last executing test programs:

2.51994019s ago: executing program 1 (id=6633):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000008c0)={{0x2, 0x4e1c, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x4c, {0x2, 0x4e26, @multicast2}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYRES8=0x0], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20)
sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0)
connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0xc9, 0x4)

1.918097258s ago: executing program 2 (id=6640):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000006800090300000000fcffffff0a00000004000000080001000200000004000b0024000c80"], 0x48}}, 0x4040) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000006800090300000000fcffffff0a00000004000000080001000200000004000b0024000c80"], 0x48}}, 0x4040)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0xfffffffe, @loopback}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x2, 0xfffffffe, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x3e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x82}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, 0x0, 0x625, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x75, 0x5b, "76c02d0c23d8cd6c0bee51d6b2cb586f7279c47d5503df3129aa37a8cf66a8378a107a7bd1d65f70ce0149454536048836d89a3ba8183afca5cf2e7a9bb0b3761d382aa6cc9550b8e263e015e3ebddf3b90193c69e051e38374b06c1d346c3831d65c385016d0f617a57325f630e3b2891"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40400d0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, 0x0, 0x625, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x75, 0x5b, "76c02d0c23d8cd6c0bee51d6b2cb586f7279c47d5503df3129aa37a8cf66a8378a107a7bd1d65f70ce0149454536048836d89a3ba8183afca5cf2e7a9bb0b3761d382aa6cc9550b8e263e015e3ebddf3b90193c69e051e38374b06c1d346c3831d65c385016d0f617a57325f630e3b2891"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40400d0)

1.850374189s ago: executing program 2 (id=6641):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5f02ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/4085, 0xff5}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f00000001c0)=""/42, 0x2a}], 0x3}, 0x2000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r6, 0x0, 0x80) (async)
sendmsg$NFT_MSG_GETCHAIN(r6, 0x0, 0x80)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340), 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
sendfile(r2, r5, 0x0, 0x20000000002) (async)
sendfile(r2, r5, 0x0, 0x20000000002)

1.770140503s ago: executing program 2 (id=6642):
socket$kcm(0xa, 0x2, 0x0) (async)
close(0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
getsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000003c0), &(0x7f00000005c0)=0x4)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000001200400000000000ddea17831aa5f16fbbeb26543f689b2fc829be5439f623a525f700778a526fa46c99bf410325fa52789443220418e80f335dbc0ad0fd7f68a0346f8b27ea9fc8aec6d3374e7527ff4dac3bdd8486911cb971cb7a8c96baf406ab810b04ddaca0bf4f2e09d64f01d8ed8c28ff3e487cd114832dd63bcdc12e641b436cb87c333612ec789b416a33f9606d8180eebf1748e0f47d7adb78d9c5d77e7ba36e863cfffeda4efe91f8f8dcc6a58187d7925f8ef01a043b32208b4757880b59d2b5188ccb29", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) (async)
connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0x3, 0x1ff, 0xfffffffffffffff9, 0x3, 0x1, 0x10}) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x25a5, 0x0)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000280)={0x281, 0x2}) (async)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000004fe835cb7c8c799e6bbd08f05213bacf42b5c5556adef4b19b4c4834879c94f0447468e3bdea4bc6e56a1c0dcd084bca694aea1d66d9618fe581efbc83bc6fb9eb4271ef83744f9669e4e8d4456b96bfb987046a193383320094ed09ac2e842e287642978ff85c17c89312d1ae2f17ae1965667b1a32a3de06b487cae77b39eb2ae4eecba89a1ea8b3e10663c4eb6738570866f4b6a225663d9a4952e91c03e79285f7225897ff", @ANYRES16, @ANYBLOB="01002cbd7000090000000300000014000180060005004e2000000800060000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40020)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

