000000ffdbdf25027c00000800018004000600080002803dc170bc75a7ed2dcf8c49b81d062844d73a52f1e78b3bc8b62a6a92e26b7083082452ecf5209da83523c53d8d2e819bb6e6390942efb87b93b8e720663bd1009f2d97430fd8be53e9eccf5b59bdcb52a54a6ff92324ca8251b9c1c885164a739e2640389db16af41c94cff1879cec564acb516afbf4e24269086d6637ef7309ce"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x8894)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed", 0x6e}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x101, 0x200, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x400c090}, 0x4000815)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r7, 0x8b2a, &(0x7f0000000040))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000057c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf25080000001800048013000100e50b6f6164636173742d6c696e6b0f"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x880)
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)

211.661211ms ago: executing program 0 (id=8738):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x3c, 0x301, 0x70bd24, 0xfffffbf8, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000f80000000000000014000200"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0xffe4, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0x1}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa, {0x0, 0x1}}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0xad)

149.911428ms ago: executing program 0 (id=8739):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r0, &(0x7f0000000200)="b99d48f97178c9446095ca57cc2368dc433a52a46eb39b035a469ff58112309d", 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r1, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r3)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffea9, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000b2c00070103000000ffdbdf25027c00000800018004000600080002803dc170bc75a7ed2dcf8c49b81d062844d73a52f1e78b3bc8b62a6a92e26b7083082452ecf5209da83523c53d8d2e819bb6e6390942efb87b93b8e720663bd1009f2d97430fd8be53e9eccf5b59bdcb52a54a6ff92324ca8251b9c1c885164a739e2640389db16af41c94cff1879cec564acb516afbf4e24269086d6637ef7309ce"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x8894)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed", 0x6e}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x101, 0x200, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x400c090}, 0x4000815)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="80000000020601040000000010000000000000090520050003000000140007800800164000000800080009400000020051fe0300686173683a69702c6d61736b0000000011000300686173683a6e65742c6e6574000000000c0003001ea0a9c844037a213400078008000a400000000305000700020000000500010007000000"], 0x80}, 0x1, 0x0, 0x0, 0x4004880}, 0x0)
ioctl(r7, 0x8b2a, &(0x7f0000000040))
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="11000000040000025717be12a4bfc213eea6cb000400000008"], 0x50)

149.344242ms ago: executing program 0 (id=8740):
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032dbd7000fbdbdf25117d6aa7503cc49ea10000000800340001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0x82, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb000008000500", @ANYRES32=0x0, @ANYBLOB="71bfbde50731e0e1dc095e78041299e522dbc9f5331b5d755ee8d3b596370cdb04abf69fbc80a0381a42153b04cfba9b592dcb2fc374d57e1c554d0134a31639fa89c241884d1cab65e6e02a4d38b93441066f3f2653719e3216ed5290e730e81d23b0e87a0cb8e6b8037d1c2c7aaf4a6d2042a7ca5dd9fb69a06f6dc00536b72156ee2cbacc3d06e79aed78793e6362914f00ce6d3a2cec75aa895d053ff84aa35b5247ce5b0a5ac7248905c1c7e06a8a1fb3cb030fb3811e"], 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002)
sendmsg(r0, 0x0, 0x4000004)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44)
getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000040))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040)
sendto(r7, &(0x7f0000000600)="ea13d017a83446a06ee0a18f6b9e0468", 0x10, 0x0, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0xffffff86, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, 0x0, 0x0)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4623, @remote}, {0x2, 0x4e22, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x8, 0x0, 0x405, 0x3, 0xda4d})

1.663597ms ago: executing program 0 (id=8741):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="063f87a80000f0", @ANYRES16=r7, @ANYBLOB="210025bd7200000000003900000008000300", @ANYRES32=r6, @ANYBLOB="10005a800c0000800400020004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x15, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0xa}}}}, 0x30}}, 0x440c4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x5, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6f, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r10}, 0x4)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x8000000, 0x4, 0x390, 0xffffffff, 0x1f0, 0x1f0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @private2, [0xffffff00, 0xff000000, 0xff, 0xd1af24b70f3ff086], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'veth0_to_team\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xff000000, 0xff], 0x4e22, 0x4e22, 0x4e24, 0x4e22, 0x80000000, 0x0, 0x3, 0x4, 0xfffffffb}}}, {{@ipv6={@private2, @empty, [0xffffff00], [0xffffff00, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x5, 0x0, 0x0, {0x1, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20)

0s ago: executing program 1 (id=8742):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000102c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

kernel console output (not intermixed with test programs):

syz0"
[  822.948183][T32716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7075'.
[  822.971679][T32716] xt_TCPMSS: Only works on TCP SYN packets
[  823.153254][T32717] lo speed is unknown, defaulting to 1000
[  823.684171][T32735] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7078'.
[  823.688667][T32735] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7078'.
[  823.831684][T32740] tipc: Resetting bearer <eth:gre0>
[  823.958621][T32743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7080'.
[  824.061747][T32740] tipc: Resetting bearer <eth:vcan0>
[  824.073891][T32740] batman_adv: batadv0: Interface deactivated: dummy0
[  824.442253][T32751] xt_hashlimit: size too large, truncated to 1048576
[  824.568687][ T5916] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  824.577016][ T5916] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  824.587717][ T5916] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  824.599780][ T5916] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  824.607875][ T5916] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  824.617448][ T5916] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  824.624197][ T5916] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  824.631887][ T5916] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  824.788397][T32755] lo speed is unknown, defaulting to 1000
[  825.229821][T32764] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7087'.
[  825.247805][T32762] syzkaller1: tun_chr_ioctl cmd 1074025677
[  825.250372][T32762] syzkaller1: linktype set to 1
[  825.373208][  T301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7088'.
[  826.307514][  T347] netlink: 'syz.0.7103': attribute type 3 has an invalid length.
[  826.642560][  T365] __nla_validate_parse: 4 callbacks suppressed
[  826.642577][  T365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7108'.
[  826.648631][  T366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7108'.
[  826.686657][  T368] netlink: 'syz.0.7109': attribute type 58 has an invalid length.
[  826.689895][  T368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7109'.
[  827.028250][  T377] netlink: 'syz.0.7112': attribute type 58 has an invalid length.
[  827.032688][  T377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7112'.
[  827.054734][  T374] netlink: 'syz.1.7110': attribute type 1 has an invalid length.
[  827.140851][  T384] netlink: 'syz.2.7114': attribute type 3 has an invalid length.
[  827.304816][  T394] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7115'.
[  827.367159][  T400] netlink: 'syz.0.7116': attribute type 17 has an invalid length.
[  827.399405][  T402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7118'.
[  827.429269][  T404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7117'.
[  827.523962][  T404] ip6gretap0: left promiscuous mode
[  827.532078][  T404] bridge0: left promiscuous mode
[  827.534966][  T404] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.538310][  T404] batman_adv: batadv0: Interface activated: dummy0
[  827.543210][  T404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.559347][  T414] netlink: 'syz.0.7121': attribute type 3 has an invalid length.
[  827.577404][  T404] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  827.726138][  T420] bridge0: Device is already in use.
[  827.798399][  T422] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7123'.
[  828.059338][  T428] netlink: 'syz.0.7125': attribute type 3 has an invalid length.
[  828.505367][  T430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7126'.
[  828.699226][  T440] netlink: 'syz.0.7129': attribute type 25 has an invalid length.
[  828.702479][  T440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7129'.
[  828.706582][  T440] netlink: 'syz.0.7129': attribute type 25 has an invalid length.
[  828.826607][  T446] sctp: [Deprecated]: syz.0.7132 (pid 446) Use of struct sctp_assoc_value in delayed_ack socket option.
[  828.826607][  T446] Use struct sctp_sack_info instead
[  829.583898][  T471] net_ratelimit: 11 callbacks suppressed
[  829.583917][  T471] openvswitch: netlink: Multiple metadata blocks provided
[  830.873462][ T6754] lo speed is unknown, defaulting to 1000
[  830.891031][  T489] 8021q: adding VLAN 0 to HW filter on device bond0
[  830.895330][  T489] batadv0: left promiscuous mode
[  830.898178][  T489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  830.942809][  T489] veth1_vlan: left promiscuous mode
[  830.945849][  T489] veth0_vlan: left promiscuous mode
[  830.949195][  T489] veth0_vlan: entered promiscuous mode
[  830.957557][  T489] veth1_vlan: entered promiscuous mode
[  830.973930][  T489] 8021q: adding VLAN 0 to HW filter on device bond1
[  831.009817][  T489] 8021q: adding VLAN 0 to HW filter on device bond2
[  831.016935][  T489] 8021q: adding VLAN 0 to HW filter on device bond3
[  831.023492][  T489] 8021q: adding VLAN 0 to HW filter on device bond4
[  831.029925][  T489] 8021q: adding VLAN 0 to HW filter on device bond5
[  831.043733][  T489] batadv0: entered promiscuous mode
[  831.046906][  T489] 8021q: adding VLAN 0 to HW filter on device macsec2
[  831.097792][  T489] 8021q: adding VLAN 0 to HW filter on device bond6
[  831.109514][  T489] 8021q: adding VLAN 0 to HW filter on device bond7
[  831.118719][  T489] 8021q: adding VLAN 0 to HW filter on device bond8
[  831.123887][  T489] 8021q: adding VLAN 0 to HW filter on device bond9
[  831.128191][  T489] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  831.156587][ T6754] lo speed is unknown, defaulting to 1000
[  831.308785][  T508] siw: device registration error -23
[  833.668689][  T531] tipc: Resetting bearer <eth:gre0>
[  833.677992][  T531] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  833.895209][  T556] __nla_validate_parse: 6 callbacks suppressed
[  833.895229][  T556] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7162'.
[  833.939113][  T560] validate_nla: 2 callbacks suppressed
[  833.939131][  T560] netlink: 'syz.0.7163': attribute type 58 has an invalid length.
[  833.945214][  T560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7163'.
[  833.982639][  T561] xt_hashlimit: size too large, truncated to 1048576
[  834.202784][  T582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7165'.
[  834.209136][  T581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7165'.
[  834.454609][  T601] netlink: 'syz.1.7167': attribute type 3 has an invalid length.
[  834.574107][  T612] tipc: Resetting bearer <eth:gre0>
[  834.578444][  T612] tipc: Resetting bearer <eth:gre0>
[  834.626127][  T612] tipc: Resetting bearer <eth:syzkaller0>
[  834.735815][  T617] netlink: 'syz.0.7171': attribute type 1 has an invalid length.
[  834.770918][  T617] bond15: entered promiscuous mode
[  834.773618][  T617] 8021q: adding VLAN 0 to HW filter on device bond15
[  834.786576][  T617] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  834.885242][  T623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7174'.
[  834.892776][  T622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7174'.
[  834.900594][  T622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7174'.
[  834.904377][  T622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7174'.
[  834.909080][  T622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7174'.
[  834.913612][  T622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7174'.
[  835.866126][  T652] veth1_macvtap: left promiscuous mode
[  835.869571][  T652] veth0_macvtap: left promiscuous mode
[  835.874436][  T652] veth0_macvtap: entered promiscuous mode
[  835.878127][  T652] veth1_macvtap: entered promiscuous mode
[  835.892197][  T654] nbd: must specify at least one socket
[  835.896262][  T654] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  835.902867][  T652] ip6gretap0: entered promiscuous mode
[  835.923488][  T652] 8021q: adding VLAN 0 to HW filter on device bond1
[  835.929183][  T652] 8021q: adding VLAN 0 to HW filter on device bond2
[  835.959933][  T652] 8021q: adding VLAN 0 to HW filter on device bond3
[  835.963807][  T652] 8021q: adding VLAN 0 to HW filter on device bond4
[  835.967269][  T652] 8021q: adding VLAN 0 to HW filter on device bond5
[  835.971517][  T652] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  835.977203][ T6754] bridge0: entered promiscuous mode
[  835.987108][T16432] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  835.990803][T16432] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  835.993481][T16432] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  835.996081][T16432] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  836.005014][T16432] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  836.012680][T16432] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  836.024413][T16432] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  836.036134][T16432] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  836.123429][  T664] syzkaller1: entered promiscuous mode
[  836.125435][  T664] syzkaller1: entered allmulticast mode
[  836.259079][  T676] netlink: 'syz.1.7188': attribute type 11 has an invalid length.
[  836.514235][  T685] trusted_key: syz.0.7193 sent an empty control message without MSG_MORE.
[  837.271461][  T726] syzkaller1: entered allmulticast mode
[  838.007730][  T748] netlink: 'syz.1.7209': attribute type 3 has an invalid length.
[  838.044913][  T749] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  838.565600][  T783] netlink: 'syz.0.7218': attribute type 58 has an invalid length.
[  838.719407][  T796] xfrm0: entered allmulticast mode
[  838.856811][  T805] netlink: 'syz.0.7224': attribute type 58 has an invalid length.
[  839.179627][  T817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  839.243209][  T819] __nla_validate_parse: 40 callbacks suppressed
[  839.243229][  T819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7227'.
[  839.609806][  T840] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7231'.
[  839.658916][  T845] tipc: Resetting bearer <eth:gre0>
[  839.702831][  T848] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7232'.
[  839.728987][  T845] batman_adv: batadv0: Interface deactivated: dummy0
[  839.731403][  T850] netlink: 'syz.2.7234': attribute type 58 has an invalid length.
[  839.741230][  T850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7234'.
[  839.957884][ T5668] syz0: Port: 1 Link DOWN
[  839.959387][ T5916] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  839.964384][ T5916] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  839.968543][ T5916] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  839.972462][ T5916] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  840.149579][  T861] netlink: 'syz.2.7236': attribute type 58 has an invalid length.
[  840.153009][  T861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7236'.
[  840.408080][  T869] sch_fq: defrate 3405824 ignored.
[  840.710262][ T5001] Bluetooth: hci2: command 0x0406 tx timeout
[  840.846717][  T876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7241'.
[  841.359228][  T896] tipc: Enabled bearer <eth:gre0>, priority 27
[  841.898109][  T900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7246'.
[  842.388348][  T923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7253'.
[  842.391372][  T923] netlink: 'syz.0.7253': attribute type 7 has an invalid length.
[  842.394370][  T923] netlink: 'syz.0.7253': attribute type 8 has an invalid length.
