last executing test programs:

6.814608236s ago: executing program 2 (id=2541):
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0180f2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8000, {[@generic={0x1, 0xa, "0000000000f1cba4"}, @window={0x3, 0x3}, @fastopen={0x22, 0x4, "97d7"}]}}}}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES8=r0], 0x1c}}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x609, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0)

5.783498019s ago: executing program 2 (id=2543):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a000007002c437ce1f10305172b35138015"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
unshare(0x6020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x40000400)
r1 = gettid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000026c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="05caccd271a7a708781a77aaacc06fd854a36ffe363ff39421fbe53fc1aff6be21eebf1060d9d583cf08cbe59bee578ed7f41c7c062c7a456ce39ce0cee8068f09ced7e13ff2b282d7cd8d356ebf397c0aa4cf08aff87547c78fcfb50ec650900e55ac9efb5223c25e9d5e02c201fc25055b0400d98004008e8023d5c0ddaea06bc76093b33bae721351661243f0d3bb98503b67cd378817d5a3f9bdf33d9bf5c583e77faadca25b4dfa65309a891f82b14fc8c9f2c00a965d2256dc6e"], 0x13b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r5, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = socket$unix(0x1, 0x1, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x2}, {0x10, 0xf}, {0xffff, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0xc0}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x0, 0x2}}}}]}, 0x48}}, 0x62741984ef7a072c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044080)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

5.222236625s ago: executing program 1 (id=2545):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 64)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000240)=<r3=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000300)=r3) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (rerun: 64)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x2000000) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000bfe4a687e14e00000000800b0000000000000015dfd3a338f8ae839412368001880009000000dcbd0007007f0000010a000100aa62b5ebb91dddbb76d44f39b90814d1d996741f38de1ea32433df8234"], 0x48}}, 0x40000) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async)
recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/15, 0xf}, {0x0}], 0x2}, 0x1800000}], 0x2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) (async)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r1, 0x8943, &(0x7f0000000000)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1140000004000000040000f7ffffffffffffff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = socket$kcm(0x10, 0x1, 0x0)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a80000012", 0x2d}], 0x1}, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc)
r8 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x0, 0xffff, 0xfffd, 0xa}, {0x3, 0x200000, 0x64, 0x9, 0x0, 0x0, 0x80000000}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x2}}, 0xe8) (async)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

3.78931113s ago: executing program 1 (id=2548):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x648, [0x0, 0x200000000080, 0x20000000047c, 0x2000000004ac], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x0, 0x805, 'ipvlan1\x00', 'bond0\x00', 'veth0_to_batadv\x00', 'vxcan1\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff], @link_local, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x2d6, 0x2d6, 0x326, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0xc, [{0x2, 0x7, 0x7, 0x8}, {0x2, 0x5, 0x0, 0x5}, {0x40, 0x9, 0x4}, {0xf974, 0xac, 0x6, 0x3}, {0x9, 0x6, 0x7, 0x3}, {0x8, 0xf7, 0x3, 0x200}, {0x8, 0x86, 0x5, 0x10000}, {0xfff7, 0x4, 0x7, 0x65af04e8}, {0x7, 0x3, 0xa, 0x7436}, {0x75d9, 0x6c, 0xb6, 0xd1}, {0x3, 0x0, 0x0, 0xfffffffe}, {0x2, 0x7f, 0xf, 0x530}, {0x8, 0x8, 0x9f, 0x3}, {0x81, 0xfe, 0x5, 0x6}, {0x5, 0x0, 0xbb, 0x6}, {0xa2, 0x9, 0xf8, 0x6d}, {0x96b5, 0x4, 0x8, 0x1}, {0x140, 0x7, 0x0, 0xcf2}, {0x80, 0x5, 0x7, 0x6}, {0x4, 0xf3, 0x8, 0xfffffff7}, {0x40, 0x5, 0xb, 0x3}, {0x90e5, 0xd0, 0xbf, 0xffffffff}, {0x7, 0x7f, 0x4, 0x5}, {0x7, 0x7, 0x63, 0x1}, {0x7, 0x4, 0x6, 0x3}, {0x7, 0x81, 0x30, 0x8}, {0x7, 0x9, 0x2, 0x8001}, {0x4, 0x9, 0x9, 0x31c}, {0xf3, 0x66, 0x36}, {0x7, 0xb, 0x3, 0x7ff}, {0x8, 0x6, 0x5, 0x6}, {0x4, 0xf5, 0x5a, 0x5}, {0x8, 0x7, 0xf3, 0x2c}, {0x800, 0x2, 0x4, 0x3}, {0xef, 0x10, 0x2, 0x80000000}, {0xa, 0x7, 0x5, 0xb95f}, {0xb, 0xc0, 0x9, 0x4}, {0x6, 0x2b, 0x1, 0x1}, {0x5, 0xdc, 0x5, 0x10001}, {0x9, 0x0, 0x1, 0xb}, {0x7fff, 0x2, 0x6, 0x6}, {0xfff8, 0x7, 0x3, 0xb}, {0x3, 0x8, 0x8, 0x9}, {0x8, 0x46, 0x2, 0x1000}, {0x4af6, 0x9, 0xff, 0x9c}, {0x0, 0x9, 0x6, 0x1}, {0x4, 0x2, 0x1, 0xffff0000}, {0x3, 0x2, 0x10, 0x3}, {0x256a, 0x40, 0x9, 0x5}, {0x401, 0xb, 0x8, 0x3}, {0x52, 0x0, 0x81, 0x3}, {0x4, 0x4, 0x20, 0x4af}, {0x0, 0x7, 0xf9}, {0x3ff, 0xf1, 0x2, 0x8}, {0x3, 0x9, 0x1, 0x8}, {0x4, 0x80, 0x3, 0x9}, {0x8, 0x40, 0x4}, {0x0, 0x5, 0x6, 0x9}, {0xfffe, 0x1, 0x5, 0x8}, {0xe8e2, 0x8, 0x6}, {0xd1da, 0x68, 0xf, 0x6}, {0x4, 0x5, 0x7, 0x4}, {0x100, 0x5c, 0x2, 0x8}, {0x9, 0xfc, 0x5, 0x10001}], {0x3}}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x6}}}], [], @common=@log={'log\x00', 0x28, {{0x6, "0c57760684f7e845ee70e9399617626ba4b530ffe350a23514e5cc6f3a5b", 0x5}}}}, {0x5, 0x20, 0x6004, 'sit0\x00', 'bridge_slave_1\x00', 'sit0\x00', 'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff], @random="6651108606e6", [0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2, 0x0, 0x2, [{0x3, 0x0, 0x8906, 'bridge_slave_0\x00', 'veth1\x00', 'veth1_to_team\x00', 'vlan0\x00', @local, [0xff, 0x0, 0x0, 0x0, 0x1fe], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, [0xff, 0x0, 0xff, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@nflog={'nflog\x00', 0x50, {{0x4, 0x3, 0x0, 0x0, 0x0, "171d6aa57a4410d0535f26ac28cadfd8a3bdcccbc85f6984e1bc3e69672ff0a6efed805a7adde32688dbdfc3f1248b1abfebeb345a4a02f4eea06a90a861656e"}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x9, 0x48, 0xf7, 'nr0\x00', 'batadv0\x00', 'ip6gretap0\x00', 'veth1_macvtap\x00', @empty, [0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x9e, 0xd6, [], [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0x10}}}}]}]}, 0x6c0)
sendmsg$sock(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)="37183b46c66ef85074046aae69c3cf8b4d81ae82573a0eceef57e00e0efd821a345b19b6478115f06929eb0c032b6ab30d2aaf62bb93db33b8572c30df87ed3fd57ae8e215ca3cb07b6320fbc35f799a8b3180ac43f9968fd3e9fa66bacc04c0ccd4b624045ee1582cf519ea6e472d4bb4f83d348326babc3e23415454de7dc64f533d5478f372366d4708a1fbe368f925", 0x91}, {&(0x7f0000000840)="3f702e6d280ee5d388a7e5094521a6a7397376a7c51d2d6fd3b63a42650940eb13b5c4e768317b3e6a6d07d389faaf4952839a28ad88c1363d32d5ee0a33869efab543bd987c1590a895add4284b2b67bbefa221d1f087d964d439c34d6df5730231254d1ba49833dd7193aea2b39229e087be66520a77ae79d02e11e2489f422d08544b480874fc3f00139193b6a5719a549ccf8598b08283403ad36425fcf640f07431ca4cb8e939db17b7f29a52c2c6abaf494b4c3f1ef9220987f9f2b3690fde5fefd0241888d8a511", 0xcb}, {&(0x7f0000000940)="47b5e23235e6b0866e07a04013fdf6d81ff75c92b2e046ebf067d48daf7dccf9962925b0d24292dfc32f7cee160bf4984d93", 0x32}, {&(0x7f0000000980)="f38924bbce20fb3c82cd3b656749933506773f2b507802ebf5da9881cd54623e557f68daf93b9b15a3c746c67f557be5b48e581ffb99e54aebf911d68f0c44a826436d73ad6b987dd8e3f8d4f02ea316a82c6089bb257ba408adddd91dd10c3eb9", 0x61}, {&(0x7f0000000a00)="f8243650096e211f3f92356a57e5096cd026cb2d1e248f37ec3db5d803c2c59e6ecee8321b656c784596254df6c65adb8c79b2c576e0ca73a05cb4fa005031bc66cd3fe3b6e2a3f2fc8a84b85e0ac68a183266ac7269df14c2c616e8c3ad3224b974a5b341a035397ad8082fd4f43ad3814ba7305ff216b49ef0f001243e91957c05225a4759108e677872821c0931f7f3923e41bca87c5b52bd00e48a99be10a2b7692dec85dc7a625d6489dc56aa207f2e9a95c7b34ee7a960df2308f071a6e61d7dc3b8c990bc852b35ba6b4b9953494068e7ca9b047b49a6", 0xda}, {&(0x7f0000000b00)="d7cfac73d916ab993f36664f837e7a156e4b0f6f90d392a208ffc413615d103fb6113311", 0x24}], 0x6, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0xffffbed9}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9f4d}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xa4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xc0}, 0x20004041)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = accept(r2, &(0x7f0000000cc0)=@ll, &(0x7f0000000d40)=0x80)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000d80)={{0xc, @broadcast, 0x4e22, 0x3, 'fo\x00', 0x39, 0x1, 0x4}, {@remote, 0x4e24, 0x0, 0xba3, 0x2, 0x4}}, 0x44)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x6084}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xfc, 0x4, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xcc, 0xc, "cc555fdd6d670da79664877fe262ac144e015f81aa21d975d09d336cb1f0f449c40240fcd92e62aeda0bab2aa95de1bb891998c8ee63e5cf18fe21f3ff3168741f7dba3424db391611821046fc9611ffc62f34cb9b29033bcdb7a014cbd02f578a1071524318a9299808b7dc6e732032b8e439de5ee946aa21873f006c93af86bcbe1b0102850d8ccf221ad2b8f5b0c547d5198e8937e404ec8d11b77a56e158a0f6d8625e5190530f4bae13f3da4e967a1c5f136bbd0538e630f662fb9251ae7802915c17b31e92"}]}, 0xfc}}, 0x40080)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r0)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001180)={&(0x7f0000000fc0), 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0xec, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x19}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x94}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @NL80211_ATTR_MAC={0xa, 0x6, @random="797f8fd04023"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0x20, 0x34, @random="f4650e8cd2d47e354ae6e86db2cbe773ddd819b4959afe8c817a6378"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]]}, 0xec}, 0x1, 0x0, 0x0, 0x60044800}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f00000011c0)={0x2, 0x4e24, @empty}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000001440)={&(0x7f0000001200), 0xc, &(0x7f0000001400)={&(0x7f0000001240)={0x1a0, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9ea749cf19b905538cf0d57126785cb50579e3e2264462e0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "72555fb8fd51b03915bc31930f04c08403d2c1b2168b9ffd"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0ba32ca3ae6613c88a25af5f519daa35d25c86b5d7b8a20d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a6fa204ed7de160e56d3d5b1a0c6f4fc47a849a0011a62d4"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc0}, 0x24004000)
recvmsg(r2, &(0x7f00000046c0)={&(0x7f0000001480)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003640)=[{&(0x7f0000001500)=""/33, 0x21}, {&(0x7f0000001540)=""/9, 0x9}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/51, 0x33}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/73, 0x49}], 0x6, &(0x7f00000036c0)=""/4096, 0x1000}, 0x20)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000004740), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000004840)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x48, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffff8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfb}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c080)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000004880)={0x0, r1, r2, 0x8, 0x1, '\x00', {0xfffffffffffffff8, 0x2, 0x2, 0x8, 0x2, 0x4, 0x1, 0x35, {0x3ff, 0x600000}, {0x7, 0x2}, {0x9, 0xa8000000}, 0xc8f9, 0x0, 0x9, 0x3, 0x6a574775, 0xf3c, 0xa, 0x1, 0x6, 0x7, '\x00', 0x8, 0x7, 0x6c3b, 0x101}})
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004980), r3)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000004b00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000004ac0)={&(0x7f00000049c0)={0xd4, r7, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x592a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb63b6b8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a87}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40081)
listen(r0, 0x5)
r8 = socket$netlink(0x10, 0x3, 0x1e)
sendto$inet6(r0, &(0x7f0000004b40)="5f6a12fed041a3def5d4ddf1ec6c0e8774bb2bdd059064e35dc1568f43ccf0686b07ba0f91f46b8e576d49b56b0ccd524e7a0caaae0d1bd74c3330a321bacdafebb6abe01067b243bfbd33737d6d24aac9f3eeeb2e25e8488a2ead66f91c555e84e14f6aeba03d4aeb08ae744d1d842e8bf9b42f43bcb64f319b358ca27818b8c1f310d1b6a1db11450c9b1f9d", 0x8d, 0xc000044, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000004c40), r1)
sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000004d00)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004c80)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x92bc370ca9e5ae4f}, 0x0)
r10 = socket(0x1, 0x6, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000004d80)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f0000004e40)={&(0x7f0000004d40), 0xc, &(0x7f0000004e00)={&(0x7f0000004dc0)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004ec0), r8)
sendmsg$NL80211_CMD_LEAVE_OCB(r10, &(0x7f0000004f80)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004f40)={&(0x7f0000004f00)={0x28, r12, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8000, 0x70}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x6004}, 0x40080c2)

2.792223499s ago: executing program 1 (id=2549):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1330, 0x1168, 0x178, 0xc, 0x1168, 0x178, 0x1260, 0x258, 0x258, 0x1260, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff], [0xffffffff], 'wlan0\x00', 'netpci0\x00', {}, {}, 0x3b}, 0x0, 0x1100, 0x1168, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00'}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xa, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1390)
r1 = socket(0x5, 0x80801, 0x100001)
getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x8, 0x81, 0x100000001]}, &(0x7f0000000080)=0x78)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket(0x28, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'ovf\x00', 0x3, 0xa7e, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x8, @empty, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000180)=0x80000000, 0x4)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x5e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa0000000060a09040000000000000000020000070900020073797a30000000000900010073797a3000000000740004804dff01800b00010065787468647200004c0001800b0001006c6f6f6b757000003c00028008000240000000000900010073797a32000000000900010073797a32000000000800054000000000080002400000000b08be7a83fa4a727d0c00034000000009140000001100010000000000"], 0xc8}}, 0x0)
r7 = socket(0x18, 0x80000, 0x1)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x803ff, 0xffffffff, 0x8ba, 0x4, 0x0, 0x1, 0xffffffff}})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f00000013c0)={'filter\x00', 0x4}, 0x68)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r9, 0x40305829, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r9, 0x541b, &(0x7f0000001500))
unshare(0x24060400)
bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0x0, 0x6}, 0xfe}, 0x18)