1.719215081s ago: executing program 2 (id=6643):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="90000000000101040000000000000000020000000800074000000000200002801400018008000100e000000108000200ac1e0001060003400000000008000740000000004c001080080002400000000408000240000000cd08000140000005ff080003400000000908000140000000090800034000000009080002400000000108000240000000092114a4ec07bddf0d"], 0x90}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x601}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28)
sendmsg$inet(r2, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x10}, 0x44)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f00000005c0), 0x10)
read(r4, &(0x7f00000007c0)=""/4085, 0xff5)
sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc0, &(0x7f0000000680)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94)
close(r6)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0xdf7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r3)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x275a, 0x0)
close(r9)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.650301084s ago: executing program 1 (id=6644):
socket$kcm(0xa, 0x2, 0x0) (async)
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
socket$kcm(0x10, 0x2, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x50)
recvmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000000c0)=""/269, 0x10d}, {&(0x7f0000000d00)=""/4042, 0xfca}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000940)=""/188, 0xbc}, {&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000280)=""/187, 0xbb}, {&(0x7f0000000780)=""/200, 0xc8}], 0x8}, 0x10182)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x4, 0x8000, 0x9, 0x4612, r1, 0x200, '\x00', r5, r1, 0x0, 0x1, 0x1, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r9)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002abd7000fedbdf252400000008000200", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x8091}, 0x80000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r11)
sendmsg$NET_DM_CMD_START(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xfffffffc, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x92a149cbcac2e657)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

1.580571152s ago: executing program 1 (id=6645):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f00000005c0)=""/75, 0x4b}], 0x3, &(0x7f0000000680)=""/186, 0xba}, 0x40000020)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={<r4=>0x0, 0x9}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x8, 0x7, 0x800f, 0xbd9, 0x4, 0x2685b7d0, 0x9, 0x2, r4}, &(0x7f0000000100)=0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000001080)=0x4)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r7, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r4, 0x9, 0x7}, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x66)
close(r0)

1.408825633s ago: executing program 0 (id=6647):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000018c0)=""/205, 0xcd}, {0x0}, {&(0x7f0000001a80)=""/81, 0x51}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002840)}, 0xf5f0d7}], 0x4, 0x40010002, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

1.309283494s ago: executing program 0 (id=6648):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0xaa, 0x4000010)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='*', 0x1}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000001980)='\x00\x00', 0x2}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f0000000140)='m', 0x1}, {&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000180)='s', 0x1}, {&(0x7f0000000380)='9', 0x1}, {&(0x7f0000000400)="b571", 0x2}], 0x9}}], 0x1, 0x4000000)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
close(0x4) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) (async)
accept4$alg(r2, 0x0, 0x0, 0x0) (async)
sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0xaa, 0x4000010) (async)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmmsg$inet(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='*', 0x1}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000001980)='\x00\x00', 0x2}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f0000000140)='m', 0x1}, {&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000180)='s', 0x1}, {&(0x7f0000000380)='9', 0x1}, {&(0x7f0000000400)="b571", 0x2}], 0x9}}], 0x1, 0x4000000) (async)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async)