[  842.397324][  T923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7253'.
[  842.578206][  T938] tipc: Resetting bearer <eth:gre0>
[  842.578322][  T941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7257'.
[  842.591039][  T938] batman_adv: batadv0: Interface activated: dummy0
[  842.593657][  T938] batadv0: mtu less than device minimum
[  842.596923][  T938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.601820][  T938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.606267][  T938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.610875][  T938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.614898][  T938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.619073][  T938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.623376][  T938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.627414][  T938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.631547][  T938] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  842.649773][  T938] 8021q: adding VLAN 0 to HW filter on device 60X
[  842.680392][  T937] tipc: Resetting bearer <eth:gre0>
[  842.699418][T28427] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  842.704125][T28427] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  842.708369][ T6754] syz0: Port: 1 Link ACTIVE
[  842.710230][T28427] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  842.718983][T28427] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  842.809739][  T963] --map-set only usable from mangle table
[  842.918936][  T972] IPVS: set_ctl: invalid protocol: 58 10.1.129.1:0
[  842.939156][  T972] SET target dimension over the limit!
[  843.204900][  T986] tipc: Resetting bearer <eth:gre0>
[  843.493009][  T986] xfrm0: left allmulticast mode
[  844.024377][  T986] veth5: left promiscuous mode
[  844.029212][  T986] geneve5: left promiscuous mode
[  844.031960][  T986] geneve5: left allmulticast mode
[  844.035386][  T986] geneve6: left promiscuous mode
[  844.037087][  T986] geneve6: left allmulticast mode
[  844.039042][  T986] ip6erspan0: left promiscuous mode
[  844.041133][  T986] ip6erspan0: left allmulticast mode
[  844.043634][  T999] netlink: 'syz.0.7266': attribute type 4 has an invalid length.
[  844.043979][  T986] geneve7: left promiscuous mode
[  844.048060][  T986] geneve7: left allmulticast mode
[  844.050590][  T986] syzkaller0: left promiscuous mode
[  844.052204][  T986] syzkaller0: left allmulticast mode
[  844.054253][ T6754] lo speed is unknown, defaulting to 1000
[  844.057292][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  844.060568][ T6754] syz2: Port: 1 Link DOWN
[  844.067520][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  844.076209][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  844.080182][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  844.087073][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  844.095469][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  844.106194][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  844.113625][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  844.253402][ T1016] __nla_validate_parse: 5 callbacks suppressed
[  844.253416][ T1016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7270'.
[  844.356934][ T1017] lo speed is unknown, defaulting to 1000
[  844.716073][ T1040] netlink: 'syz.2.7277': attribute type 58 has an invalid length.
[  844.718809][ T1040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7277'.
[  844.750806][ T1037] netlink: 'syz.0.7276': attribute type 11 has an invalid length.
[  845.246831][ T1064] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7281'.
[  845.451984][ T1071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7284'.
[  845.696141][ T1087] lo speed is unknown, defaulting to 1000
[  845.863643][ T1102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7289'.
[  845.907931][ T1108] netlink: 'syz.0.7290': attribute type 3 has an invalid length.
[  846.172741][ T1131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7295'.
[  846.561782][ T1154] netlink: 'syz.1.7301': attribute type 17 has an invalid length.
[  846.714078][ T1157] lo speed is unknown, defaulting to 1000
[  847.604639][ T1173] tipc: Resetting bearer <eth:gre0>
[  847.607241][ T1175] netlink: 'syz.1.7308': attribute type 58 has an invalid length.
[  847.611657][ T1175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7308'.
[  847.657849][ T1176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7307'.
[  847.665260][ T1173] net_ratelimit: 12 callbacks suppressed
[  847.665281][ T1173] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  848.121827][ T1191] netlink: 'syz.1.7311': attribute type 58 has an invalid length.
[  848.124571][ T1191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7311'.
[  848.410593][ T1215] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7316'.
[  849.242116][ T1225] netlink: 'syz.1.7320': attribute type 2 has an invalid length.
[  849.248256][ T1225] netlink: 'syz.1.7320': attribute type 9 has an invalid length.
[  849.260177][ T1225] __nla_validate_parse: 1 callbacks suppressed
[  849.260190][ T1225] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7320'.
[  849.337005][ T1229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7322'.
[  849.345744][ T1229] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7322'.
[  849.757802][ T1257] netlink: 'syz.0.7325': attribute type 58 has an invalid length.
[  849.779419][ T1257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7325'.
[  849.996252][ T1279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7330'.
[  850.002311][ T1279] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7330'.
[  850.034366][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7329'.
[  850.235511][ T1297] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.7336'.
[  850.249768][ T1302] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7337'.
[  850.265110][ T1302] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7337'.
[  850.308674][ T1311] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  850.314227][ T1311] netlink: 'syz.1.7340': attribute type 1 has an invalid length.
[  850.331861][ T1311] 8021q: adding VLAN 0 to HW filter on device bond16
[  850.385190][ T1320] geneve4: entered promiscuous mode
[  850.387256][ T1320] geneve4: entered allmulticast mode
[  850.748986][ T1345] netlink: 'syz.1.7350': attribute type 13 has an invalid length.
[  850.752206][ T1345] netlink: 'syz.1.7350': attribute type 17 has an invalid length.
[  850.783780][ T1345] 8021q: adding VLAN 0 to HW filter on device bond0
[  850.789677][ T1345] batadv0: left promiscuous mode
[  850.793918][ T1345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  850.827272][ T1345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  850.831509][ T1345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  850.838917][ T1345] veth1_vlan: left promiscuous mode
[  850.842840][ T1345] veth0_vlan: left promiscuous mode
[  850.845857][ T1345] veth0_vlan: entered promiscuous mode
[  850.852041][ T1345] veth1_vlan: entered promiscuous mode
[  850.867945][ T1345] 8021q: adding VLAN 0 to HW filter on device bond1
[  850.896169][ T1345] 8021q: adding VLAN 0 to HW filter on device bond2
[  850.902648][ T1345] 8021q: adding VLAN 0 to HW filter on device bond3
[  850.907456][ T1345] 8021q: adding VLAN 0 to HW filter on device bond4
[  850.914652][ T1345] 8021q: adding VLAN 0 to HW filter on device bond5
[  850.937310][ T1345] batadv0: entered promiscuous mode
[  850.942480][ T1345] 8021q: adding VLAN 0 to HW filter on device macsec2
[  850.995163][ T1345] 8021q: adding VLAN 0 to HW filter on device bond6
[  851.005464][ T1345] 8021q: adding VLAN 0 to HW filter on device bond7
[  851.011432][ T1345] 8021q: adding VLAN 0 to HW filter on device bond8
[  851.015608][ T1345] 8021q: adding VLAN 0 to HW filter on device bond9
[  851.031122][ T1345] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  851.046390][ T6754] lo speed is unknown, defaulting to 1000
[  851.056677][ T6754] syz2: Port: 1 Link ACTIVE
[  851.077316][ T6762] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  851.080642][ T6762] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  851.087127][ T6762] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  851.091076][ T6762] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  851.094256][ T6762] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  851.098043][ T6762] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  851.105568][ T6762] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  851.108717][ T6762] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  851.123002][ T1351] lo speed is unknown, defaulting to 1000
[  851.798397][ T1382] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  851.888956][ T1389] tipc: Resetting bearer <eth:gre0>
[  851.892022][ T1389] tipc: Resetting bearer <eth:gre0>
[  851.941526][ T1389] tipc: Resetting bearer <eth:syzkaller0>
[  851.944558][ T1392] netlink: 'syz.0.7361': attribute type 10 has an invalid length.
[  851.992018][ T1392] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  852.215847][ T1403] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  852.927697][ T1419] netlink: 'syz.2.7368': attribute type 1 has an invalid length.
[  852.956063][ T1419] bond14: entered promiscuous mode
[  852.958606][ T1419] 8021q: adding VLAN 0 to HW filter on device bond14
[  852.973564][ T1419] bond14: entered allmulticast mode
[  852.992699][ T1419] bond14: (slave bridge9): making interface the new active one
[  852.995836][ T1419] bridge9: entered promiscuous mode
[  852.998298][ T1419] bridge9: entered allmulticast mode
[  853.005196][ T1419] bond14: (slave bridge9): Enslaving as an active interface with an up link
[  853.124131][ T1427] netlink: 'syz.2.7371': attribute type 12 has an invalid length.
[  853.171506][ T1427] netlink: 'syz.2.7371': attribute type 39 has an invalid length.
[  853.453925][ T1443] lo speed is unknown, defaulting to 1000
[  853.698480][ T1470] netlink: 'syz.0.7381': attribute type 12 has an invalid length.
[  853.707116][ T1470] netlink: 'syz.0.7381': attribute type 39 has an invalid length.
[  853.759511][ T1472] tipc: Resetting bearer <eth:gre0>
[  853.822279][ T1472] batman_adv: batadv0: Interface deactivated: dummy0
[  854.055068][ T6755] syz0: Port: 1 Link DOWN
[  854.055679][T28427] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  854.065925][T28427] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  854.069711][T28427] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  854.072643][T28427] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  855.139560][ T1499] openvswitch: netlink: IP tunnel dst address not specified
[  855.342056][ T1515] __nla_validate_parse: 13 callbacks suppressed
[  855.342070][ T1515] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7396'.
[  855.412543][ T1521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7397'.
[  855.419438][ T1517] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  855.522354][ T1524] lo speed is unknown, defaulting to 1000
[  855.557838][ T1526] netlink: 'syz.0.7398': attribute type 32 has an invalid length.
[  855.560482][ T1526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7398'.
[  855.578755][ T1526] bond17: Setting coupled_control to off (0)
[  855.715427][ T1530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7399'.
[  855.721815][ T1531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7399'.
[  855.724518][ T1531] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7399'.
[  855.727393][ T1530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7399'.
[  855.732566][ T1530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7399'.
[  856.009567][ T1537] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  856.292301][ T1558] netlink: 51 bytes leftover after parsing attributes in process `syz.0.7406'.
[  856.565324][ T1570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7413'.
[  856.773501][ T1589] netlink: 'syz.1.7417': attribute type 3 has an invalid length.
[  856.927335][ T1595] netlink: 'syz.1.7420': attribute type 58 has an invalid length.
[  857.524960][ T1607] netlink: 'syz.2.7424': attribute type 58 has an invalid length.
[  857.955904][ T1623] netlink: 'syz.0.7428': attribute type 1 has an invalid length.
[  858.662717][ T1656] tipc: Resetting bearer <eth:gre0>
[  858.669564][ T1656] batman_adv: batadv0: Interface activated: dummy0
[  858.671884][ T1656] batadv0: mtu less than device minimum
[  858.674298][ T1656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  858.677986][ T1656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  858.681673][ T1656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  858.685315][ T1656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  858.688921][ T1656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  858.692653][ T1656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  858.696194][ T1656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  858.708205][ T1656] 8021q: adding VLAN 0 to HW filter on device 60X
[  858.761180][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  858.767821][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  858.772823][ T7753] syz0: Port: 1 Link ACTIVE
[  858.777950][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  858.781478][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  859.005340][ T1681] netlink: 'syz.0.7445': attribute type 58 has an invalid length.
[  860.874770][ T1735] tipc: Resetting bearer <eth:gre0>
[  860.913912][ T1741] netlink: 'syz.1.7459': attribute type 13 has an invalid length.
[  860.917078][ T1741] netlink: 'syz.1.7459': attribute type 17 has an invalid length.
[  861.829449][ T7753] lo speed is unknown, defaulting to 1000
[  861.829951][ T1744] bridge_slave_1: entered allmulticast mode
[  861.835409][ T7753] syz2: Port: 1 Link DOWN
[  861.849356][ T5916] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  861.853360][ T5916] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  861.868350][ T5916] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  861.872205][ T5916] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  861.875657][ T5916] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  861.878958][ T5916] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  861.882700][ T5916] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  861.886460][ T5916] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  861.996943][ T1759] netlink: 'syz.2.7464': attribute type 17 has an invalid length.
[  862.004702][ T1759] netlink: 'syz.2.7464': attribute type 17 has an invalid length.
[  862.016185][ T1759] netlink: 'syz.2.7464': attribute type 17 has an invalid length.
[  862.023416][ T1759] netlink: 'syz.2.7464': attribute type 17 has an invalid length.
[  862.028633][ T1759] netlink: 'syz.2.7464': attribute type 17 has an invalid length.
[  862.032767][ T1759] netlink: 'syz.2.7464': attribute type 17 has an invalid length.
[  862.035692][ T1759] netlink: 'syz.2.7464': attribute type 17 has an invalid length.
[  862.039387][ T1759] netlink: 'syz.2.7464': attribute type 17 has an invalid length.
[  862.110402][ T1774] __nla_validate_parse: 13 callbacks suppressed
[  862.110421][ T1774] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7468'.
[  862.124379][ T1774] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7468'.
[  862.128357][ T1774] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7468'.
[  862.194367][ T1788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7471'.
[  862.578568][ T1823] net_ratelimit: 14 callbacks suppressed
[  862.578588][ T1823] openvswitch: netlink: Missing valid actions attribute.
[  862.584002][ T1823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  862.622882][ T1825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7482'.
[  863.302603][ T1845] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  863.470996][ T1854] lo speed is unknown, defaulting to 1000
[  863.794329][ T1877] netlink: 212320 bytes leftover after parsing attributes in process `syz.0.7498'.