2.254867214s ago: executing program 1 (id=2550):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe", 0x1a}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 64)
listen(0xffffffffffffffff, 0x2) (rerun: 64)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (rerun: 64)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (rerun: 32)

2.015076533s ago: executing program 1 (id=2551):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
read(r4, &(0x7f0000000080)=""/38, 0x26)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0)
epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]})
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6)
syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0xb00, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf875beb776f94a6a5e5dc53f5ac614f6f7bce9217cbfea31675d4a860cf60039700004dbb16dc31cc76522bf19d00", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x2d46, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c)
r8 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0x4e22, 0x9, 0x4e22, 0x1000, 0x2, 0x20, 0x0, 0x88}, {0x80, 0x0, 0x9a11, 0x7, 0x4, 0x2, 0x7, 0x5}, {0x1000, 0xff, 0x1000, 0x353bac47}, 0x200, 0x6e6bb4, 0x3, 0x0, 0x3, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x51}, 0x4d5, 0x3c}, 0xa, @in6=@mcast1, 0x3504, 0x0, 0x0, 0x5a, 0x9, 0xb4f5, 0xffffffff}}, 0xe8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000fceb2a635bd573d00c95afd09c16cc9fb09ea933bbd13d9daa328f8de5c0b4a01bd526a03402883564c50660cd81f3742effae93a12777d258abff3b1a0d387b1450178922abd74dcb436a0bd963dc4805ac07364b7cee38c66e4a7b72a8bde35c6c88d55d679ae4b0da8f021d62db70eba31b93133ee21159d33615d8242e835514c2a9812fd42464d7e5400179a7fdaf0de9e58fbfa588ef346b5d4d125eb9c1843d900a2bd2", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa10a998650588be8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x70bd2f, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)

1.871991454s ago: executing program 2 (id=2553):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) (async)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) (async, rerun: 32)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(0x0) (async)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 32)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async, rerun: 32)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000f1ea000000080ccf7f3826daef4f009411b7776f0019aa1bc3e5880085bb2715d0ccd2f110d91ac521d66d34cb87ee140fe4ac76396c52108a45907d378e20b077c9bc4cbbbea6f69f154dbd99139c4a17a7d1043a35ea1d5708b53565e226f44da9e4af116eca24b26eb99d73fba021c8f97b3db972b8d1b20f0e63bc63258389d38d38616cfdc50bb1f170a88598a39e751498612ef1fbf60fff7259f1ff483dd2fa4c19d63a21b335040f24bbb5e395a027e18f38fe50310fd5436e321d622c01d7fc57d2a2ab916881ba7a4f"], 0x2c}}, 0x0)
shutdown(r4, 0x1) (async)
write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r3, r2, 0x0, 0xf03a0005)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[], 0x70}}, 0x4004040) (async, rerun: 32)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9) (async)
sendfile(r8, r7, 0x0, 0x10000)

1.792825978s ago: executing program 0 (id=2554):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x894a, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
write$tun(r2, 0x0, 0x84)
r7 = socket(0x10, 0x80002, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d78e0bfa0d", 0x12}], 0x1}}], 0x1, 0x20008000)
recvmsg(r8, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123)
shutdown(r8, 0x1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip_vti0\x00', 0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={0x0}}, 0x40000001)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000000140), 0x0, 0x2, &(0x7f0000000180)={0x0, 0x3938700})
setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, 0x0, 0x0)
write$cgroup_subtree(r0, 0x0, 0xfe33)

1.742391379s ago: executing program 2 (id=2555):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r3, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x40}}, 0x11)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x7ff, 0x7, 0x5, 0x60, 0x5})
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$alg(0x26, 0x5, 0x0)
accept4$alg(r9, 0x0, 0x0, 0x80800)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd70100400000004f100000800090002"], 0x34}}, 0x20)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x8, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(r1, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x10, @loopback, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x3, 0x240c089d)

1.462739728s ago: executing program 0 (id=2556):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000980)="e6031c00d3fc140000004788031c09102c286505e1c4bdae93ee23eea947bbff0d82b583612a6b4f", 0x28, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={r1, r3, 0x25, 0x12, @val=@tcx={@void, @value=r1}}, 0x1c) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000100), 0x0}, 0x20) (async)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty, 0x8000}, 0x1c) (async)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000600)=""/211, 0x2b, 0xd3, 0x1, 0x56df}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x94}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x48000000}, @generic={0x9, 0x6, 0x9, 0x1000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @jmp={0x5, 0x0, 0x5, 0x7, 0x5, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000480)='syzkaller\x00', 0x9, 0x66, &(0x7f00000004c0)=""/102, 0x40f00, 0x10, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000740)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x3, 0x8, 0x7ff}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000007c0)=[{0x0, 0x4, 0x4, 0x6}, {0x5, 0x5, 0xd, 0x7}, {0x1, 0x1, 0xf, 0x7}, {0x2, 0x5, 0x10, 0x3}, {0x5, 0x4, 0xd, 0x2}, {0x1, 0x3, 0x1, 0xb}, {0x1, 0x2, 0x1, 0x3}], 0x10, 0x7}, 0x94)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:auditd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44801}, 0x20008001)

1.372190695s ago: executing program 2 (id=2557):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="282000002e00090027bd7000000000000400000004001d001020098008"], 0x2028}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x94) (async)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async)
setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) (async)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20040000) (async)
shutdown(r1, 0x2) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffd54, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617066d5e9f950a0"], 0xe8}}, 0x0) (async)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0xd0680, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r5)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3a0000002d823705a21d9163970376a23da5361a08b0cb4cb607e481f5f57394b2d6f2b2524d93d413502a5a454b09e57f5e244bfd3ec62a0c70903c8a5028c2532f39afcefb68af37446728e65893d34730efa72421cb3f45817683b5b6a8cdd91a0465e8102513a808a8dc0a020ba95a5e6ccb02ab89e012994a5a", @ANYRES16=r6, @ANYBLOB="0800000000000200000007000000050013000000000006000100000000001400080076657468305f766c616e000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040885}, 0x0) (async)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r6, 0x5, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x29}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40048000)
ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000040)={0xfac2, 0x20})
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) (async)
pselect6(0x40, &(0x7f0000000240)={0x9, 0x9e, 0xfbfc, 0xee, 0x8, 0x6, 0xa0c, 0xd}, 0x0, 0x0, &(0x7f00000003c0), 0x0)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000600)=0xffffffffffffffff, 0x4)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000480)={r7}, 0x8)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000500)=@req={0x9, 0x2, 0x3, 0x7fffffff}, 0x10) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000640)={r3, r8})

1.280804251s ago: executing program 0 (id=2558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000250009012cbd7000f9ffffff020000000400030008003f00", @ANYRES32, @ANYBLOB="4f1e852e875b0239bb3b952a7eca0eaff348831249cf2deff38fc223093ae2697d0a1c5f9e6d1d36f6df03713e480c27148f491c2f0941f2118d590951c360317f02a1a3624cd1bb984b77aff960eaa6c5d86454611b9ac68800120d9f0bb44804bc42a3e059b7d19d2faf6d1a57c43babd0c17cbb2d3f5506caac8f26c7f5fe47fa80d587d63f543185dcfead2f4ac89d7704"], 0x20}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
shutdown(r3, 0x1)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x10001, 0x12)
sendfile(0xffffffffffffffff, r2, 0x0, 0xf03a0005)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r6=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000300)={r6, 0x1}, 0x8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$int_in(r1, 0xc8d18aa2428c57fa, &(0x7f0000000100)=0x8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, 0x0, 0x4000084)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)
sendfile(r8, r7, 0x0, 0x10000)

1.061235952s ago: executing program 2 (id=2559):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x358a}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

332.012907ms ago: executing program 0 (id=2560):
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x800)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x880)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3c}, 0x1c)
sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)="a6c45ac298", 0x5}], 0x1}}], 0x1, 0x4010)

250.279224ms ago: executing program 0 (id=2561):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @aes128})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x10, @loopback, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x3, 0x240c089d)

162.777406ms ago: executing program 0 (id=2562):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
poll(&(0x7f0000000140)=[{r0, 0x1006}, {r0, 0x22}, {r0, 0x10}, {r1, 0x80}, {r0, 0x20}, {r0, 0x40}], 0x6, 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "e4fffffffffffbff", "9da152000004b4991192c0029200", "b6730761", "cbc5f9dc4dab64ec"}, 0x28)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})
openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

0s ago: executing program 1 (id=2563):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20f6ffff690010002abd7000fcdbdf2500000000000000000800012002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) (async, rerun: 64)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async)
r2 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000540800000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x200048c0}, 0x20008000)
recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) (async)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
writev(0xffffffffffffffff, &(0x7f0000000180), 0x100000d0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async, rerun: 64)
listen(r4, 0x10040) (async, rerun: 64)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async)
syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a080045000034006700000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8cc2ed00080a0001cf3dd22201040000f0f67f7a8b3687aea8efccd49835fa2300000000655d65d2"], 0x0) (async)
syz_extract_tcp_res(&(0x7f0000000240)={<r5=>0x41424344}, 0x5, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, r5, 0x0, 0x6, 0x8, 0x2, 0xa, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0xc, 0x400056}]}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