[  863.827161][ T1873] 8021q: adding VLAN 0 to HW filter on device bond0
[  863.834158][ T1873] batadv0: left promiscuous mode
[  863.837617][ T1873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  863.871507][ T1873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  863.875670][ T1873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  863.886165][ T1873] veth1_vlan: left promiscuous mode
[  863.889344][ T1873] veth0_vlan: left promiscuous mode
[  863.893506][ T1873] veth0_vlan: entered promiscuous mode
[  863.898275][ T1873] veth1_vlan: entered promiscuous mode
[  863.913883][ T1873] 8021q: adding VLAN 0 to HW filter on device bond1
[  863.930866][ T1873] 8021q: adding VLAN 0 to HW filter on device bond2
[  863.933605][ T1873] 8021q: adding VLAN 0 to HW filter on device bond3
[  863.936454][ T1873] 8021q: adding VLAN 0 to HW filter on device bond4
[  863.944057][ T1873] 8021q: adding VLAN 0 to HW filter on device bond5
[  863.949375][ T1873] batadv0: entered promiscuous mode
[  863.951751][ T1873] 8021q: adding VLAN 0 to HW filter on device macsec2
[  863.986269][ T1873] 8021q: adding VLAN 0 to HW filter on device bond6
[  863.993495][ T1873] 8021q: adding VLAN 0 to HW filter on device bond7
[  863.998251][ T1873] 8021q: adding VLAN 0 to HW filter on device bond8
[  864.005075][ T1873] 8021q: adding VLAN 0 to HW filter on device bond9
[  864.008608][ T1873] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  864.014875][ T6741] lo speed is unknown, defaulting to 1000
[  864.019275][ T6741] syz2: Port: 1 Link ACTIVE
[  864.039518][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  864.045923][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  864.050521][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  864.055920][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  864.076680][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  864.080383][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  864.083639][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  864.086760][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  864.214918][ T1894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7502'.
[  864.221177][ T1894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7502'.
[  864.227371][ T1894] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7502'.
[  864.288743][ T1890] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  864.473735][ T1909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7507'.
[  864.636002][ T1913] IPVS: set_ctl: invalid protocol: 29 172.20.20.10:20002
[  864.924135][ T1923] xt_hashlimit: size too large, truncated to 1048576
[  865.737035][ T1965] tipc: Resetting bearer <eth:gre0>
[  865.855293][ T1965] tipc: Resetting bearer <eth:vcan0>
[  865.871312][ T1965] batman_adv: batadv0: Interface deactivated: dummy0
[  866.392858][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  866.398440][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  866.403312][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  866.408521][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  866.418046][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  866.422402][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  866.425106][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  866.428018][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  866.479362][ T1986] lo speed is unknown, defaulting to 1000
[  866.779681][ T1997] openvswitch: netlink: Flow key attr not present in new flow.
[  866.784689][ T1995] lo speed is unknown, defaulting to 1000
[  866.862445][ T2008] xfrm3: left promiscuous mode
[  866.864534][ T2008] xfrm3: left allmulticast mode
[  866.867027][ T2008] macsec3: left promiscuous mode
[  866.869075][ T2008] vti0: left promiscuous mode
[  866.871604][ T2008] vti0: left allmulticast mode
[  866.873771][ T2008] vlan0: left allmulticast mode
[  866.875694][ T2008] bond13: left allmulticast mode
[  866.877750][ T2008] ip6gre3: left promiscuous mode
[  866.879694][ T2008] ip6gre3: left allmulticast mode
[  866.883269][ T2008] bond14: left promiscuous mode
[  866.885267][ T2008] bridge9: left promiscuous mode
[  866.887331][ T2008] bond14: left allmulticast mode
[  866.889231][ T2008] bridge9: left allmulticast mode
[  866.958917][ T2014] validate_nla: 28 callbacks suppressed
[  866.958937][ T2014] netlink: 'syz.2.7533': attribute type 58 has an invalid length.
[  867.161319][ T2027] tipc: Resetting bearer <eth:gre0>
[  867.175844][ T2027] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  867.197659][ T2027] __nla_validate_parse: 14 callbacks suppressed
[  867.197672][ T2027] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7536'.
[  867.222378][ T2027] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7536'.
[  867.226988][ T2034] netlink: 'syz.2.7538': attribute type 3 has an invalid length.
[  867.476374][ T2040] openvswitch: netlink: Multiple metadata blocks provided
[  867.485680][ T2040] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7540'.
[  867.555128][ T2043] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20000
[  867.675642][ T2046] lo speed is unknown, defaulting to 1000
[  867.713175][ T2049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7542'.
[  868.455464][ T2075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7551'.
[  868.523313][ T2075] 8021q: adding VLAN 0 to HW filter on device bond17
[  868.531832][ T2071] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  869.402323][ T2099] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  869.414694][ T2099] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7558'.
[  869.481201][ T2101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7559'.
[  869.755230][ T2115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7562'.
[  869.770887][ T2115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7562'.
[  869.989242][ T2124] netlink: 'syz.0.7565': attribute type 11 has an invalid length.
[  870.005931][ T2124] netlink: 180760 bytes leftover after parsing attributes in process `syz.0.7565'.
[  870.035002][ T2128] ip6gretap0: left promiscuous mode
[  870.043218][ T2128] bridge0: left promiscuous mode
[  870.051370][ T2128] 8021q: adding VLAN 0 to HW filter on device bond0
[  870.055027][ T2128] batman_adv: batadv0: Interface activated: dummy0
[  870.058966][ T2128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  870.099162][ T2128] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  873.177050][ T2153] m1Ie5n: entered promiscuous mode
[  873.243934][ T2159] ksmbd: Unknown IPC event: 3, ignore.
[  873.528629][ T2184] __nla_validate_parse: 1 callbacks suppressed
[  873.528641][ T2184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7581'.
[  873.535815][ T2184] netlink: 'syz.1.7581': attribute type 29 has an invalid length.
[  873.538202][ T2184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7581'.
[  873.541587][ T2184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7581'.
[  873.544455][ T2184] netlink: 'syz.1.7581': attribute type 29 has an invalid length.
[  873.547144][ T2184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7581'.
[  873.596288][ T2186] netlink: 'syz.1.7582': attribute type 58 has an invalid length.
[  873.604784][ T2186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7582'.
[  874.262660][ T2195] xt_bpf: check failed: parse error
[  874.388109][ T2197] tipc: Resetting bearer <eth:gre0>
[  874.476893][ T2204] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7586'.
[  874.594883][ T2197] tipc: Resetting bearer <eth:vcan0>
[  874.611092][ T2197] batman_adv: batadv0: Interface deactivated: dummy0
[  874.665804][ T2211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7588'.
[  874.784190][ T2213] netlink: 'syz.0.7588': attribute type 1 has an invalid length.
[  875.019766][ T2215] netlink: 'syz.0.7589': attribute type 3 has an invalid length.
[  876.105730][ T2235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7595'.
[  876.108663][ T2235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7595'.
[  876.112272][ T2235] netlink: 58 bytes leftover after parsing attributes in process `syz.0.7595'.
[  876.368583][ T2257] netlink: 'syz.0.7602': attribute type 3 has an invalid length.
[  876.371623][ T2258] netlink: 'syz.0.7602': attribute type 3 has an invalid length.
[  876.967050][ T2277] netlink: 'syz.2.7606': attribute type 58 has an invalid length.
[  877.328351][ T2285] 8021q: adding VLAN 0 to HW filter on device bond0
[  877.332501][ T2285] batman_adv: batadv0: Interface activated: dummy0
[  877.336449][ T2285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  877.375379][ T2285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  877.379266][ T2285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  877.387183][ T2285] veth1_macvtap: left promiscuous mode
[  877.391746][ T2285] veth0_macvtap: left promiscuous mode
[  877.395155][ T2285] veth0_macvtap: entered promiscuous mode
[  877.398597][ T2285] veth1_macvtap: entered promiscuous mode
[  877.407556][ T2285] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  877.425740][ T2284] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  877.465433][ T6762] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  877.471936][ T6762] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  877.481277][ T6762] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  877.486110][ T6762] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.561998][ T2301] netlink: 'syz.2.7613': attribute type 3 has an invalid length.
[  878.453442][ T2320] netlink: 'syz.2.7619': attribute type 3 has an invalid length.
[  878.604857][ T2322] __nla_validate_parse: 5 callbacks suppressed
[  878.604892][ T2322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7620'.
[  878.647550][ T2330] tipc: Resetting bearer <eth:gre0>
[  878.671622][ T2330] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  878.734093][ T2334] netlink: 'syz.1.7624': attribute type 13 has an invalid length.
[  878.848834][ T2341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7624'.
[  879.134275][ T2357] netlink: 'syz.0.7628': attribute type 2 has an invalid length.
[  879.377867][ T2375] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  879.672173][ T2383] netlink: 'syz.2.7632': attribute type 1 has an invalid length.
[  879.675143][ T2383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7632'.
[  880.107747][ T2392] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7637'.
[  880.132192][ T2392] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7637'.
[  880.137362][ T2392] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7637'.
[  880.504342][ T2404] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  880.532801][ T2416] tipc: Resetting bearer <eth:gre0>
[  880.626932][ T2416] tipc: Resetting bearer <eth:vcan0>
[  880.635220][ T2416] batman_adv: batadv0: Interface deactivated: dummy0
[  880.899940][ T6762] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  880.903458][ T6762] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  880.906575][ T6762] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  880.910171][ T6762] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  881.282675][ T2457] netlink: 744 bytes leftover after parsing attributes in process `syz.2.7649'.
[  881.383041][ T2477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7653'.
[  881.515073][ T2492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7657'.
[  881.559116][ T2499] lo: entered promiscuous mode
[  881.560826][ T2499] lo: entered allmulticast mode
[  881.565074][ T2499] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7659'.
[  881.601081][ T2501] lo speed is unknown, defaulting to 1000
[  881.642446][ T2507] x9: renamed from bridge_slave_0 (while UP)
[  881.868662][ T2529] netlink: zone id is out of range
[  881.870598][ T2529] netlink: zone id is out of range
[  881.872312][ T2529] netlink: zone id is out of range
[  881.873893][ T2529] netlink: zone id is out of range
[  881.875582][ T2529] netlink: zone id is out of range
[  881.877263][ T2529] netlink: zone id is out of range
[  882.705791][ T2590] netlink: 'syz.1.7679': attribute type 8 has an invalid length.
[  882.838847][ T2595] : entered promiscuous mode
[  883.114362][ T2626] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  883.116752][ T2626] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  883.310938][ T2653] netlink: 'syz.1.7693': attribute type 4 has an invalid length.
[  884.164970][ T2694] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20000
[  884.167927][ T2695] __nla_validate_parse: 5 callbacks suppressed
[  884.167937][ T2695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7703'.
[  884.727205][ T2724] netlink: 'syz.2.7707': attribute type 3 has an invalid length.
[  884.729827][ T2724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7707'.
[  884.748411][ T2733] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7710'.
[  884.754421][ T2733] lo: Caught tx_queue_len zero misconfig
[  885.380957][ T2735] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  885.391112][ T2735] netlink: 'syz.2.7711': attribute type 61 has an invalid length.
[  885.592389][ T2749] netlink: 2724 bytes leftover after parsing attributes in process `syz.2.7714'.
[  885.831296][ T2763] xt_SECMARK: invalid mode: 4
[  886.178628][ T2790] lo speed is unknown, defaulting to 1000
[  886.213268][ T2796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7725'.
[  886.388645][ T2807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7726'.
[  886.439281][ T2813] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7727'.
[  886.666621][ T2831] netlink: 'syz.0.7729': attribute type 58 has an invalid length.
[  886.669338][ T2831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7729'.
[  887.012754][ T2844] netlink: 'syz.2.7732': attribute type 1 has an invalid length.
[  887.063832][ T2844] 8021q: adding VLAN 0 to HW filter on device bond15
[  887.084074][ T2844] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  887.137533][ T2844] vlan1: entered allmulticast mode
[  887.140817][ T2844] bond15: entered allmulticast mode
[  887.365534][ T2873] lo speed is unknown, defaulting to 1000
[  887.709947][ T2904] 8021q: VLANs not supported on sit0
[  887.890079][ T2921] vlan4: entered promiscuous mode
[  887.893771][ T2921] geneve1: entered promiscuous mode
[  887.898868][ T2921] vlan4: entered allmulticast mode
[  887.901389][ T2921] geneve1: entered allmulticast mode
[  887.909204][ T2921] ip6tnl0: Caught tx_queue_len zero misconfig
[  888.015810][ T2933] tipc: Resetting bearer <eth:gre0>
[  888.187256][ T2945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7749'.
[  888.234039][ T2933] bridge_slave_1: left allmulticast mode
[  888.719455][ T2933] vlan4: left promiscuous mode
[  888.722962][ T2933] geneve1: left promiscuous mode
[  888.725331][ T2933] vlan4: left allmulticast mode
[  888.727224][ T2933] geneve1: left allmulticast mode
[  888.729500][ T7753] lo speed is unknown, defaulting to 1000
[  888.732770][ T7753] syz2: Port: 1 Link DOWN
[  888.748470][T28427] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  888.755977][T28427] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.760906][T28427] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  888.763989][T28427] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.770950][T28427] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  888.777420][T28427] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.794495][T28427] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  888.799896][T28427] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.823416][ T2947] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7750'.
[  888.846063][ T2952] x_tables: duplicate underflow at hook 1
[  889.233382][ T2973] netlink: 'syz.1.7757': attribute type 1 has an invalid length.
[  889.235931][ T2973] __nla_validate_parse: 3 callbacks suppressed
[  889.235939][ T2973] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7757'.
[  889.348919][ T2977] net_ratelimit: 339 callbacks suppressed
[  889.348929][ T2977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  889.626787][ T2990] tipc: Resetting bearer <eth:gre0>
[  889.636977][ T2990] batman_adv: batadv0: Interface deactivated: dummy0
[  889.676595][ T2991] netlink: 'syz.0.7762': attribute type 13 has an invalid length.
[  889.680723][ T2991] netlink: 'syz.0.7762': attribute type 17 has an invalid length.
[  889.688782][ T5688] syz0: Port: 1 Link DOWN
[  889.690540][T28427] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  889.693855][T28427] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  889.697379][ T2991] lo: left promiscuous mode
[  889.699171][ T2991] lo: left allmulticast mode
[  889.706391][ T2991] tipc: Resetting bearer <eth:gre0>
[  889.708819][ T2991] tipc: Resetting bearer <eth:gre0>
[  889.727842][ T2991] batman_adv: batadv0: Interface activated: dummy0
[  889.730320][ T2991] batadv0: mtu less than device minimum
[  889.732691][ T2991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  889.736351][ T2991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  889.739958][ T2991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  889.743750][ T2991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  889.747561][ T2991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  889.751688][ T2991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  889.755568][ T2991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  889.759721][ T2991] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  889.772262][ T2991] 8021q: adding VLAN 0 to HW filter on device 60X
[  889.781788][ T2991] wg2: left allmulticast mode
[  889.807606][T28427] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  889.819204][T28427] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  889.823459][ T6757] syz0: Port: 1 Link ACTIVE
[  889.852001][ T2991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7762'.
[  890.512670][ T3002] netlink: 'syz.0.7765': attribute type 1 has an invalid length.
[  890.528820][ T3002] 8021q: adding VLAN 0 to HW filter on device bond18
[  890.548281][ T3002] bond18: (slave veth13): Enslaving as an active interface with a down link
[  890.561283][ T3003] bond18: (slave veth15): Enslaving as an active interface with a down link
[  890.576469][ T3002] bond18: (slave veth17): Enslaving as an active interface with a down link
[  890.585426][ T3002] bond18: entered allmulticast mode
[  890.588939][ T3002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7765'.
[  890.681760][ T3010] netlink: 'syz.0.7767': attribute type 1 has an invalid length.
[  890.706385][ T3010] 8021q: adding VLAN 0 to HW filter on device bond19
[  890.718608][ T3010] vlan7: entered allmulticast mode
[  890.720471][ T3010] bond19: entered allmulticast mode
[  890.759459][ T3013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7768'.
[  891.619275][ T3019] netlink: 'syz.0.7770': attribute type 3 has an invalid length.
[  892.007025][ T3035] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7774'.
[  892.012792][ T3035] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  892.207032][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7778'.
[  892.210609][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7778'.
[  892.383710][ T3050] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7780'.
[  892.429850][ T3050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7780'.
[  892.437091][ T3050] netlink: 'syz.1.7780': attribute type 4 has an invalid length.
[  893.013932][ T5613] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  893.019899][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  893.019916][ T5613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  893.019924][ T5613] Call Trace:
[  893.019931][ T5613]  <TASK>
[  893.019938][ T5613]  dump_stack_lvl+0xe8/0x150
[  893.019959][ T5613]  dump_header+0xd3/0x4c0
[  893.019981][ T5613]  oom_kill_process+0x3ab/0x970
[  893.020053][ T5613]  out_of_memory+0x106c/0x1410
[  893.020069][ T5613]  ? try_charge_memcg+0xbb9/0x1570
[  893.020090][ T5613]  ? __pfx___mutex_lock+0x10/0x10
[  893.020110][ T5613]  ? __pfx_out_of_memory+0x10/0x10
[  893.020123][ T5613]  ? do_raw_spin_unlock+0x4d/0x210
[  893.020149][ T5613]  try_charge_memcg+0xc77/0x1570
[  893.020181][ T5613]  ? __pfx_try_charge_memcg+0x10/0x10
[  893.020197][ T5613]  ? percpu_ref_tryget+0x15/0x180
[  893.020231][ T5613]  ? charge_memcg+0x23/0x2b0
[  893.020250][ T5613]  charge_memcg+0x1a2/0x2b0
[  893.020269][ T5613]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  893.020286][ T5613]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  893.020304][ T5613]  __swap_cache_prepare_and_add+0xdc/0x700
[  893.020323][ T5613]  ? page_rmappable_folio+0x9a/0x170
[  893.020344][ T5613]  swap_cache_alloc_folio+0xf1/0x240
[  893.020360][ T5613]  swap_cluster_readahead+0x355/0x670
[  893.020381][ T5613]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  893.020404][ T5613]  ? get_vma_policy+0x27b/0x3c0
[  893.020425][ T5613]  swapin_readahead+0x196/0xc50
[  893.020442][ T5613]  ? swap_table_get+0x1e/0x260
[  893.020460][ T5613]  ? __pfx_swapin_readahead+0x10/0x10
[  893.020478][ T5613]  ? swap_table_get+0x1e/0x260
[  893.020493][ T5613]  ? swap_table_get+0x1e/0x260
[  893.020505][ T5613]  ? swap_table_get+0x1e/0x260
[  893.020518][ T5613]  ? swap_table_get+0x216/0x260
[  893.020533][ T5613]  ? swap_cache_get_folio+0x2e4/0x2f0
[  893.020550][ T5613]  do_swap_page+0x555/0x5120
[  893.020568][ T5613]  ? __pte_offset_map+0x29/0x240
[  893.020584][ T5613]  ? __pte_offset_map+0x29/0x240
[  893.020605][ T5613]  ? do_swap_page+0x128/0x5120
[  893.020620][ T5613]  ? __pfx_do_swap_page+0x10/0x10
[  893.020633][ T5613]  ? __pte_offset_map+0x1ae/0x240
[  893.020651][ T5613]  ? pte_offset_map_rw_nolock+0xea/0x160
[  893.020669][ T5613]  handle_mm_fault+0x12d4/0x3170
[  893.020697][ T5613]  ? handle_mm_fault+0xee/0x3170
[  893.020718][ T5613]  ? __pfx_handle_mm_fault+0x10/0x10
[  893.020731][ T5613]  ? lock_vma_under_rcu+0x45a/0x500
[  893.020768][ T5613]  do_user_addr_fault+0xa73/0x1340
[  893.020788][ T5613]  ? rcu_is_watching+0x15/0xb0
[  893.020805][ T5613]  ? trace_page_fault_user+0x84/0x1e0
[  893.020821][ T5613]  exc_page_fault+0x6a/0xc0
[  893.020840][ T5613]  asm_exc_page_fault+0x26/0x30
[  893.020853][ T5613] RIP: 0033:0x7faeb1f5d68e
[  893.020868][ T5613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  893.020878][ T5613] RSP: 002b:00007ffc43a27b98 EFLAGS: 00010246
[  893.020891][ T5613] RAX: 0000000000000000 RBX: 0000555558e79500 RCX: 00007faeb1f5d68e
[  893.020900][ T5613] RDX: 00007ffc43a27bf0 RSI: 0000000000000000 RDI: 0000000000000000
[  893.020908][ T5613] RBP: 00007ffc43a27c5c R08: 0000000000000000 R09: 0000000000000000
[  893.020916][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  893.020925][ T5613] R13: 00000000000927c0 R14: 00000000000d9ccb R15: 00007ffc43a27cb0
[  893.020972][ T5613]  </TASK>
[  893.233969][ T5613] memory: usage 307200kB, limit 307200kB, failcnt 6203
[  893.236331][ T5613] memory+swap: usage 307360kB, limit 9007199254740988kB, failcnt 0
[  893.239411][ T5613] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0
[  893.242423][ T5613] Memory cgroup stats for /syz0:
[  893.243681][ T5613] cache 0
[  893.246731][ T5613] rss 0
[  893.247833][ T5613] rss_huge 0
[  893.248847][ T5613] shmem 0
[  893.250144][ T5613] mapped_file 0
[  893.251526][ T5613] dirty 0
[  893.252714][ T5613] writeback 0
[  893.254023][ T5613] workingset_refault_anon 31
[  893.255834][ T5613] workingset_refault_file 1041
[  893.257730][ T5613] swap 163840
[  893.258959][ T5613] swapcached 393216
[  893.261022][ T5613] pgpgin 514820
[  893.262342][ T5613] pgpgout 514808
[  893.263624][ T5613] pgfault 900341
[  893.264796][ T5613] pgmajfault 29
[  893.265799][ T5613] inactive_anon 0
[  893.267176][ T5613] active_anon 49152
[  893.268486][ T5613] inactive_file 0
[  893.269743][ T5613] active_file 0
[  893.270905][ T5613] unevictable 0
[  893.271902][ T5613] hierarchical_memory_limit 314572800
[  893.273904][ T5613] hierarchical_memsw_limit 9223372036854771712
[  893.276175][ T5613] total_cache 0
[  893.277490][ T5613] total_rss 0
[  893.278715][ T5613] total_rss_huge 0
[  893.280271][ T5613] total_shmem 0
[  893.281861][ T5613] total_mapped_file 0
[  893.283397][ T5613] total_dirty 0
[  893.284713][ T5613] total_writeback 0
[  893.286548][ T5613] total_workingset_refault_anon 31
[  893.288546][ T5613] total_workingset_refault_file 1041
[  893.296114][ T5613] total_swap 163840
[  893.310123][ T5613] total_swapcached 393216
[  893.311836][ T5613] total_pgpgin 514826
[  893.314170][ T5613] total_pgpgout 514814
[  893.320164][ T5613] total_pgfault 900354
[  893.321788][ T5613] total_pgmajfault 29
[  893.330417][ T5613] total_inactive_anon 0
[  893.331734][ T5613] total_active_anon 49152
[  893.338344][ T5613] total_inactive_file 0
[  893.339717][ T5613] total_active_file 0
[  893.342877][ T5613] total_unevictable 0
[  893.345469][ T5613] anon_cost 0
[  893.346865][ T5613] file_cost 0
[  893.349329][ T5613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7778,pid=3044,uid=0
[  893.359888][ T5613] Memory cgroup out of memory: Killed process 3044 (syz.0.7778) total-vm:102364kB, anon-rss:1272kB, file-rss:23392kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  893.653690][ T3074] syzkaller1: entered promiscuous mode
[  893.655612][ T3074] syzkaller1: entered allmulticast mode
[  893.872342][ T3089] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  894.152386][ T3113] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7792'.
[  894.629508][ T3136] tipc: Enabling of bearer <eth:gre0> rejected, already enabled
[  895.014265][ T3160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7807'.
[  895.014768][ T3159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7805'.
[  895.017947][ T3160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7807'.
[  895.194917][ T3170] sctp: [Deprecated]: syz.2.7810 (pid 3170) Use of int in max_burst socket option.
[  895.194917][ T3170] Use struct sctp_assoc_value instead
[  895.393646][ T3179] lo speed is unknown, defaulting to 1000
[  895.629402][ T3186] tipc: Resetting bearer <eth:gre0>
[  895.638975][ T3186] batman_adv: batadv0: Interface deactivated: dummy0
[  895.684905][ T3187] netlink: 'syz.0.7814': attribute type 13 has an invalid length.
[  895.688589][ T3187] netlink: 'syz.0.7814': attribute type 17 has an invalid length.
[  895.754484][ T3187] tipc: Resetting bearer <eth:gre0>
[  895.784620][ T3187] batman_adv: batadv0: Interface activated: dummy0
[  895.787291][ T3187] net_ratelimit: 13 callbacks suppressed
[  895.787303][ T3187] batadv0: mtu less than device minimum
[  895.798944][ T3187] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  895.804078][ T3187] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  895.809045][ T3187] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  895.814181][ T3187] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  895.819292][ T3187] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  895.824254][ T3187] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  895.829073][ T3187] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  895.834132][ T3187] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  895.839025][ T3187] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  895.858434][ T3187] 8021q: adding VLAN 0 to HW filter on device 60X
[  895.911429][ T3196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7814'.
[  896.133861][ T3204] macsec4: entered promiscuous mode
[  896.135676][ T3204] bridge0: entered promiscuous mode
[  896.249250][ T3211] netlink: 'syz.1.7821': attribute type 3 has an invalid length.
[  896.285477][ T3218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7822'.
[  896.313335][ T3219] 8021q: adding VLAN 0 to HW filter on device bond0
[  896.317148][ T3219] batman_adv: batadv0: Interface activated: dummy0
[  896.321890][ T3219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  896.358491][ T3219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  896.363479][ T3219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  896.370471][ T3219] veth1_macvtap: left promiscuous mode
[  896.373162][ T3219] veth0_macvtap: left promiscuous mode
[  896.375600][ T3219] veth0_macvtap: entered promiscuous mode
[  896.379658][ T3219] veth1_macvtap: entered promiscuous mode
[  896.405420][ T6762] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  896.432207][ T3217] 8021q: adding VLAN 0 to HW filter on device bond0
[  896.438054][ T3217] batadv0: left promiscuous mode
[  896.445515][ T3217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  896.459238][ T3226] netlink: 'syz.0.7825': attribute type 58 has an invalid length.
[  896.465088][ T3226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7825'.
[  896.481394][ T3217] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  896.486461][ T6732] lo speed is unknown, defaulting to 1000
[  896.488823][ T6762] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  896.492839][ T6732] syz2: Port: 1 Link ACTIVE
[  896.496442][ T6762] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  896.527476][ T6762] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  896.636313][ T3238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7828'.
[  896.709144][ T3241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7829'.
[  896.727906][ T3244] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7830'.
[  896.742854][ T3246] netlink: 'syz.0.7827': attribute type 4 has an invalid length.
[  896.800613][ T3244] block nbd2: server does not support multiple connections per device.
[  896.805928][ T3244] block nbd2: shutting down sockets
[  896.812533][ T3249] xt_TPROXY: Can be used only with -p tcp or -p udp
[  896.816493][ T3250] xt_TPROXY: Can be used only with -p tcp or -p udp
[  897.661381][ T3279] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7836'.
[  898.048976][ T3297] syzkaller1: entered promiscuous mode
[  898.052377][ T3297] syzkaller1: entered allmulticast mode
[  898.476823][ T3326] tipc: Resetting bearer <eth:gre0>
[  898.598488][ T3328] netlink: 'syz.0.7852': attribute type 27 has an invalid length.
[  898.677843][ T3335] tipc: Resetting bearer <eth:gre0>
[  898.729454][ T3339] xfrm0: entered promiscuous mode
[  898.736918][ T3339] xfrm0: entered allmulticast mode
[  900.085672][ T3384] __nla_validate_parse: 7 callbacks suppressed
[  900.085692][ T3384] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7867'.
[  900.096068][ T3384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7867'.
[  900.358421][ T3402] bond18: entered allmulticast mode
[  900.381307][ T3402] macvlan2: entered promiscuous mode
[  900.383450][ T3402] macvlan2: entered allmulticast mode
[  900.386481][ T3402] bond18: (slave macvlan2): Opening slave failed
[  900.425235][ T3408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7870'.
[  900.425361][ T3409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7872'.
[  900.531224][ T3413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7874'.
[  900.534312][ T3414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7874'.
[  900.542670][ T3413] xt_l2tp: invalid flags combination: 8
[  900.544602][ T3414] xt_l2tp: invalid flags combination: 8
[  900.566846][ T3413] gre0: entered promiscuous mode
[  900.568528][ T3413] gre0: entered allmulticast mode
[  900.681960][ T3420] netlink: 'syz.2.7876': attribute type 12 has an invalid length.
[  900.684548][ T3420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7876'.
[  900.691911][ T3420] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7876'.
[  900.698363][ T3420] netlink: 'syz.2.7876': attribute type 39 has an invalid length.
[  901.146591][ T3433] netlink: 'syz.0.7882': attribute type 17 has an invalid length.