 get a fully working HSR network
[  174.905139][ T9479] hsr1: entered promiscuous mode
[  175.049226][ T9481] net_ratelimit: 11 callbacks suppressed
[  175.049241][ T9481] openvswitch: netlink: Key type 2064 is out of range max 32
[  175.346957][ T9501] __nla_validate_parse: 4 callbacks suppressed
[  175.346976][ T9501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.915'.
[  175.354507][ T9496] 8021q: adding VLAN 0 to HW filter on device bond2
[  175.363174][ T9496] hsr1: left promiscuous mode
[  176.898418][ T9511] xt_hashlimit: size too large, truncated to 1048576
[  177.421153][ T9465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  177.507945][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'.
[  177.796382][ T9540] netlink: 'syz.2.926': attribute type 58 has an invalid length.
[  177.799632][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.926'.
[  177.944529][ T9551] netlink: 'syz.1.928': attribute type 58 has an invalid length.
[  177.953992][ T9551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.928'.
[  178.047727][ T9556] netlink: 'syz.1.929': attribute type 58 has an invalid length.
[  178.051274][ T9556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.929'.
[  178.067609][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  178.152734][ T9561] tipc: Started in network mode
[  178.154909][ T9561] tipc: Node identity ac14140f, cluster identity 4711
[  178.162597][ T9561] tipc: New replicast peer: 255.255.255.255
[  178.165857][ T9561] tipc: Enabled bearer <udp:syz2>, priority 10
[  178.213628][ T9566] netlink: 112 bytes leftover after parsing attributes in process `syz.1.931'.
[  178.403751][ T9574] : option downdelay: invalid value (18446744073709547007)
[  178.408625][ T9574] : option downdelay: allowed values 0 - 2147483647
[  178.414865][ T9574]  (unregistering): Released all slaves
[  178.442126][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.935'.
[  178.460739][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.935'.
[  178.702686][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.705998][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.707719][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  178.710230][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.715495][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.910777][ T9610] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.915978][ T9610] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.946377][ T9607] xt_hashlimit: size too large, truncated to 1048576
[  178.960208][ T9606] xt_hashlimit: size too large, truncated to 1048576
[  179.076488][ T9610] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.079610][ T9610] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.148143][ T9610] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.151161][ T9610] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.239141][ T9610] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  179.242853][ T9610] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.293960][ T5696] tipc: Node number set to 2886997007
[  179.344476][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.353207][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.371277][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.374863][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.388938][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.392479][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.411264][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.414948][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.515671][ T9615] netlink: 'syz.1.942': attribute type 58 has an invalid length.
[  179.519718][ T9615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.942'.
[  180.536229][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.955'.
[  180.554617][ T9675] netlink: 104 bytes leftover after parsing attributes in process `syz.2.956'.
[  180.555099][ T9673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.955'.
[  180.610319][ T9673] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.679872][ T9683] netlink: 'syz.2.958': attribute type 58 has an invalid length.
[  180.683073][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.958'.
[  180.725407][ T9673] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.828266][ T9673] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.877804][ T9673] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.962924][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.980887][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.995769][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.012539][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.133443][ T9690] netlink: 'syz.0.960': attribute type 1 has an invalid length.
[  181.177021][ T9695] netlink: 'syz.0.961': attribute type 58 has an invalid length.
[  181.194567][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.961'.
[  181.554068][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'.
[  181.597117][ T9707] bridge14: port 1(dummy0) entered disabled state
[  181.600659][ T9707] dummy0: left allmulticast mode
[  181.602741][ T9707] dummy0: left promiscuous mode
[  181.604860][ T9707] bridge14: port 1(dummy0) entered disabled state
[  181.611271][ T9707] bridge15: port 1(dummy0) entered blocking state
[  181.615922][ T9707] bridge15: port 1(dummy0) entered disabled state
[  181.619847][ T9707] dummy0: entered allmulticast mode
[  181.624388][ T9707] dummy0: entered promiscuous mode
[  182.052807][ T9729] ieee802154 phy0 wpan0: encryption failed: -22
[  182.107766][ T9728] lo speed is unknown, defaulting to 1000
[  182.175549][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'.
[  182.197856][ T9737] bridge19: port 1(dummy0) entered disabled state
[  182.201155][ T9737] dummy0: left allmulticast mode
[  182.207347][ T9737] dummy0: left promiscuous mode
[  182.210008][ T9737] bridge19: port 1(dummy0) entered disabled state
[  182.216076][ T9737] bridge20: port 1(dummy0) entered blocking state
[  182.219407][ T9737] bridge20: port 1(dummy0) entered disabled state
[  182.222199][ T9737] dummy0: entered allmulticast mode
[  182.226171][ T9737] dummy0: entered promiscuous mode
[  182.935625][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.978'.
[  183.211108][ T9767] netlink: 'syz.1.980': attribute type 1 has an invalid length.
[  183.258632][ T9764] veth5: entered promiscuous mode
[  183.454583][ T9774] lo speed is unknown, defaulting to 1000
[  183.753495][ T9797] ieee802154 phy0 wpan0: encryption failed: -22
[  183.920776][ T9808] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  183.935972][ T9808] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  184.237976][ T5696] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  184.237990][ T5696] ip6_tunnel:  xmit: Local address not yet configured!
[  184.385081][ T9827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.988'.
[  184.394887][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'.
[  185.112292][ T9127] ip6_tunnel:  xmit: Local address not yet configured!
[  185.307555][ T9841] bridge: RTM_NEWNEIGH with invalid state 0x10
[  186.122039][ T9863] __nla_validate_parse: 2 callbacks suppressed
[  186.122054][ T9863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.998'.
[  186.213814][ T9872] netlink: 'syz.0.1000': attribute type 58 has an invalid length.
[  186.216862][ T9872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1000'.
[  186.322953][ T9877] hmac(sh: entered promiscuous mode
[  186.387477][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  186.533987][ T9888] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1006'.
[  187.305323][ T9903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.569500][ T9916] netlink: 'syz.0.1013': attribute type 10 has an invalid length.
[  187.572747][ T9916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1013'.
[  187.634460][ T9916] geneve1: entered promiscuous mode
[  187.645835][ T9916] team0: Failed to send options change via netlink (err -105)
[  187.649425][ T9916] team0: Port device geneve1 added
[  187.695819][ T9931] bond0: (slave veth1_to_hsr): Enslaving as an active interface with an up link
[  187.744981][ T9934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1018'.
[  187.748963][ T9935] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1018'.
[  187.756048][ T9936] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1017'.
[  187.995061][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'.
[  188.146212][ T9946] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1021'.
[  188.150846][ T9946] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1021'.
[  188.915835][ T9960] xt_nat: multiple ranges no longer supported
[  189.015028][ T9965] netlink: 'syz.0.1026': attribute type 30 has an invalid length.
[  189.036757][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  189.040746][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  189.044061][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  189.046422][ T9965] netlink: 'syz.0.1026': attribute type 30 has an invalid length.
[  189.047629][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  189.092638][ T9972] netlink: 'syz.1.1028': attribute type 1 has an invalid length.
[  189.506683][ T9995] lo speed is unknown, defaulting to 1000
[  191.248566][T10055] __nla_validate_parse: 6 callbacks suppressed
[  191.248575][T10055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1050'.
[  191.248742][T10057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1050'.
[  191.466001][T10070] netlink: 'syz.2.1056': attribute type 3 has an invalid length.
[  191.673190][ T5623] Bluetooth: hci0: command 0x0406 tx timeout
[  191.673237][ T5618] Bluetooth: hci1: command 0x0406 tx timeout
[  191.841694][T10089] netlink: 'syz.0.1059': attribute type 58 has an invalid length.
[  191.848196][T10089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1059'.
[  192.095770][T10092] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1060'.
[  192.445028][T10108] netlink: 'syz.1.1064': attribute type 3 has an invalid length.
[  192.709831][T10112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1065'.
[  192.942567][T10124] netlink: 'syz.2.1069': attribute type 58 has an invalid length.
[  192.948383][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1069'.
[  193.020616][T10126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1070'.
[  194.038195][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1075'.
[  194.041911][T10149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1075'.
[  199.829220][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  201.757752][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  215.119210][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'.
[  215.137499][T10178] bridge15: port 1(dummy0) entered blocking state
[  215.140154][T10178] bridge15: port 1(dummy0) entered forwarding state
[  215.148702][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'.
[  215.165967][T10178] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  215.185160][T10178] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1083'.
[  215.194921][T10180] sit1: entered promiscuous mode
[  215.198845][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1082'.
[  215.218795][T10183] nla_validate_range_unsigned: 1 callbacks suppressed
[  215.218814][T10183] netlink: 'syz.0.1084': attribute type 11 has an invalid length.
[  215.258411][T10178] netlink: 'syz.1.1083': attribute type 1 has an invalid length.
[  215.490062][T10197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1088'.
[  215.523737][T10202] netlink: 'syz.2.1089': attribute type 3 has an invalid length.
[  215.564503][T10207] netlink: 'syz.2.1090': attribute type 4 has an invalid length.
[  215.571551][T10207] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1090'.
[  215.600599][T10212] netlink: 'syz.2.1091': attribute type 58 has an invalid length.
[  215.603896][T10212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1091'.
[  215.703203][T10215] ieee802154 phy0 wpan0: encryption failed: -22
[  215.707725][T10215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1092'.
[  216.095447][T10218] sctp: [Deprecated]: syz.0.1093 (pid 10218) Use of int in maxseg socket option.
[  216.095447][T10218] Use struct sctp_assoc_value instead
[  216.598953][T10246] netlink: 'syz.1.1099': attribute type 58 has an invalid length.
[  216.607345][T10246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1099'.
[  216.818139][T10267] siw: device registration error -23
[  217.016039][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.021385][T10279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1105'.
[  217.029921][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.037696][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.040609][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.043188][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.045623][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.049601][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.052974][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.055806][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.061593][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.064331][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.067039][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.070517][T10274] syzkaller0: entered promiscuous mode
[  217.070760][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.073668][T10274] syzkaller0: entered allmulticast mode
[  217.074859][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.083037][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.090104][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.094095][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.096798][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.100107][T10278] ieee802154 phy0 wpan0: encryption failed: -22
[  217.245306][T10292] netlink: 'syz.2.1109': attribute type 58 has an invalid length.
[  217.314685][T10295] netlink: 'syz.1.1110': attribute type 8 has an invalid length.
[  217.331107][T10295] netlink: 'syz.1.1110': attribute type 8 has an invalid length.
[  217.366827][T10295] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  217.410743][T10301] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  217.804379][   T53] Bluetooth: hci2: link tx timeout
[  217.808676][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  218.934526][T10360] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  218.945695][T10366] syzkaller1: entered promiscuous mode
[  218.951581][T10366] syzkaller1: entered allmulticast mode
[  219.189648][T10389] netlink: 'syz.2.1133': attribute type 58 has an invalid length.
[  219.827591][ T5000] Bluetooth: hci2: command 0x0406 tx timeout
[  219.851054][T10414] syzkaller0: entered promiscuous mode
[  219.853255][T10414] syzkaller0: entered allmulticast mode
[  220.631915][T10455] __nla_validate_parse: 8 callbacks suppressed
[  220.631932][T10455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1146'.
[  220.645556][T10455] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1146'.
[  220.649960][T10455] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1146'.
[  220.695064][T10459] bond3: entered promiscuous mode
[  220.979671][T10476] bridge_slave_0: entered promiscuous mode
[  221.023141][T10476] lo speed is unknown, defaulting to 1000
[  221.061295][T10476] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[  221.072157][T10481] netlink: 'syz.2.1152': attribute type 1 has an invalid length.
[  221.076951][T10476] 8021q: adding VLAN 0 to HW filter on device bond4
[  221.085982][T10476] ip6t_REJECT: ECHOREPLY is not supported
[  221.195415][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'.
[  221.204656][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'.
[  221.336838][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'.
[  221.363379][T10492] hsr_slave_1 (unregistering): left promiscuous mode
[  221.797867][T10496] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  221.801852][T10496] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  222.247021][T10501] lo speed is unknown, defaulting to 1000
[  222.315076][T10507] syzkaller0: entered promiscuous mode
[  222.317107][T10507] syzkaller0: entered allmulticast mode
[  222.350845][T10507] lo speed is unknown, defaulting to 1000
[  222.400357][T10509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.425014][T10509] tipc: Resetting bearer <eth:syzkaller0>
[  222.433269][T10509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.437572][T10509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.447786][T10507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1161'.
[  222.453536][T10506] tipc: Resetting bearer <eth:syzkaller0>
[  222.476126][T10506] tipc: Disabling bearer <eth:syzkaller0>
[  223.088444][T10532] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  223.091754][T10532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.096878][T10532] netlink: 'syz.2.1166': attribute type 11 has an invalid length.
[  223.475918][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'.
[  224.704297][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1182'.
[  225.376213][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1183'.
[  225.683652][T10640] netlink: 'syz.1.1186': attribute type 13 has an invalid length.
[  225.701310][T10640] netlink: 'syz.1.1186': attribute type 17 has an invalid length.
[  225.716342][T10639] bridge15: port 1(dummy0) entered disabled state
[  226.016087][T10640] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.034002][T10640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.084315][T10640] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  226.123407][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.127653][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.135424][T10644] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.141235][T10644] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.161489][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.165445][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.170295][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.174257][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.185364][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.189217][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.226275][T10644] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.239685][T10644] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.248988][T10658] __nla_validate_parse: 2 callbacks suppressed
[  226.249004][T10658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1190'.
[  226.303687][T10644] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.308764][T10644] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.369729][T10644] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.373410][T10644] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.428607][T10664] lo speed is unknown, defaulting to 1000
[  226.535272][T10669] netlink: 'syz.2.1194': attribute type 3 has an invalid length.
[  226.574603][ T6511] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.578293][ T6511] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.601385][ T6511] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.604043][ T6511] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.621079][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.625619][T10669] block nbd2: NBD_DISCONNECT
[  226.627480][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.652490][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.656137][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.975598][T10690] siw: device registration error -23
[  227.016496][T10697] raw_sendmsg: syz.1.1201 forgot to set AF_INET. Fix it!
[  227.058890][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'.
[  227.083407][T10700] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1203'.
[  227.134175][T10700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'.
[  227.138121][T10700] netlink: 'syz.1.1203': attribute type 4 has an invalid length.
[  227.955180][T10733] IPv6: syztnl0: Disabled Multicast RS
[  227.961531][T10733] netlink: 'syz.2.1212': attribute type 10 has an invalid length.
[  227.966305][T10733] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1212'.
[  227.972607][T10733] debugfs: 'netdev:nicvf0' already exists in 'phy3'
[  228.037650][T10739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1214'.
[  229.153275][T10769] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1218'.
[  229.167585][T10769] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1218'.
[  229.202473][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'.
[  229.295147][T10775] sit1: left promiscuous mode
[  229.308670][T10775] bond3: left promiscuous mode
[  229.467957][T10789] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1224'.