[  901.312915][ T3449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7886'.
[  901.400550][ T3453] lo speed is unknown, defaulting to 1000
[  901.522321][ T3431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  901.903741][ T3474] syzkaller1: entered promiscuous mode
[  901.905787][ T3474] syzkaller1: entered allmulticast mode
[  902.306815][ T3487] bond19: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  902.312089][ T3487] bond19 (unregistering): Released all slaves
[  902.526995][ T3495] netlink: 'syz.1.7897': attribute type 10 has an invalid length.
[  902.530347][ T3495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7897'.
[  902.533837][ T3495] net_ratelimit: 13 callbacks suppressed
[  902.533854][ T3495] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  903.118852][ T3503] netlink: 'syz.0.7900': attribute type 1 has an invalid length.
[  903.143855][ T3503] 8021q: adding VLAN 0 to HW filter on device bond20
[  903.159394][ T3503] vlan8: entered allmulticast mode
[  903.161483][ T3503] bond20: entered allmulticast mode
[  903.345917][ T3516] veth1_vlan: left promiscuous mode
[  903.349494][ T3516] veth0_vlan: left promiscuous mode
[  903.353660][ T3516] veth0_vlan: entered promiscuous mode
[  903.359138][ T3516] veth1_vlan: entered promiscuous mode
[  903.382030][ T3516] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  903.395699][ T6762] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  903.399056][ T6762] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  903.411392][ T6762] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  903.417219][ T6762] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  903.531066][ T3519] bridge_slave_0: entered allmulticast mode
[  903.754888][ T3551] netlink: 'syz.2.7906': attribute type 1 has an invalid length.
[  903.772098][ T3551] 8021q: adding VLAN 0 to HW filter on device bond16
[  904.743296][ T3604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  904.747244][ T3603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  904.759332][ T3603] pim6reg: left allmulticast mode
[  904.786136][ T3604] pimreg9: entered allmulticast mode
[  904.939009][ T3616] lo speed is unknown, defaulting to 1000
[  905.153624][ T3640] __nla_validate_parse: 5 callbacks suppressed
[  905.153643][ T3640] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7937'.
[  905.922295][ T3663] netlink: 'syz.2.7944': attribute type 3 has an invalid length.
[  906.069462][ T3668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7945'.
[  906.159027][ T3675] tipc: Resetting bearer <eth:gre0>
[  906.176951][ T3675] xfrm0: left promiscuous mode
[  906.181732][ T3675] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  906.190802][ T3675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7948'.
[  906.315491][ T3677] netlink: 'syz.0.7949': attribute type 1 has an invalid length.
[  906.367411][ T3677] 8021q: adding VLAN 0 to HW filter on device bond21
[  906.405937][ T3677] bond21: (slave veth19): Enslaving as an active interface with a down link
[  906.425872][ T3677] 8021q: adding VLAN 0 to HW filter on device batadv1
[  906.432313][ T3677] bond21: (slave batadv1): making interface the new active one
[  906.436039][ T3677] batadv1: entered promiscuous mode
[  906.438234][ T3677] bond21: (slave batadv1): Enslaving as an active interface with an up link
[  906.455338][ T3682] netlink: 'syz.1.7951': attribute type 6 has an invalid length.
[  906.459361][ T3677] bond21 (unregistering): (slave veth19): Releasing active interface
[  906.465771][ T3677] bond21 (unregistering): (slave batadv1): Releasing active interface
[  906.477710][ T3677] bond21 (unregistering): Released all slaves
[  906.505460][ T3683] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.564526][ T3683] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.625582][ T3683] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.689976][ T3683] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.846480][T28427] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  906.861589][T28427] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  906.872303][T28427] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  906.884111][T28427] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  906.935612][ T3693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7955'.
[  907.048871][ T3708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7959'.
[  907.054110][ T3708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7959'.
[  907.226679][ T3724] tipc: Resetting bearer <eth:gre0>
[  907.237937][ T3724] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  907.247398][ T3724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7964'.
[  907.482256][ T3730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7966'.
[  907.824253][ T3747] netlink: 'syz.0.7972': attribute type 10 has an invalid length.
[  907.827265][ T3747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7972'.
[  907.833831][ T3747] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  907.853334][ T3747] debugfs: 'netdev:nicvf0' already exists in 'phy3'
[  907.890107][ T3749] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  908.132642][ T3770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7979'.
[  908.177480][ T3772] lo speed is unknown, defaulting to 1000
[  909.235422][ T3791] tipc: Resetting bearer <eth:gre0>
[  909.283976][ T3791] batman_adv: batadv0: Interface deactivated: dummy0
[  909.417828][ T7754] syz0: Port: 1 Link DOWN
[  909.439079][ T6762] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  909.449600][ T6762] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  909.461365][ T6762] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  909.468577][ T6762] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  910.460866][ T3864] lo speed is unknown, defaulting to 1000
[  910.769291][ T3869] batman_adv: batadv0: Adding interface: dummy0
[  910.772299][ T3869] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  910.784118][ T3869] batman_adv: batadv0: Interface activated: dummy0
[  910.853903][ T3873] batadv0: mtu less than device minimum
[  910.861244][ T3873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  910.866355][ T3873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  910.871443][ T3873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  910.876353][ T3873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  910.881537][ T3873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  910.885960][ T3873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  910.890215][ T3873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  910.894735][ T3873] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  911.199417][ T3894] netlink: 'syz.0.8009': attribute type 15 has an invalid length.
[  911.346139][ T3900] geneve1: entered promiscuous mode
[  911.536028][ T3907] netlink: 'syz.1.8014': attribute type 58 has an invalid length.
[  911.539342][ T3907] __nla_validate_parse: 2 callbacks suppressed
[  911.539353][ T3907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8014'.
[  911.539501][ T3906] netlink: 'syz.1.8014': attribute type 58 has an invalid length.
[  911.570339][ T3906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8014'.
[  912.049163][ T3930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8020'.
[  912.161650][ T3937] netlink: 'syz.0.8021': attribute type 10 has an invalid length.
[  912.164845][ T3937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8021'.
[  912.168364][ T3937] geneve1: left promiscuous mode
[  912.174651][ T3936] debugfs: 'netdev:nicvf0' already exists in 'phy3'
[  913.272801][ T4000] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8034'.
[  913.504741][ T4006] netlink: 'syz.1.8036': attribute type 58 has an invalid length.
[  913.507275][ T4006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8036'.
[  913.787010][ T3973] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  914.052665][ T4020] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8039'.
[  914.059295][ T4020] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8039'.
[  914.063735][ T4020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8039'.
[  914.253057][ T4031] xt_hashlimit: size too large, truncated to 1048576
[  914.492486][ T4046] net_ratelimit: 12 callbacks suppressed
[  914.492510][ T4046] netlink: zone id is out of range
[  914.696445][ T4061] block nbd0: reconnected socket
[  914.701271][   T56] block nbd0: Receive control failed (result -32)
[  914.874819][ T4073] tipc: Resetting bearer <eth:gre0>
[  914.885986][ T4073] batman_adv: batadv0: Interface activated: dummy0
[  914.889496][ T4073] 8021q: adding VLAN 0 to HW filter on device 60X
[  914.929581][ T4073] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  914.948829][T28427] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  914.953739][ T7754] syz0: Port: 1 Link ACTIVE
[  914.956629][T28427] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  914.962292][T28427] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  914.967843][T28427] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  915.586053][ T4118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8071'.
[  915.627446][ T4118] veth21: entered promiscuous mode
[  915.630802][ T4118] veth21: entered allmulticast mode
[  915.693137][ T4126] syzkaller0: entered promiscuous mode
[  915.695180][ T4126] syzkaller0: entered allmulticast mode
[  915.713371][ T4126] bridge_slave_0: left allmulticast mode
[  915.726954][ T4126] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  916.318800][ T4149] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  916.887244][ T4177] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  917.545251][ T4182] tipc: Resetting bearer <eth:gre0>
[  917.554889][ T4182] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  917.809974][ T4202] netlink: 'syz.1.8097': attribute type 3 has an invalid length.
[  917.904856][ T4200] __nla_validate_parse: 11 callbacks suppressed
[  917.904868][ T4200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8096'.
[  917.963125][ T4209] siw: device registration error -23
[  918.021832][ T4214] netlink: 'syz.2.8099': attribute type 3 has an invalid length.
[  918.053363][ T4216] netlink: 'syz.0.8100': attribute type 3 has an invalid length.
[  918.188935][ T4220] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.8101'.
[  918.834363][ T4239] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8107'.
[  918.844867][ T4242] netlink: 'syz.0.8108': attribute type 6 has an invalid length.
[  918.859188][ T4245] netlink: 'syz.0.8108': attribute type 6 has an invalid length.
[  918.867923][ T4239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8107'.
[  918.878880][ T4239] netlink: 'syz.1.8107': attribute type 4 has an invalid length.
[  918.972745][ T4248] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8109'.
[  919.213655][ T4263] netlink: 'syz.0.8113': attribute type 5 has an invalid length.
[  919.404277][ T4268] netlink: 416 bytes leftover after parsing attributes in process `syz.1.8115'.
[  919.452738][ T4270] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8116'.
[  920.135762][ T4289] netlink: 'syz.0.8121': attribute type 3 has an invalid length.
[  920.323214][ T4294] netlink: 416 bytes leftover after parsing attributes in process `syz.1.8122'.
[  920.374820][ T4296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8123'.
[  921.209820][ T4323] netlink: 416 bytes leftover after parsing attributes in process `syz.2.8129'.
[  921.623968][ T4334] netlink: 'syz.2.8133': attribute type 4 has an invalid length.
[  921.936001][ T4349] netlink: 'syz.2.8137': attribute type 1 has an invalid length.
[  921.962056][ T4349] 8021q: adding VLAN 0 to HW filter on device bond17
[  921.970575][ T4349] vlan4: entered allmulticast mode
[  921.972444][ T4349] bond17: entered allmulticast mode
[  923.364526][ T4406] __nla_validate_parse: 8 callbacks suppressed
[  923.364542][ T4406] netlink: 416 bytes leftover after parsing attributes in process `syz.1.8152'.
[  923.414753][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8153'.
[  923.575741][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8156'.
[  923.690801][ T4428] tipc: Resetting bearer <eth:gre0>
[  923.697853][ T4428] gre0: left promiscuous mode
[  923.699843][ T4428] gre0: left allmulticast mode
[  923.802665][ T4428] tipc: Resetting bearer <eth:vcan0>
[  923.819165][ T4428] batman_adv: batadv0: Interface deactivated: dummy0
[  924.103712][ T4428] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  924.109735][ T4428] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  924.115068][ T4428] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  924.117880][ T4428] vlan1: left allmulticast mode
[  924.119582][ T4428] bond15: left allmulticast mode
[  924.123543][ T4428] macsec4: left promiscuous mode
[  924.148163][ T4428] vlan4: left allmulticast mode
[  924.150919][ T4428] bond17: left allmulticast mode
[  924.155026][ T4433] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8159'.
[  924.158679][ T4434] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  924.165231][ T4434] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  924.242611][T28427] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  924.247180][T28427] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  924.251289][ T4439] netlink: 416 bytes leftover after parsing attributes in process `syz.2.8160'.
[  924.256269][T28427] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  924.259358][T28427] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  924.493425][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8166'.
[  924.604502][ T4469] sctp: [Deprecated]: syz.2.8170 (pid 4469) Use of int in max_burst socket option.
[  924.604502][ T4469] Use struct sctp_assoc_value instead
[  925.106470][ T4495] netlink: 416 bytes leftover after parsing attributes in process `syz.1.8174'.
[  925.151573][ T4497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  925.354799][ T4505] syzkaller0: left allmulticast mode
[  927.800359][ T4482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  927.968133][ T4519] syzkaller0: left promiscuous mode
[  928.262278][ T4533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8182'.
[  928.508477][ T4542] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8186'.
[  928.581906][ T4549] validate_nla: 3 callbacks suppressed
[  928.581971][ T4549] netlink: 'syz.2.8188': attribute type 2 has an invalid length.
[  928.640975][ T4549] siw: device registration error -23
[  928.762375][ T4558] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  928.928857][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8192'.
[  929.003308][ T4572] netlink: 'syz.2.8193': attribute type 58 has an invalid length.
[  929.006889][ T4572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8193'.
[  929.047347][ T4573] syzkaller1: entered promiscuous mode
[  929.049712][ T4573] syzkaller1: entered allmulticast mode
[  929.082821][ T4570] tipc: Resetting bearer <eth:gre0>
[  929.154527][ T6732] lo speed is unknown, defaulting to 1000
[  929.387945][ T4583] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.8198'.
[  929.395466][ T4583] netlink: 324 bytes leftover after parsing attributes in process `syz.1.8198'.
[  929.436599][ T4595] openvswitch: netlink: IPv6 tunnel dst address is zero
[  929.483355][ T4597] netlink: 'syz.0.8202': attribute type 58 has an invalid length.
[  929.493726][ T4597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8202'.
[  929.520930][ T4600] netlink: 416 bytes leftover after parsing attributes in process `syz.2.8203'.
[  929.580510][ T4610] netlink: 'syz.2.8206': attribute type 17 has an invalid length.
[  929.648572][ T4614] xt_bpf: check failed: parse error
[  929.797785][ T4623] netlink: 'syz.0.8210': attribute type 58 has an invalid length.
[  929.800426][ T4623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8210'.
[  929.999969][ T4630] netlink: 'syz.0.8211': attribute type 17 has an invalid length.
[  930.004138][ T4630] tipc: Resetting bearer <eth:gre0>
[  930.013990][ T4630] xfrm0: left allmulticast mode
[  930.017822][ T4630] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  930.636393][ T4634] netlink: 'syz.2.8213': attribute type 58 has an invalid length.
[  930.643974][ T4634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8213'.
[  930.775390][ T4642] tipc: Resetting bearer <eth:gre0>
[  930.930991][ T4642] batman_adv: batadv0: Interface deactivated: dummy0
[  931.359295][ T4642] bond18: left allmulticast mode
[  931.365534][ T6732] lo speed is unknown, defaulting to 1000
[  931.366166][ T4649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8218'.
[  931.368426][ T6732] syz2: Port: 1 Link DOWN
[  931.376620][T28427] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.384765][T28427] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.394466][T28427] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.402878][T28427] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  931.762570][ T4692] netlink: 'syz.0.8229': attribute type 58 has an invalid length.
[  931.826921][ T4698] tipc: Resetting bearer <eth:gre0>
[  931.834913][ T4698] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  931.901134][ T4683] block nbd2: server does not support multiple connections per device.
[  931.914441][ T4683] block nbd2: shutting down sockets
[  932.646079][ T4760] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  932.753788][ T4770] xt_limit: Overflow, try lower: 324382443/0
[  932.814062][ T4775] tipc: Resetting bearer <eth:gre0>
[  932.825529][ T4775] batman_adv: batadv0: Interface deactivated: dummy0
[  932.874774][ T7754] syz0: Port: 1 Link DOWN
[  932.874795][T28427] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  932.879043][T28427] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  932.883199][T28427] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  932.886518][T28427] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  933.096051][ T4801] netlink: 'syz.1.8259': attribute type 58 has an invalid length.
[  933.558882][ T4824] __nla_validate_parse: 11 callbacks suppressed
[  933.558895][ T4824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8265'.
[  933.716194][ T4828] netlink: 'syz.2.8267': attribute type 17 has an invalid length.
[  933.872882][ T4834] tipc: Resetting bearer <eth:gre0>
[  933.889303][ T4834] bridge0: left promiscuous mode
[  933.893572][ T4834] 8021q: adding VLAN 0 to HW filter on device bond0
[  933.896879][ T4834] batman_adv: batadv0: Interface activated: dummy0
[  933.904367][ T4834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  933.937581][ T4834] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  934.183616][ T4850] tipc: Resetting bearer <eth:gre0>
[  934.216140][ T4853] netlink: 'syz.2.8274': attribute type 13 has an invalid length.
[  934.219362][ T4853] netlink: 'syz.2.8274': attribute type 17 has an invalid length.
[  934.318231][ T4850] tipc: Resetting bearer <eth:vcan0>
[  934.338834][ T4850] batman_adv: batadv0: Interface deactivated: dummy0
[  934.404071][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8274'.
[  934.704686][ T4853] 8021q: adding VLAN 0 to HW filter on device bond0
[  934.709343][ T4853] batman_adv: batadv0: Interface activated: dummy0
[  934.715957][ T4853] 8021q: adding VLAN 0 to HW filter on device batadv0
[  934.772392][ T4853] veth1_macvtap: left promiscuous mode
[  934.775989][ T4853] veth0_macvtap: left promiscuous mode
[  934.791266][ T4853] veth0_macvtap: entered promiscuous mode
[  934.804080][ T4853] veth1_macvtap: entered promiscuous mode
[  934.816327][ T4853] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  934.833358][T28427] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  934.839403][T28427] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  934.845831][T28427] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  934.848454][T28427] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  935.153310][ T4871] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  935.393983][ T4898] netlink: 'syz.1.8286': attribute type 13 has an invalid length.
[  935.465750][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8286'.
[  935.513966][ T4910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  935.692812][ T4924] netlink: 'syz.1.8292': attribute type 1 has an invalid length.
[  935.695408][ T4924] netlink: 'syz.1.8292': attribute type 1 has an invalid length.
[  935.698005][ T4924] netlink: 'syz.1.8292': attribute type 1 has an invalid length.
[  935.705909][ T4925] netlink: 'syz.1.8292': attribute type 1 has an invalid length.
[  935.722644][ T4925] netlink: 'syz.1.8292': attribute type 1 has an invalid length.
[  935.725651][ T4925] netlink: 'syz.1.8292': attribute type 1 has an invalid length.
[  935.925508][ T4940] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  935.955550][ T4933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  935.958024][T28427] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  936.225211][ T4950] netlink: 416 bytes leftover after parsing attributes in process `syz.2.8300'.
[  936.297152][ T4952] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8299'.
[  936.346137][ T4948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8299'.
[  936.388329][ T4954] lo speed is unknown, defaulting to 1000
[  936.489664][ T4953] lo speed is unknown, defaulting to 1000
[  936.616904][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8304'.
[  936.705515][ T4968] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8304'.
[  936.810395][ T4968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8304'.
[  936.925770][ T4974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8306'.
[  937.173942][ T4979] syzkaller1: entered promiscuous mode
[  937.180357][ T4979] syzkaller1: entered allmulticast mode
[  937.632251][ T5002] 8021q: adding VLAN 0 to HW filter on device bond0
[  937.635588][ T5002] batman_adv: batadv0: Interface activated: dummy0
[  937.638066][ T5002] batadv0: mtu less than device minimum
[  937.641202][ T5002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  937.644964][ T5002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  937.648683][ T5002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  937.652862][ T5002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  937.656735][ T5002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  937.660823][ T5002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  937.664624][ T5002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  937.669109][ T5002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  937.674246][ T5002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  937.674651][ T5007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  937.691700][ T5002] 8021q: adding VLAN 0 to HW filter on device batadv0
[  937.734056][ T5002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  937.737777][ T5002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  937.746170][ T5002] veth1_vlan: left promiscuous mode
[  937.748750][ T5002] veth0_vlan: left promiscuous mode
[  937.751364][ T5002] veth0_vlan: entered promiscuous mode
[  937.755409][ T5002] veth1_vlan: entered promiscuous mode
[  937.770411][ T5002] 8021q: adding VLAN 0 to HW filter on device bond1
[  937.791018][ T5002] 8021q: adding VLAN 0 to HW filter on device bond2
[  937.794794][ T5002] 8021q: adding VLAN 0 to HW filter on device bond3
[  937.798773][ T5002] 8021q: adding VLAN 0 to HW filter on device bond4
[  937.821915][ T5002] 8021q: adding VLAN 0 to HW filter on device bond5
[  937.828649][ T5002] batadv0: entered promiscuous mode
[  937.833750][ T5002] 8021q: adding VLAN 0 to HW filter on device macsec2
[  937.863078][ T5002] 8021q: adding VLAN 0 to HW filter on device bond6
[  937.875830][ T5002] 8021q: adding VLAN 0 to HW filter on device bond7
[  937.879901][ T5002] 8021q: adding VLAN 0 to HW filter on device bond8
[  937.885147][ T5002] 8021q: adding VLAN 0 to HW filter on device bond9
[  937.896207][ T6743] lo speed is unknown, defaulting to 1000
[  937.903138][ T6743] syz2: Port: 1 Link ACTIVE
[  937.932930][T28427] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  937.935867][T28427] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  937.938821][T28427] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  937.943379][T28427] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  937.961406][T28427] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  937.964234][T28427] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  937.966933][T28427] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  937.969591][T28427] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  938.368884][ T5037] lo speed is unknown, defaulting to 1000
[  938.798851][ T5054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  938.830217][ T5053] lo speed is unknown, defaulting to 1000
[  938.892656][ T5066] __nla_validate_parse: 9 callbacks suppressed
[  938.892669][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8328'.
[  939.214348][ T5082] ip6gretap0: entered promiscuous mode
[  939.279638][ T5082] 8021q: adding VLAN 0 to HW filter on device bond1
[  939.287255][ T5082] 8021q: adding VLAN 0 to HW filter on device bond2
[  939.345532][ T5082] 8021q: adding VLAN 0 to HW filter on device bond3
[  939.355161][ T5082] 8021q: adding VLAN 0 to HW filter on device bond4
[  939.364813][ T5082] 8021q: adding VLAN 0 to HW filter on device bond5
[  939.401657][ T6743] bridge0: entered promiscuous mode
[  939.446545][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  939.449224][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  939.501191][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  939.508893][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  939.976735][ T5097] siw: device registration error -23
[  940.084603][ T5100] validate_nla: 2 callbacks suppressed
[  940.084624][ T5100] netlink: 'syz.1.8336': attribute type 4 has an invalid length.
[  940.091145][ T5100] netlink: 'syz.1.8336': attribute type 8 has an invalid length.
[  940.100535][ T5100] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8336'.
[  940.173757][ T5106] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8338'.
[  940.181671][ T5106] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8338'.
[  940.185226][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8338'.
[  940.282118][ T5109] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8337'.
[  940.466480][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8341'.
[  940.787173][ T5132] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  940.795994][ T5132] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  940.890661][ T5133] tipc: Resetting bearer <eth:gre0>
[  940.929079][ T5133] tipc: Resetting bearer <eth:syzkaller0>
[  941.310318][ T5141] syzkaller0: entered promiscuous mode
[  941.312077][ T5141] syzkaller0: entered allmulticast mode
[  941.315792][ T5141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8345'.
[  941.595098][ T5144] xt_hashlimit: size too large, truncated to 1048576
[  942.007991][ T5153] netlink: 416 bytes leftover after parsing attributes in process `syz.0.8349'.
[  942.274768][ T5165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8353'.
[  942.376350][ T5171] SET target dimension over the limit!
[  942.733828][ T5201] netlink: 'syz.2.8362': attribute type 3 has an invalid length.
[  942.938878][ T5214] netlink: 'syz.1.8364': attribute type 1 has an invalid length.
[  942.950539][ T5916] net_ratelimit: 31 callbacks suppressed
[  942.950552][ T5916] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  942.957989][ T5916] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  943.490231][T28427] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  943.494702][T28427] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  944.000265][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  944.004903][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  944.389062][ T5264] netlink: 'syz.1.8382': attribute type 1 has an invalid length.
[  944.425223][ T5264] 8021q: adding VLAN 0 to HW filter on device bond19
[  944.435436][ T5264] __nla_validate_parse: 3 callbacks suppressed
[  944.435450][ T5264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8382'.
[  944.520354][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  944.525824][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  944.556709][ T5264] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  944.584451][ T5267] vlan6: entered allmulticast mode
[  944.586245][ T5267] bond19: entered allmulticast mode
[  944.707707][ T5274] lo speed is unknown, defaulting to 1000
[  945.091764][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  945.098996][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  945.188717][ T5276] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  945.202339][ T5276] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  945.287266][ T5276] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  945.298135][ T5276] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  945.397786][ T5276] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  945.405103][ T5276] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  945.549931][ T5276] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  945.565229][ T5276] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  945.734680][ T5317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8392'.
[  945.768696][ T5306] netlink: 'syz.2.8391': attribute type 49 has an invalid length.
[  946.148147][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  946.156457][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  946.259046][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  946.266110][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  946.286792][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  946.291414][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  946.379554][T28427] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  946.384872][T28427] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  946.751231][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8396'.
[  948.078673][ T5399] netlink: 'syz.0.8407': attribute type 16 has an invalid length.
[  948.085497][ T5399] netlink: 'syz.0.8407': attribute type 17 has an invalid length.
[  948.115310][ T5399] batman_adv: batadv0: Interface activated: dummy0
[  948.119141][ T5399] 8021q: adding VLAN 0 to HW filter on device 60X
[  948.180841][   T12] net_ratelimit: 10 callbacks suppressed
[  948.180863][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  948.189180][   T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  948.189672][ T5399] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  948.240958][T16432] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  948.246117][T16432] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  948.255124][ T6740] syz0: Port: 1 Link ACTIVE
[  948.257098][T16432] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  948.270658][T16432] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  948.469516][ T5423] 8021q: VLANs not supported on gre0
[  948.686434][ T5435] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8415'.
[  948.700573][ T5916] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  948.705624][ T5916] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  948.813720][ T5442] lo speed is unknown, defaulting to 1000
[  949.186988][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8417'.
[  949.221723][ T5916] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  949.226369][ T5916] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  949.244479][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8418'.
[  949.669562][ T5474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8426'.
[  949.751186][T28427] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  949.756903][T28427] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  949.975416][ T5480] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8428'.
[  950.139378][ T5491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8430'.
[  950.176641][ T5495] netlink: 'syz.2.8431': attribute type 1 has an invalid length.
[  950.223027][ T5495] bond18: (slave bridge12): making interface the new active one
[  950.226377][ T5495] bond18: (slave bridge12): Enslaving as an active interface with an up link
[  950.274173][ T5498] netlink: 'syz.0.8432': attribute type 13 has an invalid length.
[  950.278697][ T5498] netlink: 'syz.0.8432': attribute type 17 has an invalid length.
[  950.285007][ T5503] netlink: 'syz.1.8433': attribute type 58 has an invalid length.
[  950.291895][ T5503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8433'.
[  950.312042][T28427] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  950.369819][ T5513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8434'.
[  950.435646][ T5515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8435'.
[  950.498736][ T5523] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8435'.
[  950.862460][ T5535] netlink: 416 bytes leftover after parsing attributes in process `syz.0.8440'.
[  951.106474][ T5538] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  951.129495][ T5538] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  951.163377][ T5541] tipc: Resetting bearer <eth:gre0>
[  951.272196][ T5541] tipc: Resetting bearer <eth:syzkaller0>
[  951.612693][ T5555] netlink: 416 bytes leftover after parsing attributes in process `syz.1.8447'.
[  951.707812][ T5561] netlink: 'syz.1.8449': attribute type 58 has an invalid length.
[  951.712983][ T5561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8449'.
[  951.959783][ T5580] netlink: 'syz.1.8456': attribute type 12 has an invalid length.
[  952.009563][ T5586] netlink: 'syz.1.8457': attribute type 7 has an invalid length.
[  952.668371][ T5623] netlink: 'syz.1.8465': attribute type 58 has an invalid length.
[  952.988108][ T5630] netlink: 'syz.2.8466': attribute type 4 has an invalid length.
[  953.016807][ T5633] netlink: 'syz.2.8467': attribute type 58 has an invalid length.
[  953.022440][ T5634] netlink: 'syz.2.8467': attribute type 58 has an invalid length.
[  953.164100][ T5639] geneve4: entered promiscuous mode
[  953.166226][ T5639] geneve4: entered allmulticast mode
[  953.380344][T28427] net_ratelimit: 13 callbacks suppressed
[  953.380362][T28427] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  953.387995][T28427] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  953.722105][ T5681] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  953.868392][ T5699] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  954.418482][ T5726] netlink: 'syz.0.8478': attribute type 58 has an invalid length.
[  955.022302][ T5755] __nla_validate_parse: 12 callbacks suppressed
[  955.022321][ T5755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8487'.
[  955.115314][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8488'.
[  955.384862][ T5773] tipc: Resetting bearer <eth:gre0>
[  955.427262][ T5775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8492'.