[  229.548143][T10798] ieee802154 phy0 wpan0: encryption failed: -22
[  229.610112][T10797] lo speed is unknown, defaulting to 1000
[  229.723651][T10810] netlink: 'syz.2.1228': attribute type 5 has an invalid length.
[  229.850497][T10814] netlink: 'syz.2.1230': attribute type 58 has an invalid length.
[  230.092705][T10822] ieee802154 phy0 wpan0: encryption failed: -22
[  230.095306][T10822] ieee802154 phy0 wpan0: encryption failed: -22
[  230.209522][T10820] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  230.330266][T10829] vlan2: entered promiscuous mode
[  230.608984][T10847] netlink: 'syz.1.1237': attribute type 1 has an invalid length.
[  230.959313][T10866] nbd: must specify at least one socket
[  231.518216][T10879] syzkaller0: entered promiscuous mode
[  231.521858][T10879] syzkaller0: entered allmulticast mode
[  231.810150][T10894] __nla_validate_parse: 6 callbacks suppressed
[  231.810168][T10894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1251'.
[  232.280409][T10918] openvswitch: netlink: Key type 29 is not supported
[  232.819664][T10925] netlink: 'syz.1.1259': attribute type 58 has an invalid length.
[  232.822953][T10926] netlink: 'syz.1.1259': attribute type 58 has an invalid length.
[  232.826106][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1259'.
[  232.827349][T10925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1259'.
[  232.953205][T10929] netlink: 'syz.1.1260': attribute type 58 has an invalid length.
[  232.956776][T10929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1260'.
[  233.193408][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'.
[  233.197138][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1262'.
[  233.551550][T10947] tipc: Enabled bearer <ib:ip6gre0>, priority 8
[  233.756154][T10959] trusted_key: syz.0.1268 sent an empty control message without MSG_MORE.
[  233.784830][T10961] netlink: 'syz.1.1269': attribute type 58 has an invalid length.
[  233.788220][T10961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1269'.
[  234.028792][T10966] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1270'.
[  234.034037][T10966] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1270'.
[  234.100167][T10968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1271'.
[  234.111545][T10968] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  234.342532][T10978] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  234.861653][T10993] netlink: 'syz.0.1278': attribute type 4 has an invalid length.
[  234.899396][T10996] ieee802154 phy0 wpan0: encryption failed: -22
[  235.693518][T11014] block nbd0: reconnected socket
[  235.718164][T11017] wg0: entered allmulticast mode
[  235.931784][   T54] block nbd0: Receive control failed (result -32)
[  235.982677][T11019] batadv_slave_0: left allmulticast mode
[  235.994532][T11030] sctp: [Deprecated]: syz.2.1288 (pid 11030) Use of struct sctp_assoc_value in delayed_ack socket option.
[  235.994532][T11030] Use struct sctp_sack_info instead
[  236.003915][T11019] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  236.022056][T11032] netlink: 'syz.1.1289': attribute type 12 has an invalid length.
[  236.029349][T11030] batadv0: entered promiscuous mode
[  236.031452][T11030] batadv0: entered allmulticast mode
[  236.031778][T11032] netlink: 'syz.1.1289': attribute type 4 has an invalid length.
[  236.035992][T11030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.424420][T11049] kthread_run failed with err -4
[  237.202701][T11081] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  237.205757][T11081] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  237.212124][T11081] __nla_validate_parse: 74 callbacks suppressed
[  237.212138][T11081] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1303'.
[  237.222897][T11081] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1303'.
[  237.226454][T11081] openvswitch: netlink: Flow actions attr not present in new flow.
[  237.380953][T11088] ieee802154 phy0 wpan0: encryption failed: -22
[  237.465335][T11096] 8021q: VLANs not supported on ip_vti0
[  237.472531][T11096] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1307'.
[  237.622722][T11106] netlink: 'syz.1.1310': attribute type 3 has an invalid length.
[  237.772201][T11111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1312'.
[  238.023696][T11125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1315'.
[  238.048271][T11124] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.051437][T11127] netlink: 'syz.0.1316': attribute type 58 has an invalid length.
[  238.058259][T11124] 8021q: adding VLAN 0 to HW filter on device team0
[  238.065365][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1316'.
[  238.072677][T11124] batadv0: left promiscuous mode
[  238.079967][T11124] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.181836][T11124] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.219652][T11124] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.247593][T11124] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  238.258933][T11124] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  238.273345][T11124] veth1_vlan: left promiscuous mode
[  238.283124][T11124] veth0_vlan: left promiscuous mode
[  238.290938][T11124] veth0_vlan: entered promiscuous mode
[  238.303738][T11124] veth1_vlan: entered promiscuous mode
[  238.326380][T11124] veth1_macvtap: left promiscuous mode
[  238.334178][T11124] veth0_macvtap: left promiscuous mode
[  238.338580][T11124] veth0_macvtap: entered promiscuous mode
[  238.347957][T11124] veth1_macvtap: entered promiscuous mode
[  238.368300][T11124] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  238.387434][ T5677] lo speed is unknown, defaulting to 1000
[  238.394945][ T5677] syz2: Port: 1 Link ACTIVE
[  238.420849][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.423823][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.430842][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.433672][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.478846][T11129] syzkaller1: entered allmulticast mode
[  238.482116][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.485710][ T5696] syz1: Port: 1 Link ACTIVE
[  238.488209][ T9120] syz0: Port: 1 Link ACTIVE
[  238.514383][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.520254][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.526366][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.607358][T11136] ieee802154 phy0 wpan0: encryption failed: -22
[  238.634463][T11136] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1318'.
[  238.638409][T11136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1318'.
[  238.715488][T11139] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  238.735822][T11139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1319'.
[  238.921592][T11145] netlink: 'syz.0.1321': attribute type 13 has an invalid length.
[  238.927981][T11147] IPVS: rr: FWM 3 0x00000003 - no destination available
[  239.164971][T11153] xt_hashlimit: size too large, truncated to 1048576
[  239.190933][T11154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1322'.
[  239.208495][T11151] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  239.568580][T11167] TCP: tcp_parse_options: Illegal window scaling value 45 > 14 received
[  239.859200][T11179] ieee802154 phy0 wpan0: encryption failed: -22
[  240.175712][T11188] lo speed is unknown, defaulting to 1000
[  240.419779][T11203] x_tables: ip6_tables: mh match: only valid for protocol 135
[  240.473439][T11206] netlink: 'syz.2.1334': attribute type 4 has an invalid length.
[  240.613610][T11211] lo speed is unknown, defaulting to 1000
[  241.777877][T11236] block nbd1: server does not support multiple connections per device.
[  241.791337][T11236] block nbd1: shutting down sockets
[  241.800098][T11243] batadv_slave_1: entered promiscuous mode
[  241.806303][T11242] batadv_slave_1: left promiscuous mode
[  241.964151][T11260] netlink: 'syz.0.1350': attribute type 58 has an invalid length.
[  242.360006][T11272] __nla_validate_parse: 8 callbacks suppressed
[  242.360026][T11272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1354'.
[  242.366422][T11271] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  242.739197][T11292] geneve1: entered promiscuous mode
[  242.895126][T11295] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1360'.
[  242.919301][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1360'.
[  242.923067][T11295] netlink: 'syz.1.1360': attribute type 4 has an invalid length.
[  242.956333][T11302] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1363'.
[  242.960213][T11302] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  242.965022][T11302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1363'.
[  243.021844][T11305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1364'.
[  243.102036][T11310] x_tables: unsorted underflow at hook 1
[  243.280333][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'.
[  243.328164][T11322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1369'.
[  243.332533][T11322] netlink: 'syz.1.1369': attribute type 4 has an invalid length.
[  243.481429][T11331] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  243.493929][T11331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1371'.
[  243.749347][T11340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1374'.
[  243.791810][T11343] block nbd1: server does not support multiple connections per device.
[  243.797906][T11343] block nbd1: shutting down sockets
[  244.023776][T11343] bridge20: port 1(dummy0) entered disabled state
[  244.162565][T11343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.181327][T11343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.802227][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.808759][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.816402][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.821451][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.843310][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.848964][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.858626][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.863678][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.890701][T11356] bond0: entered allmulticast mode
[  244.923005][T11364] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  245.015511][T11370] syz_tun: entered promiscuous mode
[  245.034793][T11370] syz_tun: left promiscuous mode
[  245.106830][T11375] bridge0: left promiscuous mode
[  245.114024][T11375] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.118457][T11375] 8021q: adding VLAN 0 to HW filter on device team0
[  245.125218][T11375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.223154][T11375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.228268][T11375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.235536][T11375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  245.240725][T11375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  245.251573][T11375] veth1_vlan: left promiscuous mode
[  245.254651][T11375] veth0_vlan: left promiscuous mode
[  245.258886][T11375] veth0_vlan: entered promiscuous mode
[  245.265261][T11375] veth1_vlan: entered promiscuous mode
[  245.272677][T11375] veth1_macvtap: left promiscuous mode
[  245.275901][T11375] veth0_macvtap: left promiscuous mode
[  245.279848][T11375] veth0_macvtap: entered promiscuous mode
[  245.283197][T11375] veth1_macvtap: entered promiscuous mode
[  245.290583][T11375] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  245.301208][ T7573] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.304080][ T7573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.313229][ T7573] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.316151][ T7573] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.349452][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.353093][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.367093][T11388] batadv0: left allmulticast mode
[  245.371985][T11388] wg0: left allmulticast mode
[  245.396426][T11388] geneve1: left promiscuous mode
[  245.402080][T11388] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  245.427898][T11368] pim6reg: entered allmulticast mode
[  245.440334][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.443716][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.019489][T11408] ieee802154 phy0 wpan0: encryption failed: -22
[  246.022209][T11409] ieee802154 phy0 wpan0: encryption failed: -22
[  246.215642][T11421] sch_tbf: burst 0 is lower than device lo mtu (1534) !
[  246.251925][T11427] netlink: 'syz.0.1396': attribute type 32 has an invalid length.
[  246.375424][T11434] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.377804][T11434] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.550828][T11434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.571118][T11434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.768832][T11434] bridge13: left allmulticast mode
[  246.772969][T11434] veth5: left promiscuous mode
[  246.775830][T11434] vlan2: left promiscuous mode
[  246.792570][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.796034][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.799771][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.803406][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.862255][T11445] ieee802154 phy0 wpan0: encryption failed: -22
[  247.457441][T11483] __nla_validate_parse: 11 callbacks suppressed
[  247.457458][T11483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1407'.
[  247.566072][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'.
[  247.751312][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'.
[  247.754926][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'.
[  247.763774][T11489] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  247.909247][T11503] netlink: 'syz.0.1414': attribute type 1 has an invalid length.
[  247.948555][T11503] 8021q: adding VLAN 0 to HW filter on device bond3
[  247.962769][T11509] netlink: 'syz.1.1415': attribute type 25 has an invalid length.
[  247.965961][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'.
[  247.982006][T11509] netlink: 'syz.1.1415': attribute type 25 has an invalid length.
[  247.985183][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'.
[  247.995027][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.006593][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.013980][T11510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1416'.
[  248.021005][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.028356][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  248.040793][T11512] netlink: 'syz.0.1417': attribute type 58 has an invalid length.
[  248.043952][T11512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1417'.
[  248.146319][T11521] pim6reg1: entered promiscuous mode
[  248.154935][T11521] pim6reg1: entered allmulticast mode
[  248.211579][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'.
[  248.359470][T11540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1424'.
[  248.546440][T11542] lo speed is unknown, defaulting to 1000
[  248.742007][T11566] netlink: 'syz.2.1428': attribute type 15 has an invalid length.
[  248.745212][T11566] netlink: 'syz.2.1428': attribute type 25 has an invalid length.
[  249.612202][T11580] netlink: 'syz.2.1432': attribute type 2 has an invalid length.
[  249.633802][T11583] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.693577][T11583] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.740583][T11583] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.790936][T11583] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.850014][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.861128][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.870201][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.879270][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.978758][T11597] dummy0: left allmulticast mode
[  249.980668][T11597] dummy0: left promiscuous mode
[  249.982958][T11597] bridge15: port 1(dummy0) entered disabled state
[  249.993954][T11597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  250.107053][T11602] netlink: 'syz.0.1438': attribute type 58 has an invalid length.
[  250.108550][T11603] netlink: 'syz.1.1439': attribute type 3 has an invalid length.
[  250.554744][T11610] bond5: entered promiscuous mode
[  250.556861][T11610] bond5: entered allmulticast mode
[  250.779391][T11632] tipc: Started in network mode
[  250.782231][T11632] tipc: Node identity 327f93910cc2, cluster identity 4711
[  250.785526][T11632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.828207][T11632] syzkaller0: entered promiscuous mode
[  250.830547][T11632] syzkaller0: entered allmulticast mode
[  250.833528][T11632] tipc: Resetting bearer <eth:syzkaller0>
[  250.894627][T11631] tipc: Resetting bearer <eth:syzkaller0>
[  252.838643][T11631] tipc: Disabling bearer <eth:syzkaller0>
[  252.848213][T11648] vti0: entered promiscuous mode
[  252.849812][T11648] vti0: entered allmulticast mode
[  252.857497][ T5696] tipc: Node number set to 1052611473
[  252.909360][T11655] netlink: 'syz.0.1452': attribute type 58 has an invalid length.
[  252.911784][T11655] __nla_validate_parse: 12 callbacks suppressed
[  252.911796][T11655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1452'.
[  252.942836][T11658] netlink: 'syz.2.1453': attribute type 21 has an invalid length.
[  252.952340][T11658] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1453'.
[  252.956768][T11653] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1451'.
[  253.489320][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'.
[  253.503873][T11689] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  253.606808][T11694] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1459'.
[  253.629004][T11697] ieee802154 phy0 wpan0: encryption failed: -22
[  253.735811][T11702] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  253.880551][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1463'.
[  253.971392][T11719] netlink: 'syz.0.1466': attribute type 8 has an invalid length.
[  254.055710][T11727] netlink: 'syz.1.1468': attribute type 58 has an invalid length.
[  254.064043][T11727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1468'.
[  254.492109][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'.
[  254.533325][T11752] netlink: 'syz.0.1475': attribute type 22 has an invalid length.
[  254.540320][T11752] netlink: 'syz.0.1475': attribute type 22 has an invalid length.
[  254.542681][T11752] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1475'.
[  254.561974][T11752] netlink: 'syz.0.1475': attribute type 5 has an invalid length.
[  254.587045][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'.
[  254.670479][T11757] netlink: 'syz.2.1477': attribute type 4 has an invalid length.
[  254.972102][T11786] netlink: 'syz.2.1485': attribute type 58 has an invalid length.
[  255.800368][T11810] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  256.078115][T11827] ieee802154 phy0 wpan0: encryption failed: -22
[  256.212018][T11838] netlink: 'syz.0.1500': attribute type 1 has an invalid length.
[  258.286406][T11887] bridge0: entered promiscuous mode
[  258.290379][T11887] 8021q: adding VLAN 0 to HW filter on device bond0
[  258.294464][T11887] 8021q: adding VLAN 0 to HW filter on device team0
[  258.300964][T11887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.329987][T11887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.333875][T11887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.341773][T11887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  258.346121][T11887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  258.351894][T11887] veth1_vlan: left promiscuous mode
[  258.354196][T11887] veth0_vlan: left promiscuous mode
[  258.356322][T11887] veth0_vlan: entered promiscuous mode
[  258.360008][T11887] veth1_vlan: entered promiscuous mode
[  258.364069][T11887] veth1_macvtap: left promiscuous mode
[  258.366347][T11887] veth0_macvtap: left promiscuous mode
[  258.369187][T11887] veth0_macvtap: entered promiscuous mode
[  258.371545][T11887] veth1_macvtap: entered promiscuous mode
[  258.377753][T11887] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  258.386070][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.388683][ T7574] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.396902][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.399276][ T7574] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.453078][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.459818][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.471739][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.477817][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.544142][T11897] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  258.551357][T11890] lo speed is unknown, defaulting to 1000