[  955.452827][ T5773] batman_adv: batadv0: Interface deactivated: dummy0
[  955.612620][ T2376] syz0: Port: 1 Link DOWN
[  955.641126][T28427] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  955.644593][T28427] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  955.647190][T28427] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  955.652096][T28427] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  955.752784][ T5793] netlink: 'syz.0.8496': attribute type 17 has an invalid length.
[  955.796867][ T5795] lo speed is unknown, defaulting to 1000
[  956.439002][ T5809] netlink: 'syz.1.8498': attribute type 3 has an invalid length.
[  956.443540][ T5809] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002
[  956.498764][ T5814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  956.869333][ T5837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  956.877095][ T5837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  957.375383][ T5839] validate_nla: 5 callbacks suppressed
[  957.375395][ T5839] netlink: 'syz.1.8508': attribute type 58 has an invalid length.
[  957.380082][ T5839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8508'.
[  957.545108][ T5842] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  957.582278][ T5855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8511'.
[  957.817369][ T5881] netlink: 'syz.0.8518': attribute type 13 has an invalid length.
[  957.828005][ T5881] netlink: 'syz.0.8518': attribute type 17 has an invalid length.
[  957.858820][ T5881] batman_adv: batadv0: Interface activated: dummy0
[  957.864587][ T5881] 8021q: adding VLAN 0 to HW filter on device 60X
[  957.915739][ T5881] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  957.939633][T16432] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  957.950710][T16432] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  957.962699][ T6743] syz0: Port: 1 Link ACTIVE
[  957.964633][T16432] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  957.967998][T16432] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  958.053629][ T5891] netlink: 'syz.0.8521': attribute type 1 has an invalid length.
[  958.056830][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8521'.
[  958.269361][ T5904] netlink: 'syz.0.8523': attribute type 6 has an invalid length.
[  958.361795][ T5902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8524'.
[  958.365390][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8524'.
[  958.369686][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8524'.
[  958.452474][ T5911] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8526'.
[  959.328398][ T5948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  959.526716][ T5956] openvswitch: netlink: IP tunnel TTL not specified.
[  960.158923][ T5965] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  960.168257][ T5965] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  960.245481][ T5968] __nla_validate_parse: 4 callbacks suppressed
[  960.245500][ T5968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8544'.
[  960.696398][ T5988] netlink: 'syz.1.8549': attribute type 21 has an invalid length.
[  960.699181][ T5988] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8549'.
[  960.702806][ T5988] netlink: 'syz.1.8549': attribute type 5 has an invalid length.
[  960.705543][ T5988] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8549'.
[  960.765176][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  961.093557][ T6003] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  961.096507][ T6003] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  961.120251][ T6003] lo speed is unknown, defaulting to 1000
[  961.858015][ T6035] lo speed is unknown, defaulting to 1000
[  961.919882][ T6042] nbd: nbd0 already in use
[  962.146071][ T6050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  962.198287][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8571'.
[  962.557736][ T6062] tipc: Resetting bearer <eth:gre0>
[  962.579174][ T6066] netlink: 'syz.1.8573': attribute type 13 has an invalid length.
[  962.588869][ T6066] netlink: 'syz.1.8573': attribute type 17 has an invalid length.
[  962.687680][ T6064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8574'.
[  962.717741][ T6062] batman_adv: batadv0: Interface deactivated: dummy0
[  962.756202][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8573'.
[  963.487041][ T6743] lo speed is unknown, defaulting to 1000
[  963.489486][ T6743] syz2: Port: 1 Link DOWN
[  963.529903][ T6066] 8021q: adding VLAN 0 to HW filter on device bond0
[  963.534704][ T6066] batman_adv: batadv0: Interface activated: dummy0
[  963.539175][ T6066] batadv0: left promiscuous mode
[  963.543120][ T6066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  963.591827][ T6066] veth1_vlan: left promiscuous mode
[  963.595285][ T6066] veth0_vlan: left promiscuous mode
[  963.598550][ T6066] veth0_vlan: entered promiscuous mode
[  963.608110][ T6066] veth1_vlan: entered promiscuous mode
[  963.626767][ T6066] 8021q: adding VLAN 0 to HW filter on device bond1
[  963.655743][ T6066] 8021q: adding VLAN 0 to HW filter on device bond2
[  963.659786][ T6066] 8021q: adding VLAN 0 to HW filter on device bond3
[  963.665797][ T6066] 8021q: adding VLAN 0 to HW filter on device bond4
[  963.671245][ T6066] 8021q: adding VLAN 0 to HW filter on device bond5
[  963.684853][ T6066] batadv0: entered promiscuous mode
[  963.687443][ T6066] 8021q: adding VLAN 0 to HW filter on device macsec2
[  963.744424][ T6066] 8021q: adding VLAN 0 to HW filter on device bond6
[  963.753797][ T6066] 8021q: adding VLAN 0 to HW filter on device bond7
[  963.759923][ T6066] 8021q: adding VLAN 0 to HW filter on device bond8
[  963.766722][ T6066] 8021q: adding VLAN 0 to HW filter on device bond9
[  963.772352][ T6066] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  963.808300][ T6738] lo speed is unknown, defaulting to 1000
[  963.819531][ T6738] syz2: Port: 1 Link ACTIVE
[  963.925294][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8577'.
[  963.938412][ T6082] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.8577'.
[  964.023873][ T6090] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  964.037027][ T6090] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8579'.
[  964.038647][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8581'.
[  964.307502][ T6119] bridge_slave_0: entered promiscuous mode
[  964.445296][ T6119] tipc: Resetting bearer <eth:gre0>
[  964.627236][ T6119] tipc: Resetting bearer <eth:vcan0>
[  964.643221][ T6119] batman_adv: batadv0: Interface deactivated: dummy0
[  964.857013][ T6136] xt_hashlimit: size too large, truncated to 1048576
[  965.298533][T16432] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  965.308198][T16432] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  965.314678][T16432] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  965.320800][T16432] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  965.329175][T16432] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  965.335625][T16432] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  965.345155][T16432] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  965.356243][T16432] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  965.989031][ T6170] lo speed is unknown, defaulting to 1000
[  967.258423][ T6188] batadv0: mtu less than device minimum
[  967.263779][ T6188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.268909][ T6188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.273998][ T6188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.279007][ T6188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.283779][ T6188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.288078][ T6188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.292254][ T6188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.296631][ T6188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.301157][ T6188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  967.568451][ T6197] __nla_validate_parse: 1 callbacks suppressed
[  967.568464][ T6197] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.8604'.
[  968.192513][ T6239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  968.248431][ T6239] tipc: Resetting bearer <eth:gre0>
[  968.369533][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8609'.
[  968.377697][ T6239] batman_adv: batadv0: Interface deactivated: dummy0
[  968.496123][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8610'.
[  969.022695][ T6754] lo speed is unknown, defaulting to 1000
[  969.024598][ T6754] syz2: Port: 1 Link DOWN
[  969.042657][ T5916] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  969.051794][ T5916] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  969.062029][ T5916] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  969.068896][ T5916] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  969.117172][ T5916] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  969.124159][ T5916] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  969.135871][ T5916] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  969.142793][ T5916] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  969.149645][ T6249] lo speed is unknown, defaulting to 1000
[  969.557418][ T6274] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8617'.
[  969.914725][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8624'.
[  969.918340][ T6304] openvswitch: : Dropping previously announced user features
[  969.938008][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8621'.
[  970.128478][ T6313] netlink: 'syz.2.8626': attribute type 13 has an invalid length.
[  970.131680][ T6313] netlink: 'syz.2.8626': attribute type 17 has an invalid length.
[  970.155158][ T6313] ip6gretap0: left promiscuous mode
[  970.160976][ T6311] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8625'.
[  970.162792][ T6313] bridge0: left promiscuous mode
[  970.168412][ T6313] 8021q: adding VLAN 0 to HW filter on device bond0
[  970.172931][ T6313] batman_adv: batadv0: Interface activated: dummy0
[  970.178188][ T6313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  970.216836][ T6313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  970.221867][ T6313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  970.230542][ T6313] veth1_macvtap: left promiscuous mode
[  970.233916][ T6313] veth0_macvtap: left promiscuous mode
[  970.237540][ T6313] veth0_macvtap: entered promiscuous mode
[  970.241955][ T6313] veth1_macvtap: entered promiscuous mode
[  970.256532][ T6313] ip6gretap0: entered promiscuous mode
[  970.271928][ T6313] 8021q: adding VLAN 0 to HW filter on device bond1
[  970.277543][ T6313] 8021q: adding VLAN 0 to HW filter on device bond2
[  970.309966][ T6313] 8021q: adding VLAN 0 to HW filter on device bond3
[  970.318710][ T6313] 8021q: adding VLAN 0 to HW filter on device bond4
[  970.324060][ T6313] 8021q: adding VLAN 0 to HW filter on device bond5
[  970.368931][    T9] bridge0: entered promiscuous mode
[  970.371550][ T6762] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  970.374552][ T6762] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  970.380416][ T6762] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  970.383293][ T6762] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  970.388077][ T6762] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  970.394591][ T6762] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  970.407780][ T6762] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  970.411709][ T6762] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  970.416236][ T6311] lo speed is unknown, defaulting to 1000
[  970.785198][ T6345] netlink: 'syz.0.8633': attribute type 3 has an invalid length.
[  970.911313][ T6350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  970.938821][ T6354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8636'.
[  971.029956][ T6356] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8637'.
[  971.254749][ T6365] xt_HMARK: proto mask must be zero with L3 mode
[  971.265966][ T6366] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.8640'.
[  971.863962][ T6405] tipc: Resetting bearer <eth:gre0>
[  971.970426][ T6405] tipc: Resetting bearer <eth:vcan0>
[  971.979197][ T6405] batman_adv: batadv0: Interface deactivated: dummy0
[  972.569092][T16432] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  972.572845][T16432] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.579994][T16432] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  972.586949][T16432] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.594976][T16432] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  972.599268][T16432] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.606048][T16432] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  972.608988][T16432] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.825098][ T6428] __nla_validate_parse: 4 callbacks suppressed
[  972.825113][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8657'.
[  973.003114][ T6444] netlink: 'syz.2.8661': attribute type 2 has an invalid length.
[  973.006249][ T6444] netlink: 'syz.2.8661': attribute type 1 has an invalid length.
[  973.017437][ T6444] netlink: 'syz.2.8661': attribute type 1 has an invalid length.
[  973.020697][ T6444] net_ratelimit: 11 callbacks suppressed
[  973.020708][ T6444] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  973.120784][ T6448] netlink: 'syz.2.8664': attribute type 1 has an invalid length.
[  973.123959][ T6448] netlink: 'syz.2.8664': attribute type 2 has an invalid length.
[  973.127104][ T6448] netlink: 'syz.2.8664': attribute type 3 has an invalid length.
[  973.376744][ T6451] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8665'.
[  973.496199][ T6460] netlink: 'syz.2.8667': attribute type 12 has an invalid length.
[  973.500313][ T6460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8667'.
[  973.538877][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8669'.
[  973.582872][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8670'.
[  973.624840][T24632] block nbd2: Receive control failed (result -1)
[  974.226934][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8678'.
[  974.278901][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8679'.
[  974.366656][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8681'.
[  974.464572][ T6506] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8682'.
[  974.525927][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8685'.
[  974.679492][ T6529] sch_tbf: burst 240 is lower than device lo mtu (1294) !
[  974.912433][ T6540] "syz.1.8692" (6540) uses obsolete ecb(arc4) skcipher
[  974.919404][ T6541] "syz.1.8692" (6541) uses obsolete ecb(arc4) skcipher
[  975.022131][ T6548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  975.157126][ T6555] validate_nla: 2 callbacks suppressed
[  975.157143][ T6555] netlink: 'syz.1.8697': attribute type 3 has an invalid length.
[  975.321823][ T6565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.510253][ T6457] Bluetooth: hci2: command 0x0406 tx timeout
[  975.704143][ T6575] netlink: 'syz.2.8704': attribute type 3 has an invalid length.
[  975.842221][ T6591] netlink: 'syz.2.8708': attribute type 58 has an invalid length.
[  976.013132][ T6607] netlink: 'syz.0.8713': attribute type 11 has an invalid length.
[  976.059990][ T6612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  976.633508][ T6677] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  976.633508][ T6677] Please contact the netfilter-devel mailing list or update your nftables rules.
[  976.856171][ T6695] 8021q: adding VLAN 0 to HW filter on device bond19
[  976.885619][ T6690] bond20 (unregistering): Released all slaves
[  976.895580][ T6701] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  977.292204][ T6728] 
[  977.293197][ T6728] ======================================================
[  977.295324][ T6728] WARNING: possible circular locking dependency detected
[  977.297421][ T6728] syzkaller #0 Not tainted
[  977.298898][ T6728] ------------------------------------------------------
[  977.300955][ T6728] syz.0.8741/6728 is trying to acquire lock:
[  977.302739][ T6728] ffff888196bc7178 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130
[  977.305380][ T6728] 
[  977.305380][ T6728] but task is already holding lock:
[  977.307599][ T6728] ffff888024aad4d0 (&fp->aux->used_maps_mutex){+.+.}-{4:4}, at: bpf_obj_get_info_by_fd+0x8eb/0x32f0
[  977.310870][ T6728] 
[  977.310870][ T6728] which lock already depends on the new lock.