[  259.763844][T11923] __nla_validate_parse: 8 callbacks suppressed
[  259.763863][T11923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1521'.
[  259.848606][T11924] netlink: 'syz.2.1521': attribute type 17 has an invalid length.
[  259.851845][T11924] netlink: 'syz.2.1521': attribute type 27 has an invalid length.
[  260.284139][T11927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1522'.
[  260.539797][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'.
[  260.647133][T11940] lo speed is unknown, defaulting to 1000
[  260.676741][T11943] netlink: 'syz.2.1527': attribute type 7 has an invalid length.
[  260.763286][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'.
[  260.855168][T11952] netlink: 'syz.2.1530': attribute type 58 has an invalid length.
[  260.860636][T11952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1530'.
[  261.221401][T11969] tap0: tun_chr_ioctl cmd 2148553947
[  261.269865][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  261.304793][T11978] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1534'.
[  261.687838][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'.
[  261.698841][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'.
[  261.900242][T12024] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1547'.
[  262.224242][T12040] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1552'.
[  263.088435][T12055] netlink: 'syz.2.1556': attribute type 58 has an invalid length.
[  263.359543][T12067] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.369188][T12067] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.391266][T12068] netlink: 'syz.2.1559': attribute type 15 has an invalid length.
[  263.393724][T12068] netlink: 'syz.2.1559': attribute type 17 has an invalid length.
[  263.638082][T12068] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.655904][T12068] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.836576][ T9136] lo speed is unknown, defaulting to 1000
[  263.844258][ T9136] syz2: Port: 1 Link DOWN
[  263.857044][ T1239] syz1: Port: 1 Link DOWN
[  263.860208][    T9] syz0: Port: 1 Link DOWN
[  263.888962][ T6511] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.893230][ T6511] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.900603][T12084] syzkaller0: entered promiscuous mode
[  263.905404][T12084] syzkaller0: entered allmulticast mode
[  263.916338][ T6511] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  263.927437][ T6511] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.496446][T12109] ieee802154 phy0 wpan0: encryption failed: -22
[  264.612991][T12114] tipc: Started in network mode
[  264.615330][T12114] tipc: Node identity e0000001, cluster identity 4711
[  264.618593][T12114] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  264.624535][T12116] netlink: 'syz.1.1569': attribute type 1 has an invalid length.
[  264.653888][T12116] bond6: entered promiscuous mode
[  264.656371][T12116] 8021q: adding VLAN 0 to HW filter on device bond6
[  264.793145][T12128] __nla_validate_parse: 8 callbacks suppressed
[  264.793160][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'.
[  264.803020][T12128] x_tables: duplicate underflow at hook 2
[  265.492396][T12148] netlink: 'syz.1.1575': attribute type 3 has an invalid length.
[  265.496095][T12149] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1575'.
[  265.556027][T12153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1576'.
[  265.606962][T12155] netlink: 'syz.1.1577': attribute type 2 has an invalid length.
[  265.610116][T12155] netlink: 'syz.1.1577': attribute type 2 has an invalid length.
[  266.249378][T12160] netlink: 'syz.0.1579': attribute type 58 has an invalid length.
[  266.252821][T12160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1579'.
[  266.285785][T12162] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1580'.
[  266.296763][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'.
[  266.355485][T12167] ip6erspan1: entered allmulticast mode
[  266.418215][T12174] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.424332][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'.
[  266.479591][T12174] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.491460][T12179] xt_hashlimit: size too large, truncated to 1048576
[  266.535465][T12174] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.663598][T12174] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.724254][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.733527][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.747609][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.762917][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.865878][T12189] netlink: 'syz.0.1587': attribute type 17 has an invalid length.
[  266.869790][T12190] netlink: 'syz.0.1587': attribute type 17 has an invalid length.
[  267.341357][T12192] openvswitch: netlink: Key type 29 is not supported
[  267.414239][T12197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1589'.
[  268.453875][T12211] netlink: 'syz.1.1594': attribute type 13 has an invalid length.
[  268.456923][T12211] netlink: 'syz.1.1594': attribute type 17 has an invalid length.
[  270.453327][T12209] tipc: Resetting bearer <ib:ip6gre0>
[  270.731163][T12211] bond0: left allmulticast mode
[  270.733135][T12211] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.738619][T12211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.783211][T12211] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  270.831577][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.835006][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.862946][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.871318][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  270.894168][T12214] lo speed is unknown, defaulting to 1000
[  270.992190][T12220] lo speed is unknown, defaulting to 1000
[  271.664995][T12258] netlink: 'syz.2.1605': attribute type 3 has an invalid length.
[  271.751051][T12265] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1604'.
[  271.876518][T12270] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1607'.
[  271.954470][T12270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1607'.
[  271.958206][T12270] netlink: 'syz.2.1607': attribute type 4 has an invalid length.
[  272.005832][T12275] syzkaller1: entered allmulticast mode
[  272.243290][T12281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'.
[  272.256259][T12281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.292934][T12281] IPVS: rr: FWM 3 0x00000003 - no destination available
[  272.435131][T12290] IPVS: set_ctl: invalid protocol: 118 255.255.255.255:20001
[  272.543139][T12295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1613'.
[  272.546677][T12295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1613'.
[  272.605968][T12305] netlink: 'syz.1.1616': attribute type 58 has an invalid length.
[  272.609844][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1616'.
[  272.620324][T12295] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1613'.
[  272.715325][T12310] netlink: 'syz.1.1616': attribute type 1 has an invalid length.
[  272.730063][T12310] netlink: 'syz.1.1616': attribute type 1 has an invalid length.
[  272.741449][T12312] xt_hashlimit: size too large, truncated to 1048576
[  272.767576][T12315] ip6erspan1: left allmulticast mode
[  272.935417][T12326] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1623'.
[  272.941568][T12326] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1623'.
[  273.251589][T12342] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  273.257507][T12342] bond4 (unregistering): Released all slaves
[  273.972259][T12371] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.982600][T12371] 8021q: adding VLAN 0 to HW filter on device team0
[  273.992698][T12371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.013922][T12371] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  274.019630][ T9127] lo speed is unknown, defaulting to 1000
[  274.026631][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.029515][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.032569][ T9127] syz2: Port: 1 Link ACTIVE
[  274.213106][T12384] ieee802154 phy0 wpan0: encryption failed: -22
[  274.255162][T12390] ieee802154 phy0 wpan0: encryption failed: -22
[  274.311083][T12394] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  275.106006][T12414] lo speed is unknown, defaulting to 1000
[  276.281632][T12452] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.344561][T12454] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20004
[  276.364272][ T9405] lo speed is unknown, defaulting to 1000
[  276.366543][ T9405] syz2: Port: 1 Link DOWN
[  276.578104][T12458] netlink: 'syz.2.1656': attribute type 4 has an invalid length.
[  276.625022][T12462] bridge18: entered allmulticast mode
[  276.813251][T12472] lo speed is unknown, defaulting to 1000
[  277.575132][T12485] netlink: 'syz.2.1663': attribute type 12 has an invalid length.
[  277.637023][T12489] TCP: tcp_parse_options: Illegal window scaling value 45 > 14 received
[  277.828652][T12506] __nla_validate_parse: 9 callbacks suppressed
[  277.828669][T12506] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1668'.
[  277.836920][T12506] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1668'.
[  278.108658][T12517] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1673'.
[  278.115981][T12521] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.120739][T12521] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.155910][T12521] netlink: 'syz.0.1674': attribute type 16 has an invalid length.
[  278.159183][T12521] netlink: 'syz.0.1674': attribute type 17 has an invalid length.
[  278.218217][T12521] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.220535][T12521] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.225231][T12521] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.228116][T12521] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.255598][T12521] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  278.268208][T12525] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1675'.
[  278.277580][T12524] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1675'.
[  278.315287][T12530] ieee802154 phy0 wpan0: encryption failed: -22
[  278.361045][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'.
[  278.367042][T12534] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1678'.
[  278.506677][T12542] IPVS: ip_vs_add_dest(): server weight less than zero
[  278.559968][T12546] netlink: 'syz.1.1682': attribute type 58 has an invalid length.
[  278.564119][T12546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1682'.
[  278.673361][T12551] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1683'.
[  278.945017][T12563] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1685'.
[  279.034599][T12562] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  279.043038][T12563] macvlan0: entered promiscuous mode
[  279.056949][T12565] syzkaller1: entered allmulticast mode
[  279.181342][T12568] netlink: 'syz.2.1688': attribute type 58 has an invalid length.
[  279.274715][T12577] netlink: 'syz.0.1690': attribute type 12 has an invalid length.
[  279.394825][T12586] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  279.404727][T12588] netlink: 'syz.1.1694': attribute type 13 has an invalid length.
[  279.839048][T12611] smc: net device wlan0 erased user defined pnetid SYZ0
[  280.066001][T12622] 8021q: adding VLAN 0 to HW filter on device bond7
[  280.195558][T12631] ieee802154 phy0 wpan0: encryption failed: -22
[  280.982437][T12679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.987057][T12679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.991400][T12679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.996261][T12679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.000687][T12679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.005167][T12679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.011353][T12679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.405627][T12688] netlink: 'syz.0.1726': attribute type 3 has an invalid length.
[  281.658594][T12693] syzkaller1: entered promiscuous mode
[  281.660918][T12693] syzkaller1: entered allmulticast mode
[  282.176681][T12721] netlink: 'syz.1.1734': attribute type 58 has an invalid length.
[  282.336864][T12724] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.340086][T12724] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.393915][T12724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.401238][T12724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.444384][T12724] vti0: left promiscuous mode
[  282.446420][T12724] vti0: left allmulticast mode
[  282.467881][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.477433][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.483538][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.491417][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  282.521521][T12726] netlink: 'syz.1.1736': attribute type 1 has an invalid length.
[  282.613039][T12737] xt_hashlimit: size too large, truncated to 1048576
[  283.213484][T12759] __nla_validate_parse: 13 callbacks suppressed
[  283.213496][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1743'.
[  283.219717][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1743'.
[  283.223226][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1743'.
[  283.226662][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1743'.
[  283.381289][T12769] siw: device registration error -23
[  283.614613][T12774] ieee802154 phy0 wpan0: encryption failed: -22
[  283.632895][T12776] vti0: entered promiscuous mode
[  283.640077][T12776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1748'.
[  283.801140][T12786] netlink: 'syz.1.1751': attribute type 3 has an invalid length.
[  284.836096][T12811] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1758'.
[  284.939763][T12811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1758'.
[  284.949183][T12811] netlink: 'syz.2.1758': attribute type 4 has an invalid length.
[  285.041896][T12819] bond4: entered allmulticast mode
[  285.052206][T12819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1759'.
[  285.056108][T12819] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20000
[  286.065397][T12834] lo speed is unknown, defaulting to 1000
[  286.861573][  T271] hid-generic 0005:04F3:0A0E.0001: item fetching failed at offset 0/1
[  286.871720][  T271] hid-generic 0005:04F3:0A0E.0001: probe with driver hid-generic failed with error -22
[  286.945050][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1776'.
[  287.044448][T12879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1777'.
[  287.299529][T12904] netlink: Conntrack attr has 4 unknown bytes
[  288.638498][T12943] __nla_validate_parse: 4 callbacks suppressed
[  288.638590][T12943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1793'.
[  288.955078][T12959] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1798'.
[  288.959451][T12959] x_tables: duplicate entry at hook 2
[  289.101675][T12964] netlink: 'syz.0.1799': attribute type 13 has an invalid length.
[  289.104854][T12964] netlink: 'syz.0.1799': attribute type 17 has an invalid length.
[  289.111570][T12966] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1800'.
[  289.116459][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'.
[  289.124427][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1800'.
[  289.180581][T12964] bridge0: left promiscuous mode
[  289.196389][T12964] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.203182][T12964] 8021q: adding VLAN 0 to HW filter on device team0
[  289.217104][T12964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.265291][T12964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.271292][T12964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.281940][T12964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  289.286072][T12964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  289.296510][T12964] veth1_vlan: left promiscuous mode
[  289.300661][T12964] veth0_vlan: left promiscuous mode
[  289.303789][T12964] veth0_vlan: entered promiscuous mode
[  289.310406][T12964] veth1_vlan: entered promiscuous mode
[  289.318109][T12964] veth1_macvtap: left promiscuous mode
[  289.321599][T12964] veth0_macvtap: left promiscuous mode
[  289.325053][T12964] veth0_macvtap: entered promiscuous mode
[  289.339746][T12964] veth1_macvtap: entered promiscuous mode
[  289.353963][T12964] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  289.362519][T12967] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.377038][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.379999][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.416145][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.434069][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.438011][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.454321][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.596385][T12992] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  289.831463][T13014] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1811'.
[  289.995689][T13022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1813'.
[  290.034336][T13029] tipc: Can't bind to reserved service type 2
[  290.319277][T13048] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  290.646022][T13056] ieee802154 phy0 wpan0: encryption failed: -22
[  290.653761][T13056] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1822'.
[  290.773300][T13063] ieee802154 phy0 wpan0: encryption failed: -22
[  290.791937][T13065] netlink: 'syz.1.1825': attribute type 58 has an invalid length.
[  290.795285][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1825'.
[  291.000097][T13079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1829'.
[  291.129571][T13095] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  291.131942][T13095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.427266][T13104] netlink: 'syz.1.1835': attribute type 12 has an invalid length.
[  291.696966][T13112] lo speed is unknown, defaulting to 1000
[  291.965324][T13131] vlan2: entered allmulticast mode
[  291.967084][T13131] bond0: entered allmulticast mode
[  292.029504][T13131] bond0 (unregistering): Released all slaves
[  292.964993][T13150] ip6gre1: entered promiscuous mode
[  292.973581][T13150] ip6gre1: entered allmulticast mode
[  292.978893][ T6511] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.980633][T13150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.987806][ T6511] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.998311][  T271] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  293.467596][ T9138] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  293.477680][ T9138] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  293.712405][T13181] __nla_validate_parse: 22 callbacks suppressed
[  293.712426][T13181] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1853'.
[  293.725472][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'.
[  293.730827][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'.
[  293.734892][T13181] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1853'.
[  293.742804][T13181] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  293.955595][T13188] xt_hashlimit: size too large, truncated to 1048576
[  294.080643][T13193] ip6gre1: entered promiscuous mode
[  294.082676][T13193] ip6gre1: entered allmulticast mode
[  294.085918][ T6511] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  294.089163][ T6511] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  294.101215][T13195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1857'.
[  294.101329][T13193] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  294.117858][ T5696] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  294.601953][T13218] lo speed is unknown, defaulting to 1000
[  294.659941][T13230] syzkaller1: entered promiscuous mode
[  294.662325][T13230] syzkaller1: entered allmulticast mode
[  294.758903][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'.
[  294.973050][T13243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1867'.
[  295.520968][T13257] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1871'.
[  295.720496][T13266] tipc: Resetting bearer <ib:ip6gre0>
[  296.035138][T13266] macvlan0: left promiscuous mode
[  296.050654][T13266] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  296.056229][T13266] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  296.060197][T13266] bond5: left promiscuous mode
[  296.062839][T13266] bond5: left allmulticast mode
[  296.065860][T13266] bond6: left promiscuous mode
[  296.082898][T13266] vti0: left promiscuous mode
[  296.388458][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1880'.
[  296.408572][T13293] macvtap1: entered promiscuous mode