[  977.310870][ T6728] 
[  977.313939][ T6728] 
[  977.313939][ T6728] the existing dependency chain (in reverse order) is:
[  977.316740][ T6728] 
[  977.316740][ T6728] -> #8 (&fp->aux->used_maps_mutex){+.+.}-{4:4}:
[  977.319293][ T6728]        __mutex_lock+0x1a3/0x1550
[  977.320913][ T6728]        __bpf_prog_select_runtime+0x9f/0xb20
[  977.322776][ T6728]        bpf_prepare_filter+0x1130/0x12d0
[  977.324571][ T6728]        sk_reuseport_attach_filter+0x24/0x210
[  977.326563][ T6728]        sk_setsockopt+0x1e50/0x2d60
[  977.328610][ T6728]        do_sock_setsockopt+0x11b/0x1b0
[  977.330776][ T6728]        __x64_sys_setsockopt+0x13d/0x1b0
[  977.332563][ T6728]        do_syscall_64+0x15f/0xf80
[  977.334167][ T6728]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.336171][ T6728] 
[  977.336171][ T6728] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  977.338776][ T6728]        lock_sock_nested+0x41/0x100
[  977.340869][ T6728]        inet_shutdown+0x6a/0x390
[  977.342847][ T6728]        nbd_mark_nsock_dead+0x2e9/0x560
[  977.345016][ T6728]        recv_work+0x1c2e/0x1d40
[  977.346938][ T6728]        process_scheduled_works+0xb5d/0x1860
[  977.349345][ T6728]        worker_thread+0xa53/0xfc0
[  977.351356][ T6728]        kthread+0x389/0x470
[  977.353373][ T6728]        ret_from_fork+0x514/0xb70
[  977.355338][ T6728]        ret_from_fork_asm+0x1a/0x30
[  977.357399][ T6728] 
[  977.357399][ T6728] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  977.360351][ T6728]        __mutex_lock+0x1a3/0x1550
[  977.361995][ T6728]        nbd_queue_rq+0x37b/0x1100
[  977.363770][ T6728]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  977.365827][ T6728]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  977.368113][ T6728]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  977.370386][ T6728]        blk_mq_run_hw_queue+0x348/0x4f0
[  977.372165][ T6728]        blk_mq_dispatch_list+0xd16/0xe10
[  977.373995][ T6728]        blk_mq_flush_plug_list+0x48d/0x570
[  977.375898][ T6728]        __blk_flush_plug+0x3ed/0x4d0
[  977.377560][ T6728]        __submit_bio+0x28d/0x580
[  977.379092][ T6728]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  977.380968][ T6728]        block_read_full_folio+0x599/0x830
[  977.382692][ T6728]        filemap_read_folio+0x137/0x3b0
[  977.384355][ T6728]        do_read_cache_folio+0x358/0x590
[  977.386012][ T6728]        read_part_sector+0xb6/0x2b0
[  977.387699][ T6728]        adfspart_check_ICS+0xb1/0x960
[  977.389333][ T6728]        bdev_disk_changed+0x817/0x1770
[  977.390959][ T6728]        blkdev_get_whole+0x380/0x510
[  977.392578][ T6728]        bdev_open+0x31e/0xd30
[  977.394018][ T6728]        blkdev_open+0x470/0x610
[  977.395590][ T6728]        do_dentry_open+0x785/0x14e0
[  977.397317][ T6728]        vfs_open+0x3b/0x340
[  977.398720][ T6728]        path_openat+0x2e08/0x3860
[  977.400298][ T6728]        do_file_open+0x23e/0x4a0
[  977.401832][ T6728]        do_sys_openat2+0x113/0x200
[  977.403395][ T6728]        __x64_sys_openat+0x138/0x170
[  977.405020][ T6728]        do_syscall_64+0x15f/0xf80
[  977.406618][ T6728]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.408587][ T6728] 
[  977.408587][ T6728] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  977.410850][ T6728]        __mutex_lock+0x1a3/0x1550
[  977.412345][ T6728]        nbd_queue_rq+0xc6/0x1100
[  977.413836][ T6728]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  977.415628][ T6728]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  977.417575][ T6728]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  977.419511][ T6728]        blk_mq_run_hw_queue+0x348/0x4f0
[  977.421201][ T6728]        blk_mq_dispatch_list+0xd16/0xe10
[  977.423349][ T6728]        blk_mq_flush_plug_list+0x48d/0x570
[  977.425600][ T6728]        __blk_flush_plug+0x3ed/0x4d0
[  977.427604][ T6728]        __submit_bio+0x28d/0x580
[  977.429530][ T6728]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  977.431853][ T6728]        block_read_full_folio+0x599/0x830
[  977.434088][ T6728]        filemap_read_folio+0x137/0x3b0
[  977.436157][ T6728]        do_read_cache_folio+0x358/0x590
[  977.438296][ T6728]        read_part_sector+0xb6/0x2b0
[  977.440226][ T6728]        adfspart_check_ICS+0xb1/0x960
[  977.441897][ T6728]        bdev_disk_changed+0x817/0x1770
[  977.443542][ T6728]        blkdev_get_whole+0x380/0x510
[  977.445131][ T6728]        bdev_open+0x31e/0xd30
[  977.446685][ T6728]        blkdev_open+0x470/0x610
[  977.448174][ T6728]        do_dentry_open+0x785/0x14e0
[  977.449743][ T6728]        vfs_open+0x3b/0x340
[  977.451136][ T6728]        path_openat+0x2e08/0x3860
[  977.452687][ T6728]        do_file_open+0x23e/0x4a0
[  977.454524][ T6728]        do_sys_openat2+0x113/0x200
[  977.456583][ T6728]        __x64_sys_openat+0x138/0x170
[  977.458551][ T6728]        do_syscall_64+0x15f/0xf80
[  977.460484][ T6728]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.462562][ T6728] 
[  977.462562][ T6728] -> #4 (set->srcu){.+.+}-{0:0}:
[  977.465107][ T6728]        __synchronize_srcu+0xca/0x300
[  977.466954][ T6728]        elevator_switch+0x1e8/0x7a0
[  977.468822][ T6728]        elevator_change+0x2cc/0x450
[  977.470609][ T6728]        elevator_set_default+0x36c/0x430
[  977.472599][ T6728]        blk_register_queue+0x3e9/0x4e0
[  977.474464][ T6728]        __add_disk+0x677/0xd50
[  977.476052][ T6728]        add_disk_fwnode+0xfb/0x480
[  977.477713][ T6728]        nbd_dev_add+0x72c/0xb50
[  977.479345][ T6728]        nbd_init+0x168/0x1f0
[  977.480834][ T6728]        do_one_initcall+0x250/0x870
[  977.482588][ T6728]        do_initcall_level+0x104/0x190
[  977.484701][ T6728]        do_initcalls+0x59/0xa0
[  977.486393][ T6728]        kernel_init_freeable+0x2a6/0x3e0
[  977.488512][ T6728]        kernel_init+0x1d/0x1d0
[  977.490147][ T6728]        ret_from_fork+0x514/0xb70
[  977.491929][ T6728]        ret_from_fork_asm+0x1a/0x30
[  977.493782][ T6728] 
[  977.493782][ T6728] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  977.496409][ T6728]        __mutex_lock+0x1a3/0x1550
[  977.497968][ T6728]        elevator_change+0x1b3/0x450
[  977.499857][ T6728]        elevator_set_none+0xb5/0x140
[  977.501569][ T6728]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  977.503519][ T6728]        nbd_start_device+0x17f/0xb10
[  977.505112][ T6728]        nbd_genl_connect+0x165b/0x1cf0
[  977.507041][ T6728]        genl_family_rcv_msg_doit+0x22a/0x330
[  977.509138][ T6728]        genl_rcv_msg+0x61c/0x7a0
[  977.510912][ T6728]        netlink_rcv_skb+0x232/0x4b0
[  977.512764][ T6728]        genl_rcv+0x28/0x40
[  977.514375][ T6728]        netlink_unicast+0x75c/0x8e0
[  977.516246][ T6728]        netlink_sendmsg+0x813/0xb40
[  977.518090][ T6728]        ____sys_sendmsg+0x972/0x9f0
[  977.519855][ T6728]        ___sys_sendmsg+0x2a5/0x360
[  977.521405][ T6728]        __x64_sys_sendmsg+0x1bd/0x2a0
[  977.522986][ T6728]        do_syscall_64+0x15f/0xf80
[  977.524515][ T6728]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.526384][ T6728] 
[  977.526384][ T6728] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  977.528894][ T6728]        blk_alloc_queue+0x546/0x680
[  977.530453][ T6728]        __blk_mq_alloc_disk+0x197/0x390
[  977.532070][ T6728]        nbd_dev_add+0x499/0xb50
[  977.533502][ T6728]        nbd_init+0x168/0x1f0
[  977.534852][ T6728]        do_one_initcall+0x250/0x870
[  977.536390][ T6728]        do_initcall_level+0x104/0x190
[  977.537953][ T6728]        do_initcalls+0x59/0xa0
[  977.539407][ T6728]        kernel_init_freeable+0x2a6/0x3e0
[  977.541003][ T6728]        kernel_init+0x1d/0x1d0
[  977.542418][ T6728]        ret_from_fork+0x514/0xb70
[  977.543900][ T6728]        ret_from_fork_asm+0x1a/0x30
[  977.545418][ T6728] 
[  977.545418][ T6728] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  977.547462][ T6728]        fs_reclaim_acquire+0x71/0x100
[  977.549117][ T6728]        kmem_cache_alloc_noprof+0x40/0x650
[  977.550810][ T6728]        mas_alloc_nodes+0x291/0x350
[  977.552394][ T6728]        mas_preallocate+0x2d6/0x640
[  977.553943][ T6728]        vma_link+0x123/0x470
[  977.555458][ T6728]        insert_vm_struct+0x1a5/0x270
[  977.557155][ T6728]        create_init_stack_vma+0x546/0x9b0
[  977.558831][ T6728]        alloc_bprm+0x495/0x5c0
[  977.560221][ T6728]        kernel_execve+0x87/0x930
[  977.561663][ T6728]        try_to_run_init_process+0x13/0x60
[  977.563398][ T6728]        kernel_init+0xad/0x1d0
[  977.564781][ T6728]        ret_from_fork+0x514/0xb70
[  977.566234][ T6728]        ret_from_fork_asm+0x1a/0x30
[  977.567745][ T6728] 
[  977.567745][ T6728] -> #0 (&mm->mmap_lock){++++}-{4:4}:
[  977.569890][ T6728]        __lock_acquire+0x15a5/0x2cf0
[  977.571423][ T6728]        lock_acquire+0x106/0x350
[  977.572846][ T6728]        __might_fault+0xcb/0x130
[  977.574333][ T6728]        bpf_obj_get_info_by_fd+0x97a/0x32f0
[  977.576033][ T6728]        __sys_bpf+0x66e/0x950
[  977.577538][ T6728]        __x64_sys_bpf+0x7c/0x90
[  977.579172][ T6728]        do_syscall_64+0x15f/0xf80
[  977.580729][ T6728]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.582728][ T6728] 
[  977.582728][ T6728] other info that might help us debug this:
[  977.582728][ T6728] 
[  977.585751][ T6728] Chain exists of:
[  977.585751][ T6728]   &mm->mmap_lock --> sk_lock-AF_INET6 --> &fp->aux->used_maps_mutex
[  977.585751][ T6728] 
[  977.589757][ T6728]  Possible unsafe locking scenario:
[  977.589757][ T6728] 
[  977.591853][ T6728]        CPU0                    CPU1
[  977.593416][ T6728]        ----                    ----
[  977.594930][ T6728]   lock(&fp->aux->used_maps_mutex);
[  977.596439][ T6728]                                lock(sk_lock-AF_INET6);
[  977.598412][ T6728]                                lock(&fp->aux->used_maps_mutex);
[  977.600589][ T6728]   rlock(&mm->mmap_lock);
[  977.601876][ T6728] 
[  977.601876][ T6728]  *** DEADLOCK ***
[  977.601876][ T6728] 
[  977.604180][ T6728] 1 lock held by syz.0.8741/6728:
[  977.605637][ T6728]  #0: ffff888024aad4d0 (&fp->aux->used_maps_mutex){+.+.}-{4:4}, at: bpf_obj_get_info_by_fd+0x8eb/0x32f0
[  977.608815][ T6728] 
[  977.608815][ T6728] stack backtrace:
[  977.610498][ T6728] CPU: 0 UID: 0 PID: 6728 Comm: syz.0.8741 Not tainted syzkaller #0 PREEMPT(full) 
[  977.610510][ T6728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  977.610517][ T6728] Call Trace:
[  977.610523][ T6728]  <TASK>
[  977.610530][ T6728]  dump_stack_lvl+0xe8/0x150
[  977.610542][ T6728]  print_circular_bug+0x2e1/0x300
[  977.610555][ T6728]  check_noncircular+0x12e/0x150
[  977.610567][ T6728]  __lock_acquire+0x15a5/0x2cf0
[  977.610576][ T6728]  ? __mutex_lock+0x319/0x1550
[  977.610584][ T6728]  ? finish_task_switch+0x41f/0xbe0
[  977.610595][ T6728]  ? __might_fault+0xaf/0x130
[  977.610605][ T6728]  lock_acquire+0x106/0x350
[  977.610613][ T6728]  ? __might_fault+0xaf/0x130
[  977.610624][ T6728]  ? __might_fault+0xaf/0x130
[  977.610634][ T6728]  __might_fault+0xcb/0x130
[  977.610643][ T6728]  ? __might_fault+0xaf/0x130
[  977.610652][ T6728]  bpf_obj_get_info_by_fd+0x97a/0x32f0
[  977.610664][ T6728]  ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10
[  977.610672][ T6728]  ? __lock_acquire+0x6b5/0x2cf0
[  977.610681][ T6728]  ? try_to_wake_up+0x828/0x1380
[  977.610698][ T6728]  ? bpf_lsm_bpf+0x9/0x20
[  977.610704][ T6728]  ? security_bpf+0x7e/0x2d0
[  977.610714][ T6728]  __sys_bpf+0x66e/0x950
[  977.610725][ T6728]  ? __pfx___sys_bpf+0x10/0x10
[  977.610739][ T6728]  ? rcu_is_watching+0x15/0xb0
[  977.610751][ T6728]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.610759][ T6728]  __x64_sys_bpf+0x7c/0x90
[  977.610769][ T6728]  do_syscall_64+0x15f/0xf80
[  977.610780][ T6728]  ? trace_irq_disable+0x3b/0x140
[  977.610792][ T6728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.610799][ T6728] RIP: 0033:0x7faeb1f9ce59
[  977.610809][ T6728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.610816][ T6728] RSP: 002b:00007faeb2e7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  977.610825][ T6728] RAX: ffffffffffffffda RBX: 00007faeb2215fa0 RCX: 00007faeb1f9ce59
[  977.610831][ T6728] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 000000000000000f
[  977.610837][ T6728] RBP: 00007faeb2032d6f R08: 0000000000000000 R09: 0000000000000000
[  977.610842][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  977.610848][ T6728] R13: 00007faeb2216038 R14: 00007faeb2215fa0 R15: 00007ffc43a278b8
[  977.610857][ T6728]  </TASK>