[  296.410776][T13293] batadv0: entered promiscuous mode
[  296.413369][T13293] macvtap1: entered allmulticast mode
[  296.415736][T13293] batadv0: entered allmulticast mode
[  296.419877][T13293] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  296.726157][T13309] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.730632][T13309] 8021q: adding VLAN 0 to HW filter on device team0
[  296.743356][T13309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.765888][T13310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1885'.
[  296.783800][T13309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.788478][T13309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.795232][T13309] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  296.799748][T13309] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  296.803905][T13309] veth1_vlan: left promiscuous mode
[  296.806588][T13309] veth0_vlan: left promiscuous mode
[  296.810280][T13309] veth0_vlan: entered promiscuous mode
[  296.813047][T13309] veth1_vlan: entered promiscuous mode
[  296.819147][T13309] veth1_macvtap: left promiscuous mode
[  296.821654][T13309] veth0_macvtap: left promiscuous mode
[  296.824254][T13309] veth0_macvtap: entered promiscuous mode
[  296.827239][T13309] veth1_macvtap: entered promiscuous mode
[  296.832301][T13309] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  296.837665][ T5696] lo speed is unknown, defaulting to 1000
[  296.841274][ T5696] syz2: Port: 1 Link ACTIVE
[  296.843053][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.845481][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.852841][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.855367][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.882925][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.891341][ T9127] syz1: Port: 1 Link ACTIVE
[  296.892994][ T9124] syz0: Port: 1 Link ACTIVE
[  296.893058][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.917010][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.935033][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.908938][T13334] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  297.972446][T13341] netlink: 'syz.0.1894': attribute type 1 has an invalid length.
[  297.994740][T13341] macvlan3: entered promiscuous mode
[  297.996527][T13341] macvlan3: entered allmulticast mode
[  298.001150][T13341] bond4: entered promiscuous mode
[  298.003185][T13341] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  298.011545][T13341] bond4: left promiscuous mode
[  298.227411][    C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  298.227434][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  298.916106][T13365] netlink: 'syz.0.1900': attribute type 3 has an invalid length.
[  298.920847][T13362] vlan2: entered promiscuous mode
[  298.923024][T13362] bridge0: entered promiscuous mode
[  299.039304][T13371] __nla_validate_parse: 6 callbacks suppressed
[  299.039323][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'.
[  299.441076][T13394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'.
[  299.444754][T13394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.454861][T13394] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.996442][T13397] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001
[  300.108014][T13401] netlink: 'syz.2.1909': attribute type 17 has an invalid length.
[  300.814598][T13431] netlink: 'syz.1.1915': attribute type 13 has an invalid length.
[  300.921611][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'.
[  301.009284][T13438] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  301.022201][T13438] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1916'.
[  301.802468][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'.
[  301.806644][T13456] openvswitch: netlink: Missing valid actions attribute.
[  301.809857][T13456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.904495][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'.
[  301.925099][T13464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1925'.
[  302.009987][T13472] netlink: 'syz.2.1926': attribute type 17 has an invalid length.
[  302.251376][T13484] netlink: 'syz.1.1931': attribute type 1 has an invalid length.
[  302.274266][T13484] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  302.299717][T13484] bond0: (slave dummy0): making interface the new active one
[  302.304179][T13484] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  302.321510][T13484] bond0: entered promiscuous mode
[  302.323402][T13484] dummy0: entered promiscuous mode
[  302.329704][T13484] bond0: (slave dummy0): Releasing active interface
[  302.332523][T13484] dummy0: left promiscuous mode
[  302.336558][T13484] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  302.345326][T13483] bond0: left promiscuous mode
[  302.391274][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'.
[  302.394828][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'.
[  302.411348][ T6511] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.414796][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'.
[  302.418502][ T6511] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.424724][ T6511] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.429093][ T6511] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  302.555765][T13493] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:8201
[  302.559901][T13493] IPVS: set_ctl: invalid protocol: 21 100.1.1.2:19999
[  303.661734][T13587] netlink: 'syz.1.1944': attribute type 58 has an invalid length.
[  303.722612][T13587] veth0_macvtap: Caught tx_queue_len zero misconfig
[  304.095023][T13621] netlink: 'syz.1.1957': attribute type 58 has an invalid length.
[  304.101106][T13621] __nla_validate_parse: 13 callbacks suppressed
[  304.101116][T13621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1957'.
[  304.484579][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'.
[  304.823880][T13683] syzkaller0: entered promiscuous mode
[  304.826258][T13683] syzkaller0: entered allmulticast mode
[  304.980254][T13687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.111121][T13689] netlink: 'syz.2.1968': attribute type 58 has an invalid length.
[  305.119817][T13689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1968'.
[  305.278382][T13698] ieee802154 phy0 wpan0: encryption failed: -22
[  305.336331][T13704] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.389203][T13704] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.438746][T13704] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.493054][T13704] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.571646][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.586009][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.602727][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.615765][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.717640][T13721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1974'.
[  305.721978][T13721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1974'.
[  305.725698][T13721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1974'.
[  305.730577][T13721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1974'.
[  305.734379][T13721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1974'.
[  305.741851][T13721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1974'.
[  305.745618][T13721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1974'.
[  305.896457][T13727] smc: net device hsr0 applied user defined pnetid SYZ2
[  306.508166][T13742] lo speed is unknown, defaulting to 1000
[  306.533705][T13746] netlink: 'syz.1.1981': attribute type 1 has an invalid length.
[  306.707489][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  306.745212][T13755] netlink: 'syz.2.1986': attribute type 3 has an invalid length.
[  307.066658][T13766] lo speed is unknown, defaulting to 1000
[  307.108497][T13773] netlink: 'syz.0.1992': attribute type 58 has an invalid length.
[  307.548525][T13791] syzkaller0: entered promiscuous mode
[  307.552630][T13791] syzkaller0: entered allmulticast mode
[  307.643818][T13796] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  307.852457][T13810] tipc: Enabled bearer <eth:veth1_to_batadv>, priority 10
[  308.132584][T13821] netlink: 'syz.1.2004': attribute type 49 has an invalid length.
[  308.507618][T13831] netlink: 'syz.2.2006': attribute type 58 has an invalid length.
[  308.613903][T13834] ieee802154 phy0 wpan0: encryption failed: -22
[  308.670467][T13837] netlink: 'syz.0.2008': attribute type 58 has an invalid length.
[  309.164946][T13862] sit3: entered allmulticast mode
[  309.213907][T13862] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.236357][T13865] __nla_validate_parse: 37 callbacks suppressed
[  309.236376][T13865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2016'.
[  309.267820][T13862] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.325450][T13862] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.378920][T13862] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.448595][T13875] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.451732][T13875] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.738051][T13875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.764034][T13875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.989981][T13875] batadv0: left allmulticast mode
[  309.999761][    T9] lo speed is unknown, defaulting to 1000
[  310.003688][    T9] syz2: Port: 1 Link DOWN
[  310.008367][ T9138] syz1: Port: 1 Link DOWN
[  310.010170][  T271] syz0: Port: 1 Link DOWN
[  310.011964][ T6511] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.017083][ T6511] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.023606][ T6511] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.026860][ T6511] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.175548][ T6511] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.193676][ T6511] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.218953][ T6511] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.241270][ T6511] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.570693][T13909] netlink: 'syz.1.2026': attribute type 2 has an invalid length.
[  310.576021][T13909] netlink: 'syz.1.2026': attribute type 9 has an invalid length.
[  310.582710][T13909] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2026'.
[  310.704282][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'.
[  310.793150][T13914] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:21
[  311.650696][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'.
[  311.669150][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'.
[  311.718970][T13937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2033'.
[  311.722083][T13938] netlink: 'syz.2.2035': attribute type 3 has an invalid length.
[  311.736917][T13938] xfrm1: entered allmulticast mode
[  311.742601][T13938] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2035'.
[  311.824327][T13942] SET target dimension over the limit!
[  312.498317][T13966] ieee802154 phy0 wpan0: encryption failed: -22
[  312.531326][T13968] netlink: 'syz.1.2044': attribute type 4 has an invalid length.
[  312.533740][T13968] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2044'.
[  312.574769][T13975] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001
[  312.664463][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2048'.
[  312.683908][T13982] ip6tnl0: Caught tx_queue_len zero misconfig
[  312.689414][T13984] netlink: 'syz.2.2049': attribute type 58 has an invalid length.
[  312.692840][T13984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2049'.
[  312.702216][T13986] netlink: 'syz.0.2050': attribute type 1 has an invalid length.
[  312.732423][T13986] 8021q: adding VLAN 0 to HW filter on device bond5
[  312.741860][T13986] vlan4: entered allmulticast mode
[  312.743519][T13986] bond5: entered allmulticast mode
[  312.760110][T13986] bond5: (slave geneve3): making interface the new active one
[  312.762549][T13986] geneve3: entered allmulticast mode
[  312.766195][T13986] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  313.094396][T14010] ieee802154 phy0 wpan0: encryption failed: -22
[  313.584118][T14023] netlink: 'syz.0.2062': attribute type 17 has an invalid length.
[  313.710341][T14029] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.753254][T14029] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.814442][T14029] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.864650][T14029] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.932206][ T6511] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.938787][T14036] netlink: 'syz.2.2065': attribute type 4 has an invalid length.
[  313.952197][ T6511] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.966618][ T6511] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.979260][ T6511] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.023978][T14038] netlink: 'syz.0.2067': attribute type 12 has an invalid length.
[  314.243957][T14051] __nla_validate_parse: 5 callbacks suppressed
[  314.243972][T14051] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2070'.
[  314.363060][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2074'.
[  314.410715][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2074'.
[  314.446393][T14070] netlink: 'syz.0.2075': attribute type 3 has an invalid length.
[  315.112916][T14080] lo speed is unknown, defaulting to 1000
[  315.416789][T14092] lo speed is unknown, defaulting to 1000
[  316.060211][T14108] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2084'.
[  316.063158][T14107] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2084'.
[  317.198829][T14132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'.
[  317.206926][T14132] vlan2: entered promiscuous mode
[  317.208837][T14132] geneve1: entered promiscuous mode
[  317.210949][T14132] vlan2: entered allmulticast mode
[  317.212567][T14132] geneve1: entered allmulticast mode
[  317.245052][T14136] lo speed is unknown, defaulting to 1000
[  317.465576][T14146] netlink: 'syz.1.2094': attribute type 3 has an invalid length.
[  317.870262][T14151] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2095'.
[  317.955087][T14151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2095'.
[  317.959480][T14151] netlink: 'syz.0.2095': attribute type 4 has an invalid length.
[  318.066333][T14156] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2096'.
[  318.122094][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2099'.
[  318.139151][T14160] bond6: entered promiscuous mode
[  318.141536][T14160] 8021q: adding VLAN 0 to HW filter on device bond6
[  318.355423][T14174] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.394268][T14174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.479700][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.483059][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.487928][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.491536][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  318.503463][T14175] lo speed is unknown, defaulting to 1000
[  318.929827][T14182] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.933706][T14182] 8021q: adding VLAN 0 to HW filter on device team0
[  318.942703][T14182] batadv0: left promiscuous mode
[  318.951048][T14182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.964330][T14182] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  318.971363][ T7569] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.973783][ T7569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.976502][ T1239] lo speed is unknown, defaulting to 1000
[  318.979937][ T1239] syz2: Port: 1 Link ACTIVE
[  319.043230][T14185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.050333][T14185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.058643][T14185] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  319.062638][T14185] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  319.068677][T14185] veth1_vlan: left promiscuous mode
[  319.071781][T14185] veth0_vlan: left promiscuous mode
[  319.075459][T14185] veth0_vlan: entered promiscuous mode
[  319.079844][T14185] veth1_vlan: entered promiscuous mode
[  319.086463][T14185] veth1_macvtap: left promiscuous mode
[  319.090567][T14185] veth0_macvtap: left promiscuous mode
[  319.093954][T14185] veth0_macvtap: entered promiscuous mode
[  319.097281][T14185] veth1_macvtap: entered promiscuous mode
[  319.104183][T14185] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  319.112204][ T7569] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.115084][ T7569] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.143145][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.173623][T14188] netlink: 'syz.1.2107': attribute type 13 has an invalid length.
[  319.203095][ T5696] syz0: Port: 1 Link ACTIVE
[  319.206667][ T9123] syz1: Port: 1 Link ACTIVE
[  319.216287][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.219800][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.261246][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.290472][T14189] __nla_validate_parse: 2 callbacks suppressed
[  319.290491][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'.
[  319.457502][T14198] bond7: invalid ARP target 0.0.0.0 specified for addition
[  319.460359][T14198] bond7: option arp_ip_target: invalid value (0)
[  319.465753][T14198] bond7 (unregistering): Released all slaves
[  319.652270][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'.
[  319.703618][T14211] Unsupported ieee802154 address type: 0
[  319.827031][T14217] netlink: 'syz.0.2114': attribute type 1 has an invalid length.
[  319.832217][T14217] netlink: 'syz.0.2114': attribute type 2 has an invalid length.
[  319.839977][T14217] netlink: 'syz.0.2114': attribute type 1 has an invalid length.
[  319.844015][T14218] netlink: 'syz.1.2112': attribute type 1 has an invalid length.
[  319.870068][T14218] 8021q: adding VLAN 0 to HW filter on device bond8
[  319.920493][T14218] vlan3: entered promiscuous mode
[  319.922607][T14218] bond8: entered promiscuous mode
[  319.924822][T14218] vlan3: entered allmulticast mode
[  319.926837][T14218] bond8: entered allmulticast mode
[  319.979129][T14218] bond8: (slave bridge17): making interface the new active one
[  319.983814][T14218] bridge17: entered promiscuous mode
[  319.986026][T14218] bridge17: entered allmulticast mode
[  319.991387][T14218] bond8: (slave bridge17): Enslaving as an active interface with an up link
[  320.154320][T14229] xt_l2tp: missing protocol rule (udp|l2tpip)
[  321.012180][T14246] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2120'.
[  321.085269][T14253] syzkaller1: entered promiscuous mode
[  321.089030][T14253] syzkaller1: entered allmulticast mode
[  321.195289][T14256] gretap0: entered promiscuous mode
[  321.197066][T14256] gretap0: entered allmulticast mode
[  321.795810][T14286] netlink: 'syz.1.2133': attribute type 58 has an invalid length.
[  321.799051][T14286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2133'.
[  321.853959][T14286] veth0_macvtap: Caught tx_queue_len zero misconfig
[  321.972573][T14289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2134'.
[  322.042006][T14292] ieee802154 phy0 wpan0: encryption failed: -22
[  322.049556][T14294] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2135'.
[  322.696010][T14333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2145'.
[  322.721488][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  322.829506][T14333] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.880299][T14333] tipc: Resetting bearer <eth:veth1_to_batadv>
[  322.894560][T14333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  322.904578][T14333] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  322.964749][T14346] xt_HMARK: spi-set and port-set can't be combined
[  323.009180][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'.
[  323.253777][T14368] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2156'.
[  323.375717][T14383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2160'.
[  323.447008][T14393] xt_hashlimit: size too large, truncated to 1048576
[  323.717924][T14406] syzkaller0: entered promiscuous mode
[  323.720414][T14406] syzkaller0: entered allmulticast mode
[  324.083696][T14414] netlink: 'syz.2.2168': attribute type 4 has an invalid length.
[  325.715816][T14428] __nla_validate_parse: 6 callbacks suppressed
[  325.715829][T14428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2170'.
[  325.806589][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'.
[  325.870237][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'.
[  325.872996][T14448] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  325.983338][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2174'.
[  326.271732][T14462] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  326.463014][T14479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2182'.
[  326.532647][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'.
[  326.544607][T14485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2185'.
[  326.609034][T14486] netlink: 'syz.1.2183': attribute type 32 has an invalid length.
[  326.612243][T14486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2183'.
[  327.473178][T14504] netlink: 'syz.0.2188': attribute type 3 has an invalid length.
[  327.511908][T14506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  327.637110][T14508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2190'.
[  328.204866][T14519] netlink: 'syz.2.2192': attribute type 11 has an invalid length.
[  328.275245][T14518] lo speed is unknown, defaulting to 1000
[  328.322275][T14527] netlink: 'syz.2.2195': attribute type 58 has an invalid length.
[  328.335775][T14527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2195'.
[  328.962623][T14559] tipc: Resetting bearer <ib:ip6gre0>
[  329.193830][T14559] tipc: Resetting bearer <eth:veth1_to_batadv>
[  329.432708][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  329.437482][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  329.457932][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  329.474513][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  329.480180][T14564] lo speed is unknown, defaulting to 1000
[  330.731970][T14621] __nla_validate_parse: 2 callbacks suppressed
[  330.731989][T14621] netlink: 4800 bytes leftover after parsing attributes in process `syz.1.2215'.
[  330.741227][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'.
[  331.321505][T14625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2217'.
[  331.554865][T14634] rdma_rxe: rxe_newlink: failed to add wg1
[  331.573097][T14636] netlink: 'syz.2.2220': attribute type 5 has an invalid length.
[  331.631248][T14641] netlink: 'syz.1.2222': attribute type 3 has an invalid length.
[  331.647313][T14641] vlan2: left promiscuous mode
[  331.649258][T14641] geneve1: left promiscuous mode
[  331.651380][T14641] vlan2: left allmulticast mode
[  331.653040][T14641] geneve1: left allmulticast mode
[  331.654890][T14641] vlan3: left promiscuous mode
[  331.656363][T14641] bond8: left promiscuous mode
[  331.659895][T14641] bridge17: left promiscuous mode
[  331.661733][T14641] vlan3: left allmulticast mode
[  331.663313][T14641] bond8: left allmulticast mode
[  331.664785][T14641] bridge17: left allmulticast mode
[  331.816335][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2226'.
[  331.852178][T14660] netlink: 'syz.0.2227': attribute type 58 has an invalid length.
[  331.855388][T14660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2227'.
[  332.115279][T14669] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  332.365225][T14679] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.369264][T14679] 8021q: adding VLAN 0 to HW filter on device team0
[  332.376075][T14679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.385686][T14678] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2232'.
[  332.406358][T14679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.414077][T14679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  332.417499][T14679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  332.422998][T14679] veth1_vlan: left promiscuous mode
[  332.425512][T14679] veth0_vlan: left promiscuous mode
[  332.428041][T14679] veth0_vlan: entered promiscuous mode
[  332.432154][T14679] veth1_vlan: entered promiscuous mode
[  332.440553][T14679] veth1_macvtap: left promiscuous mode
[  332.443605][T14679] veth0_macvtap: left promiscuous mode
[  332.446565][T14679] veth0_macvtap: entered promiscuous mode
[  332.459239][T14679] veth1_macvtap: entered promiscuous mode
[  332.465863][T14679] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  332.474980][ T7569] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.477295][ T7569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.484135][ T7569] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.487040][ T7569] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.524532][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.527265][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.539736][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.546861][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.744035][T14688] tipc: Enabling of bearer <ib:netpci0> rejected, failed to enable media
[  332.835618][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'.
[  332.842323][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'.
[  332.846071][T14701] netlink: 'syz.0.2238': attribute type 30 has an invalid length.
[  332.850288][T14700] netlink: 'syz.0.2238': attribute type 30 has an invalid length.
[  332.854262][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'.
[  332.860933][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'.
[  332.864975][T14701] netlink: 'syz.0.2238': attribute type 30 has an invalid length.
[  332.868502][T14700] netlink: 'syz.0.2238': attribute type 30 has an invalid length.
[  332.872934][T14701] openvswitch: netlink: Flow key attr not present in new flow.
[  332.903841][T14704] ieee802154 phy0 wpan0: encryption failed: -22
[  333.178352][T14718] lo speed is unknown, defaulting to 1000
[  333.303394][T14733] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  333.602690][T14764] netlink: 'syz.0.2250': attribute type 58 has an invalid length.
[  334.098411][   T53] Bluetooth: hci2: link tx timeout
[  334.108935][   T53] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  334.467058][T14801] netlink: 'syz.0.2260': attribute type 58 has an invalid length.
[  334.528432][T14804] netlink: 'syz.2.2262': attribute type 58 has an invalid length.
[  334.554865][T14806] netlink: 'syz.1.2261': attribute type 21 has an invalid length.
[  334.693267][T14814] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  335.368982][T14806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.472593][T14824] NCSI netlink: No device for ifindex 1073545264
[  335.594532][T14830] x_tables: duplicate underflow at hook 1
[  336.147407][ T5000] Bluetooth: hci2: command 0x0406 tx timeout
[  336.604213][T14877] ieee802154 phy0 wpan0: encryption failed: -22
[  336.631775][T14878] __nla_validate_parse: 10 callbacks suppressed
[  336.631795][T14878] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2279'.
[  336.646701][T14878] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2279'.
[  336.651508][T14878] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2279'.
[  336.733946][T14880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2281'.
[  336.747623][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2282'.
[  336.770235][T14883] macsec1: entered promiscuous mode
[  336.772503][T14883] dummy0: entered promiscuous mode
[  336.776967][T14883] macsec1: entered allmulticast mode
[  336.779473][T14883] dummy0: entered allmulticast mode
[  336.783047][T14883] dummy0: left allmulticast mode
[  336.785078][T14883] dummy0: left promiscuous mode
[  336.800653][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'.
[  336.906308][T14891] geneve2: entered promiscuous mode
[  336.917741][T14891] geneve2: entered allmulticast mode
[  336.925126][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  336.931265][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  336.938999][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  336.942548][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  337.029467][T14901] validate_nla: 7 callbacks suppressed
[  337.029486][T14901] netlink: 'syz.0.2287': attribute type 58 has an invalid length.
[  337.039827][T14901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2287'.
[  337.571089][T14918] netlink: 'syz.1.2291': attribute type 1 has an invalid length.
[  337.574381][T14918] netlink: 'syz.1.2291': attribute type 2 has an invalid length.
[  337.578050][T14918] netlink: 'syz.1.2291': attribute type 3 has an invalid length.
[  337.634523][T14920] netlink: 'syz.2.2292': attribute type 58 has an invalid length.
[  337.647264][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2292'.
[  338.480840][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2296'.
[  339.029634][T14986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2301'.
[  339.035582][T14986] netlink: 'syz.2.2301': attribute type 5 has an invalid length.
[  339.103740][T14992] siw: device registration error -23
[  339.387823][T14992] nbd1: detected capacity change from 0 to 63
[  339.397532][   T55] block nbd1: Receive control failed (result -32)
[  339.399829][ T6943] block nbd1: Receive control failed (result -32)
[  339.405701][T14454] block nbd1: Dead connection, failed to find a fallback
[  339.409196][T14454] block nbd1: shutting down sockets
[  339.412718][T14454] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.417796][T14454] Buffer I/O error on dev nbd1, logical block 0, async page read
[  339.422524][T14454] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.426205][T14454] Buffer I/O error on dev nbd1, logical block 1, async page read
[  339.431586][T14454] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.435093][T14454] Buffer I/O error on dev nbd1, logical block 2, async page read
[  339.438752][T14454] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.442473][T14454] Buffer I/O error on dev nbd1, logical block 3, async page read
[  339.445712][T14454] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.449753][T14454] Buffer I/O error on dev nbd1, logical block 0, async page read
[  339.453039][T14454] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.456560][T14454] Buffer I/O error on dev nbd1, logical block 1, async page read
[  339.456575][T14996] netlink: 'syz.0.2305': attribute type 5 has an invalid length.
[  339.460010][T14454] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.467158][T14454] Buffer I/O error on dev nbd1, logical block 2, async page read
[  339.472576][T14454] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.475532][T14454] Buffer I/O error on dev nbd1, logical block 3, async page read
[  339.478409][T14454] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.481243][T14454] Buffer I/O error on dev nbd1, logical block 0, async page read
[  339.483744][T14454] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  339.486763][T14454] Buffer I/O error on dev nbd1, logical block 1, async page read
[  339.490989][T14454] ldm_validate_partition_table(): Disk read failed.
[  339.496268][T14454] Dev nbd1: unable to read RDB block 0
[  339.500438][T14454]  nbd1: unable to read partition table
[  339.512765][T14454] ldm_validate_partition_table(): Disk read failed.
[  339.516619][T14454] Dev nbd1: unable to read RDB block 0
[  339.520446][T14454]  nbd1: unable to read partition table
[  339.690599][T14999] netlink: 'syz.1.2306': attribute type 1 has an invalid length.
[  339.693087][T14999] netlink: 'syz.1.2306': attribute type 11 has an invalid length.
[  339.856324][T15007] netlink: 'syz.2.2309': attribute type 1 has an invalid length.
[  339.903222][T15003] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.924832][T15003] tipc: Resetting bearer <eth:veth1_to_batadv>
[  339.929533][T15003] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  340.649438][T15044] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  341.214450][T15072] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.216789][T15072] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.286905][T15072] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.344062][ T6511] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.354535][ T6511] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.371876][ T6511] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.381171][ T6511] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  341.791014][T15096] __nla_validate_parse: 8 callbacks suppressed
[  341.791037][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2328'.
[  341.852279][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2330'.
[  341.903585][T15098] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  342.059586][T15116] ieee802154 phy0 wpan0: encryption failed: -22
[  342.099310][T15118] validate_nla: 2 callbacks suppressed
[  342.099323][T15118] netlink: 'syz.0.2335': attribute type 58 has an invalid length.
[  342.103658][T15118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2335'.
[  342.178690][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'.
[  342.294133][T15124] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2334'.
[  344.932033][T15170] syzkaller0: entered promiscuous mode
[  344.934371][T15170] syzkaller0: entered allmulticast mode
[  344.943946][T15170] tc action pedit offset must be on 32 bit boundaries
[  345.085999][T15174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2350'.
[  345.621300][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'.
[  345.688185][T15199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2355'.
[  346.031244][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2358'.
[  346.037481][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2358'.
[  346.179293][T15214] netlink: 'syz.2.2360': attribute type 1 has an invalid length.
[  346.217318][T15214] 8021q: adding VLAN 0 to HW filter on device bond5
[  346.298159][T15220] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  346.766421][T15235] netlink: 'syz.0.2365': attribute type 17 has an invalid length.
[  347.039186][T15245] __nla_validate_parse: 3 callbacks suppressed
[  347.039203][T15245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2368'.
[  347.057406][T15245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2368'.
[  347.520290][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'.
[  347.523856][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2369'.
[  347.527468][T15247] netlink: 'syz.0.2369': attribute type 18 has an invalid length.
[  347.546412][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'.
[  347.550182][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2369'.
[  347.770287][T15257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.869729][T15142] Set syz1 is full, maxelem 65536 reached
[  347.933334][T15261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2374'.
[  347.953267][T15261] netlink: 'syz.2.2374': attribute type 21 has an invalid length.
[  347.960757][T15261] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2374'.
[  347.965809][T15261] netlink: 'syz.2.2374': attribute type 5 has an invalid length.
[  347.969520][T15261] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2374'.
[  348.062032][T15276] lo: Caught tx_queue_len zero misconfig
[  349.563417][T15337] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2394'.
[  352.685679][T15346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2397'.
[  352.716556][T15346] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2397'.
[  352.888404][T15349] lo speed is unknown, defaulting to 1000
[  352.896706][T15358] netlink: 'syz.1.2400': attribute type 58 has an invalid length.
[  352.909358][T15358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2400'.
[  352.914563][T15359] netlink: 'syz.0.2399': attribute type 3 has an invalid length.
[  353.108854][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2401'.
[  353.160654][T15365] bridge18: port 1(dummy0) entered blocking state
[  353.166140][T15365] bridge18: port 1(dummy0) entered disabled state
[  353.171759][T15365] dummy0: entered allmulticast mode
[  353.179923][T15365] dummy0: entered promiscuous mode
[  353.838039][T15386] netlink: 'syz.2.2405': attribute type 1 has an invalid length.
[  353.853253][T15387] netlink: 'syz.2.2405': attribute type 1 has an invalid length.
[  353.899622][T15386] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  353.944148][T15387] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  353.995531][T15394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2406'.
[  354.053102][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2406'.
[  354.193058][T15400] lo speed is unknown, defaulting to 1000
[  354.430161][T15414] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  354.443168][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'.
[  354.540651][T15410] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2410'.
[  354.609941][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2410'.
[  354.731992][T15428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2412'.
[  354.766398][T15424] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.773100][T15424] 8021q: adding VLAN 0 to HW filter on device team0
[  354.785811][T15424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.856821][T15424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.891857][T15424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  354.899761][T15424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  354.910097][T15424] veth1_vlan: left promiscuous mode
[  354.916901][T15424] veth0_vlan: left promiscuous mode
[  354.921872][T15424] veth0_vlan: entered promiscuous mode
[  354.934375][T15424] veth1_vlan: entered promiscuous mode
[  354.975448][T15424] veth1_macvtap: left promiscuous mode
[  354.981593][T15424] veth0_macvtap: left promiscuous mode
[  354.986821][T15424] veth0_macvtap: entered promiscuous mode
[  354.992021][T15424] veth1_macvtap: entered promiscuous mode
[  354.999700][T15424] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  355.013708][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.015960][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.026886][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.029096][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.129914][ T6511] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.149997][ T6511] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.296372][ T6511] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.313053][ T6511] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  355.353841][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  356.088017][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  356.092769][    C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[  356.159712][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  356.655133][T15466] xt_hashlimit: size too large, truncated to 1048576
[  357.107549][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  357.111834][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  357.301745][T15486] bond9: option lacp_active: invalid value (8)
[  357.407130][T15486] bond9 (unregistering): Released all slaves
[  357.575667][T15494] netlink: 'syz.2.2430': attribute type 3 has an invalid length.
[  357.709157][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  357.715459][T15494] __nla_validate_parse: 10 callbacks suppressed
[  357.715477][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'.
[  357.732350][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'.
[  357.839307][T15501] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  357.851851][T15499] netlink: 'syz.1.2431': attribute type 1 has an invalid length.
[  357.929720][T15499] bond9: entered promiscuous mode
[  357.940463][T15499] 8021q: adding VLAN 0 to HW filter on device bond9
[  357.983079][T15503] vlan4: entered allmulticast mode
[  358.008008][T15503] bond9: entered allmulticast mode
[  358.089216][T15499] bond9: (slave bridge19): making interface the new active one
[  358.104306][T15499] bridge19: entered promiscuous mode
[  358.112095][T15499] bridge19: entered allmulticast mode
[  358.124336][T15499] bond9: (slave bridge19): Enslaving as an active interface with an up link
[  358.972386][T15529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2438'.
[  359.070018][T15531] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2439'.
[  359.087853][T15531] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2439'.
[  359.210542][T15540] netlink: 'syz.1.2441': attribute type 3 has an invalid length.
[  359.311542][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2442'.
[  359.475537][T15557] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2445'.
[  359.617755][T15574] syzkaller1: entered allmulticast mode
[  360.811127][T15595] lo speed is unknown, defaulting to 1000
[  360.940991][T15601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2454'.
[  360.943995][T15599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2454'.
[  361.188091][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  362.611786][T15643] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  362.649591][T15643] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  362.653367][T15643] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  363.184306][T15651] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2464'.
[  363.546255][T15671] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2468'.
[  364.455093][T15685] lo speed is unknown, defaulting to 1000
[  364.600546][T15686] netlink: 'syz.0.2471': attribute type 1 has an invalid length.
[  366.026906][T15646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  366.202200][T15690] rdma_rxe: rxe_newlink: failed to add lo
[  366.570515][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2478'.
[  366.573549][T15711] block nbd0: reconnected socket
[  366.638027][   T54] block nbd0: Receive control failed (result -32)
[  366.809995][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2479'.
[  367.118096][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'.
[  367.378721][T15732] netlink: 'syz.2.2484': attribute type 1 has an invalid length.
[  367.439027][T15736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'.
[  367.479946][T15732] 8021q: adding VLAN 0 to HW filter on device bond6
[  367.523146][T15736] vlan0: entered allmulticast mode
[  367.525416][T15736] bond6: entered allmulticast mode
[  367.562542][T15732] bond6: (slave geneve3): making interface the new active one
[  367.565831][T15732] geneve3: entered allmulticast mode
[  367.569897][T15735] vcan0: tx drop: invalid da for name 0xfffffffffffffffd
[  367.578449][T15732] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  367.686219][T15742] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2489'.
[  367.700232][T15742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2489'.
[  367.710811][T15742] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2489'.
[  367.716148][T15742] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2489'.
[  367.827975][T15747] ieee802154 phy0 wpan0: encryption failed: -22
[  368.013049][T15757] ieee802154 phy0 wpan0: encryption failed: -22
[  368.302194][T15769] lo speed is unknown, defaulting to 1000
[  368.333488][T15767] lo speed is unknown, defaulting to 1000
[  369.143994][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2499'.
[  369.149397][T15785] netlink: 'syz.2.2499': attribute type 3 has an invalid length.
[  369.430496][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  369.564527][T15792] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.654745][T15804] netlink: 'syz.1.2504': attribute type 1 has an invalid length.
[  371.921918][T15821] Unsupported ieee802154 address type: 0
[  371.995732][T15823] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2508'.
[  372.383828][T15841] ieee802154 phy0 wpan0: encryption failed: -22
[  372.602561][T15846] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2513'.
[  372.686147][T15848] netlink: 'syz.0.2513': attribute type 4 has an invalid length.
[  373.330963][T15850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2514'.
[  373.382716][T15852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2514'.
[  373.949767][T15853] lo speed is unknown, defaulting to 1000
[  374.651571][T15882] Unsupported ieee802154 address type: 0
[  375.451583][T15917] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.454817][T15917] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.107497][T15917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.216423][ T6511] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.219892][ T6511] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.228711][ T6511] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  377.233457][ T6511] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  379.294808][T15953] netlink: 'syz.1.2535': attribute type 3 has an invalid length.
[  380.196083][T15925] Set syz1 is full, maxelem 65536 reached
[  380.791850][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2539'.
[  380.818239][T15980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2540'.
[  381.046889][T15973] lo speed is unknown, defaulting to 1000
[  381.137084][T15972] lo speed is unknown, defaulting to 1000
[  382.232092][T15994] lo speed is unknown, defaulting to 1000
[  383.846327][T16008] syzkaller0: entered promiscuous mode
[  383.848844][T16008] syzkaller0: entered allmulticast mode
[  384.267939][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  385.320521][T16020] xt_CT: No such helper "snmp"
[  386.055362][T15995] Set syz1 is full, maxelem 65536 reached
[  386.235129][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2551'.
[  386.572817][T16045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2555'.
[  386.794309][T16065] netlink: 'syz.0.2558': attribute type 3 has an invalid length.
[  387.580816][T16071] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.584254][T16071] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.972778][T16071] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.014959][T16071] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  388.104363][T16080] 
[  388.105387][T16080] ======================================================
[  388.107978][T16080] WARNING: possible circular locking dependency detected
[  388.110046][T16080] syzkaller #0 Not tainted
[  388.111621][T16080] ------------------------------------------------------
[  388.113808][T16080] syz.1.2563/16080 is trying to acquire lock:
[  388.115712][T16080] ffff8881012b4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0
[  388.119415][T16080] 
[  388.119415][T16080] but task is already holding lock:
[  388.122348][T16080] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  388.126077][T16080] 
[  388.126077][T16080] which lock already depends on the new lock.
[  388.126077][T16080] 
[  388.130157][T16080] 
[  388.130157][T16080] the existing dependency chain (in reverse order) is:
[  388.133759][T16080] 
[  388.133759][T16080] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  388.136893][T16080]        down_write+0x96/0x200
[  388.138735][T16080]        kernfs_add_one+0x41/0x5c0
[  388.140777][T16080]        kernfs_create_dir_ns+0xde/0x130
[  388.142940][T16080]        internal_create_group+0x425/0x1180
[  388.145154][T16080]        cpuhp_invoke_callback+0x445/0x860
[  388.147391][T16080]        cpuhp_issue_call+0x430/0x7a0
[  388.149451][T16080]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  388.152000][T16080]        __cpuhp_setup_state+0x3f/0x60
[  388.154079][T16080]        do_one_initcall+0x250/0x870
[  388.156117][T16080]        do_initcall_level+0x104/0x190
[  388.158215][T16080]        do_initcalls+0x59/0xa0
[  388.160057][T16080]        kernel_init_freeable+0x2a6/0x3e0
[  388.162237][T16080]        kernel_init+0x1d/0x1d0
[  388.164125][T16080]        ret_from_fork+0x514/0xb70
[  388.166267][T16080]        ret_from_fork_asm+0x1a/0x30
[  388.168305][T16080] 
[  388.168305][T16080] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  388.171442][T16080] 
[  388.171442][T16080] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  388.174360][T16080]        cpus_read_lock+0x42/0x160
[  388.176367][T16080]        static_key_slow_inc+0x12/0x30
[  388.178453][T16080]        nbd_genl_reconfigure+0x132f/0x1ea0
[  388.180730][T16080]        genl_family_rcv_msg_doit+0x22a/0x330
[  388.183070][T16080]        genl_rcv_msg+0x61c/0x7a0
[  388.185009][T16080]        netlink_rcv_skb+0x232/0x4b0
[  388.187062][T16080]        genl_rcv+0x28/0x40
[  388.188839][T16080]        netlink_unicast+0x75c/0x8e0
[  388.190883][T16080]        netlink_sendmsg+0x813/0xb40
[  388.192996][T16080]        ____sys_sendmsg+0x972/0x9f0
[  388.195032][T16080]        ___sys_sendmsg+0x2a5/0x360
[  388.197021][T16080]        __x64_sys_sendmsg+0x1bd/0x2a0
[  388.199118][T16080]        do_syscall_64+0x15f/0xf80
[  388.201109][T16080]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.203559][T16080] 
[  388.203559][T16080] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  388.206510][T16080]        __mutex_lock+0x1a3/0x1550
[  388.208519][T16080]        nbd_queue_rq+0x37b/0x1100
[  388.210497][T16080]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  388.212858][T16080]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  388.215468][T16080]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  388.217975][T16080]        blk_mq_run_hw_queue+0x348/0x4f0
[  388.220148][T16080]        blk_mq_dispatch_list+0xd16/0xe10
[  388.222362][T16080]        blk_mq_flush_plug_list+0x48d/0x570
[  388.224630][T16080]        __blk_flush_plug+0x3ed/0x4d0
[  388.226717][T16080]        __submit_bio+0x28d/0x580
[  388.228679][T16080]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  388.231056][T16080]        block_read_full_folio+0x599/0x830
[  388.233285][T16080]        filemap_read_folio+0x137/0x3b0
[  388.235426][T16080]        do_read_cache_folio+0x358/0x590
[  388.237560][T16080]        read_part_sector+0xb6/0x2b0
[  388.239603][T16080]        adfspart_check_ICS+0xb1/0x960
[  388.241702][T16080]        bdev_disk_changed+0x817/0x1770
[  388.243832][T16080]        blkdev_get_whole+0x380/0x510
[  388.245933][T16080]        bdev_open+0x31e/0xd30
[  388.247790][T16080]        blkdev_open+0x470/0x610
[  388.249708][T16080]        do_dentry_open+0x785/0x14e0
[  388.251746][T16080]        vfs_open+0x3b/0x340
[  388.253559][T16080]        path_openat+0x2e08/0x3860
[  388.255559][T16080]        do_file_open+0x23e/0x4a0
[  388.257509][T16080]        do_sys_openat2+0x113/0x200
[  388.259510][T16080]        __x64_sys_openat+0x138/0x170
[  388.261588][T16080]        do_syscall_64+0x15f/0xf80
[  388.263588][T16080]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.266053][T16080] 
[  388.266053][T16080] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  388.268834][T16080]        __mutex_lock+0x1a3/0x1550
[  388.270831][T16080]        nbd_queue_rq+0xc6/0x1100
[  388.272799][T16080]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  388.275156][T16080]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  388.277774][T16080]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  388.280237][T16080]        blk_mq_run_hw_queue+0x348/0x4f0
[  388.282412][T16080]        blk_mq_dispatch_list+0xd16/0xe10
[  388.284632][T16080]        blk_mq_flush_plug_list+0x48d/0x570
[  388.286955][T16080]        __blk_flush_plug+0x3ed/0x4d0
[  388.289065][T16080]        __submit_bio+0x28d/0x580
[  388.291056][T16080]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  388.293415][T16080]        block_read_full_folio+0x599/0x830
[  388.295642][T16080]        filemap_read_folio+0x137/0x3b0
[  388.297792][T16080]        do_read_cache_folio+0x358/0x590
[  388.300002][T16080]        read_part_sector+0xb6/0x2b0
[  388.302066][T16080]        adfspart_check_ICS+0xb1/0x960
[  388.304078][T16080]        bdev_disk_changed+0x817/0x1770
[  388.306282][T16080]        blkdev_get_whole+0x380/0x510
[  388.308352][T16080]        bdev_open+0x31e/0xd30
[  388.310160][T16080]        blkdev_open+0x470/0x610
[  388.312109][T16080]        do_dentry_open+0x785/0x14e0
[  388.314150][T16080]        vfs_open+0x3b/0x340
[  388.315939][T16080]        path_openat+0x2e08/0x3860
[  388.317927][T16080]        do_file_open+0x23e/0x4a0
[  388.319788][T16080]        do_sys_openat2+0x113/0x200
[  388.321852][T16080]        __x64_sys_openat+0x138/0x170
[  388.323949][T16080]        do_syscall_64+0x15f/0xf80
[  388.325930][T16080]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.328407][T16080] 
[  388.328407][T16080] -> #4 (set->srcu){.+.+}-{0:0}:
[  388.331126][T16080]        __synchronize_srcu+0xca/0x300
[  388.333260][T16080]        elevator_switch+0x1e8/0x7a0
[  388.335324][T16080]        elevator_change+0x2cc/0x450
[  388.337405][T16080]        elevator_set_default+0x36c/0x430
[  388.339612][T16080]        blk_register_queue+0x3e9/0x4e0
[  388.341745][T16080]        __add_disk+0x677/0xd50
[  388.343646][T16080]        add_disk_fwnode+0xfb/0x480
[  388.345700][T16080]        nbd_dev_add+0x72c/0xb50
[  388.347657][T16080]        nbd_init+0x168/0x1f0
[  388.349730][T16080]        do_one_initcall+0x250/0x870
[  388.351825][T16080]        do_initcall_level+0x104/0x190
[  388.353990][T16080]        do_initcalls+0x59/0xa0
[  388.355920][T16080]        kernel_init_freeable+0x2a6/0x3e0
[  388.358351][T16080]        kernel_init+0x1d/0x1d0
[  388.360398][T16080]        ret_from_fork+0x514/0xb70
[  388.362668][T16080]        ret_from_fork_asm+0x1a/0x30
[  388.365279][T16080] 
[  388.365279][T16080] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  388.369257][T16080]        __mutex_lock+0x1a3/0x1550
[  388.371368][T16080]        elevator_change+0x1b3/0x450
[  388.373534][T16080]        elevator_set_none+0xb5/0x140
[  388.375659][T16080]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  388.378146][T16080]        nbd_start_device+0x17f/0xb10
[  388.380262][T16080]        nbd_genl_connect+0x165b/0x1cf0
[  388.382352][T16080]        genl_family_rcv_msg_doit+0x22a/0x330
[  388.384708][T16080]        genl_rcv_msg+0x61c/0x7a0
[  388.386713][T16080]        netlink_rcv_skb+0x232/0x4b0
[  388.388771][T16080]        genl_rcv+0x28/0x40
[  388.390583][T16080]        netlink_unicast+0x75c/0x8e0
[  388.392675][T16080]        netlink_sendmsg+0x813/0xb40
[  388.394696][T16080]        ____sys_sendmsg+0x972/0x9f0
[  388.396733][T16080]        ___sys_sendmsg+0x2a5/0x360
[  388.398792][T16080]        __x64_sys_sendmsg+0x1bd/0x2a0
[  388.401046][T16080]        do_syscall_64+0x15f/0xf80
[  388.403065][T16080]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.405573][T16080] 
[  388.405573][T16080] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  388.409058][T16080]        blk_alloc_queue+0x546/0x680
[  388.411372][T16080]        __blk_mq_alloc_disk+0x197/0x390
[  388.413925][T16080]        nbd_dev_add+0x499/0xb50
[  388.416061][T16080]        nbd_init+0x168/0x1f0
[  388.418022][T16080]        do_one_initcall+0x250/0x870
[  388.420184][T16080]        do_initcall_level+0x104/0x190
[  388.422401][T16080]        do_initcalls+0x59/0xa0
[  388.424569][T16080]        kernel_init_freeable+0x2a6/0x3e0
[  388.427066][T16080]        kernel_init+0x1d/0x1d0
[  388.429235][T16080]        ret_from_fork+0x514/0xb70
[  388.431463][T16080]        ret_from_fork_asm+0x1a/0x30
[  388.433647][T16080] 
[  388.433647][T16080] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  388.436580][T16080]        fs_reclaim_acquire+0x71/0x100
[  388.438756][T16080]        kmem_cache_alloc_noprof+0x40/0x650
[  388.441165][T16080]        __kernfs_iattrs+0xdf/0x320
[  388.443269][T16080]        kernfs_iop_setattr+0xea/0x3f0
[  388.445554][T16080]        notify_change+0xc1a/0xf40
[  388.448483][T16080]        do_truncate+0x1c2/0x250
[  388.450470][T16080]        path_openat+0x2f89/0x3860
[  388.452536][T16080]        do_file_open+0x23e/0x4a0
[  388.454506][T16080]        do_sys_openat2+0x113/0x200
[  388.456550][T16080]        __x64_sys_openat+0x138/0x170
[  388.458656][T16080]        do_syscall_64+0x15f/0xf80
[  388.460636][T16080]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.463101][T16080] 
[  388.463101][T16080] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  388.467309][T16080]        __lock_acquire+0x15a5/0x2cf0
[  388.469505][T16080]        lock_acquire+0x106/0x350
[  388.471479][T16080]        down_write+0x96/0x200
[  388.473372][T16080]        kernfs_link_sibling+0x4ed/0x5c0
[  388.475559][T16080]        kernfs_add_one+0x1ca/0x5c0
[  388.477965][T16080]        __kernfs_create_file+0x22b/0x2e0
[  388.480428][T16080]        sysfs_add_file_mode_ns+0x238/0x300
[  388.482962][T16080]        sysfs_create_file_ns+0x12b/0x1b0
[  388.485374][T16080]        idletimer_tg_checkentry+0x41b/0xa70
[  388.487912][T16080]        xt_check_target+0x61a/0xca0
[  388.490162][T16080]        translate_table+0x184f/0x20b0
[  388.492435][T16080]        do_ip6t_set_ctl+0x9fe/0xe10
[  388.494612][T16080]        nf_setsockopt+0x26f/0x290
[  388.496802][T16080]        do_sock_setsockopt+0x17c/0x1b0
[  388.499165][T16080]        __x64_sys_setsockopt+0x13d/0x1b0
[  388.501568][T16080]        do_syscall_64+0x15f/0xf80
[  388.503800][T16080]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.507213][T16080] 
[  388.507213][T16080] other info that might help us debug this:
[  388.507213][T16080] 
[  388.511123][T16080] Chain exists of:
[  388.511123][T16080]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  388.511123][T16080] 
[  388.516628][T16080]  Possible unsafe locking scenario:
[  388.516628][T16080] 
[  388.519479][T16080]        CPU0                    CPU1
[  388.521535][T16080]        ----                    ----
[  388.523608][T16080]   lock(&root->kernfs_rwsem);
[  388.525464][T16080]                                lock(cpuhp_state_mutex);
[  388.528162][T16080]                                lock(&root->kernfs_rwsem);
[  388.530954][T16080]   lock(&root->kernfs_iattr_rwsem);
[  388.533181][T16080] 
[  388.533181][T16080]  *** DEADLOCK ***
[  388.533181][T16080] 
[  388.536266][T16080] 2 locks held by syz.1.2563/16080:
[  388.538297][T16080]  #0: ffffffff8fe7d680 (list_mutex){+.+.}-{4:4}, at: idletimer_tg_checkentry+0x70/0xa70
[  388.542074][T16080]  #1: ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[  388.545853][T16080] 
[  388.545853][T16080] stack backtrace:
[  388.548148][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.1.2563 Not tainted syzkaller #0 PREEMPT(full) 
[  388.548167][T16080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  388.548178][T16080] Call Trace:
[  388.548185][T16080]  <TASK>
[  388.548193][T16080]  dump_stack_lvl+0xe8/0x150
[  388.548214][T16080]  print_circular_bug+0x2e1/0x300
[  388.548234][T16080]  check_noncircular+0x12e/0x150
[  388.548253][T16080]  __lock_acquire+0x15a5/0x2cf0
[  388.548269][T16080]  ? __lock_acquire+0x6b5/0x2cf0
[  388.548287][T16080]  ? kernfs_link_sibling+0x4ed/0x5c0
[  388.548303][T16080]  lock_acquire+0x106/0x350
[  388.548314][T16080]  ? kernfs_link_sibling+0x4ed/0x5c0
[  388.548334][T16080]  down_write+0x96/0x200
[  388.548348][T16080]  ? kernfs_link_sibling+0x4ed/0x5c0
[  388.548362][T16080]  ? __pfx_down_write+0x10/0x10
[  388.548373][T16080]  ? kernfs_root+0x1c/0x230
[  388.548388][T16080]  ? kernfs_root+0x1c/0x230
[  388.548402][T16080]  ? kernfs_root+0x1c/0x230
[  388.548416][T16080]  ? kernfs_root+0x1ea/0x230
[  388.548431][T16080]  kernfs_link_sibling+0x4ed/0x5c0
[  388.548450][T16080]  kernfs_add_one+0x1ca/0x5c0
[  388.548467][T16080]  __kernfs_create_file+0x22b/0x2e0
[  388.548479][T16080]  sysfs_add_file_mode_ns+0x238/0x300
[  388.548493][T16080]  sysfs_create_file_ns+0x12b/0x1b0
[  388.548507][T16080]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  388.548520][T16080]  ? __asan_memcpy+0x40/0x70
[  388.548539][T16080]  idletimer_tg_checkentry+0x41b/0xa70
[  388.548557][T16080]  xt_check_target+0x61a/0xca0
[  388.548572][T16080]  ? xt_find_target+0x83/0x260
[  388.548589][T16080]  ? __pfx_xt_check_target+0x10/0x10
[  388.548609][T16080]  ? xt_find_target+0x208/0x260
[  388.548626][T16080]  translate_table+0x184f/0x20b0
[  388.548647][T16080]  ? __pfx_translate_table+0x10/0x10
[  388.548659][T16080]  ? __might_fault+0xaf/0x130
[  388.548675][T16080]  ? __might_fault+0xaf/0x130
[  388.548695][T16080]  ? _copy_from_user+0x94/0xb0
[  388.548715][T16080]  do_ip6t_set_ctl+0x9fe/0xe10
[  388.548727][T16080]  ? rcu_is_watching+0x15/0xb0
[  388.548743][T16080]  ? trace_contention_end+0x3d/0x140
[  388.548760][T16080]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  388.548776][T16080]  ? __pfx___mutex_lock+0x10/0x10
[  388.548788][T16080]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  388.548809][T16080]  ? __pfx_aa_sk_perm+0x10/0x10
[  388.548827][T16080]  nf_setsockopt+0x26f/0x290
[  388.548844][T16080]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  388.548862][T16080]  do_sock_setsockopt+0x17c/0x1b0
[  388.548917][T16080]  __x64_sys_setsockopt+0x13d/0x1b0
[  388.548936][T16080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.548949][T16080]  do_syscall_64+0x15f/0xf80
[  388.548967][T16080]  ? trace_irq_disable+0x3b/0x140
[  388.548988][T16080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.549001][T16080] RIP: 0033:0x7f10e159ce59
[  388.549017][T16080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  388.549029][T16080] RSP: 002b:00007f10e253a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  388.549043][T16080] RAX: ffffffffffffffda RBX: 00007f10e1815fa0 RCX: 00007f10e159ce59
[  388.549053][T16080] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  388.549061][T16080] RBP: 00007f10e1632d6f R08: 0000000000000540 R09: 0000000000000000
[  388.549077][T16080] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000
[  388.549085][T16080] R13: 00007f10e1816038 R14: 00007f10e1815fa0 R15: 00007ffce5bf1a38
[  388.549101][T16080]  </TASK>
[  388.893067][ T1239] lo speed is unknown, defaulting to 1000
[  388.896109][ T1239] syz2: Port: 1 Link DOWN
[  388.900780][ T9138] syz1: Port: 1 Link DOWN
[  388.909596][ T9405] syz0: Port: 1 Link DOWN
[  388.913285][ T5670] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.928547][ T5670] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.972562][ T5670] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.982486][ T5670] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