1.308561551s ago: executing program 0 (id=6649):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000280)=0x92d, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0xffffffff, 0x27dfdffd, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x1, 0x8001, 0xfc59}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$alg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x18}, @op={0x18, 0x114}], 0x30}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001140)={0x6a4, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x3ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x25, 0x5, "911347bb5d41cd5fb17863a38b4695c2f36e6be34e2e36663137a7cdb5a5da354a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "c476ebc0015f2c45ad724fc1b8cba378c364c85e10c8f30eb2cc660a0326671ceabd34bd589bfd08cff657e1a9f0667a087ef2a7bc1768370600dcba6ed7a1451c91ab40df833e71ee21eef42d4e41b5ab23a7c909bddc4d061129b3d00d19e79bf654c4392c7bbd7090ca6ca56cfe03f603943871fbd1394525ce7eb1d6891557ae4ebbd709688e9ad56487849f1f516a29aeb05a03e867c7d1681228d1ab291fcf9fd60a3b029b87eaed10a2e2316b4682f883a2b3d793cb6b127be24670dcb9a495da1507bb7c81fe95bb463158281081c32aeadc4c0b32bc8cd31bb04d0ef6a5e1e4a0bc1e21542f494ae50f0a32bd4a55b52728c8dc8d32312835"}, @ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "8753ae85ece0c97c0caf5a65c1831693bd18ca303a322e309d525dc7cb24ef5fe463e28fcc708914b0164a96e7646ef6359dc6eda2ae6061d2f638dc25e0fd4f984e3e8a3ea468095f04be2ff7ecb332b3493480f73cb49435721318216c24a213eca2a8f52946bbc220f69cae140f436d3eef86fca19d525cec895d51b81a102f5c16ef25bf7a1721"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2595}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'tls'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'tls'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '&\'\'-)^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "cd06aa4f9657ded22408ff11fd91e4a22801a0f802256ae768de02cda72cede490c624a896bddcc13c77380cc1e0171451bc25768505853a9fd729482f78bb20dc24204f03f96ad4700fb134af9426d4e7f053f79acef965183380f550e97d2cd925145a5683e546ab9bf53d05a17f0f63ef5e1e7eda4d053d2c2db31e266c33a7481af9b384265272e97f6d1274c163d4a3548a69f0d663386adbb5c31b630c87e495c73244a28e18b51b3f0b01948cfe43b1ad5c9929c8aac7e1b0cbe419e5946bac21e4d64067097f6e76f5627d6a62f7dfa6b654cb74342978e3631e430f0ad103f15f"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x288, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "2dca76c666b8d454024bece9b4cb5b8159b82b0ec040b818276072194653251e2e65972d2960c2b4a7a638fa826fb4c7023d1e75d87c81899cc460f5aceb086a63cdfddb19460ebb2aadc130b274d08b09"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, 'cgroup.controllers\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#:(</\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa51}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#)\\{\\\\.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'tls'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "6dde0052d9cc886a6619d406c6f2b8b99307d5786b8050823f9b123fea263f0984da744c653515195f4ca591788cf833a26b24a3ac0934285a024394e2fc38e9988e2b48a6122105042524287f864eb86d102acc0601ae3f27f1db8646177cc18aac43048d6deee2d16063c3970853319dceb53d74f5b3c0cdfb90aec467d471614910e01b2b97424b48a6fce6d809f76e7cf7e1e5676017762335f62baaba9e8d40bcb332c039735a00abc093ebf4214d3818ba6db3978848ae2c2f943b4e04f8aab96b5d58d688c816ff073903803c05e916a1dde65bbaf401b57603b6488dc878acfa0925b7a3786ae03855c9acb7e91dae03d2b1b3fb"}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x4000}, 0x4080000)
connect$unix(r1, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x9, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e08000000000000001f0000050200000000000000bd37034767a3a5ec952460e544486390bb8abc40ff00"/53, @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0400000001000000040000000900000000000000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x50)

1.248500186s ago: executing program 0 (id=6650):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
close(0x4) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000844)
close(r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) (async)
connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x4000001, 0x4) (async)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
r6 = socket(0x26, 0x80805, 0x0) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}]}, &(0x7f0000000140)=0x10) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50ea000058a6597e00"/20, @ANYRES32=r10, @ANYRESOCT=r4], 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xe, 0x20, 0x5}, &(0x7f0000000180)=0x18)
setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000000)=0x60, 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)

1.246606526s ago: executing program 0 (id=6651):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000005c0), 0x10)
read(r1, &(0x7f00000007c0)=""/4085, 0xff5)
sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xc0, &(0x7f0000000680)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94)
close(r4)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x275a, 0x0)
close(r8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYRES64=r7, @ANYRES32=r4], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r9}, 0x20)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64ffffffea1c00028006001900ff0300000800090001d90000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
sendmmsg$inet6(r9, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0)
connect$unix(r8, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)

868.980735ms ago: executing program 2 (id=6652):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000ffff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20)
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x3, 0x1ff, 0xfffffffffffffff9, 0x3, 0x1, 0x10})
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x25a5, 0x0)
ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000280)={0x281, 0x2})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000004a00000008001e0003000000"], 0x28}, 0x1, 0xba01, 0x0, 0x800}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000004fe835cb7c8c799e6bbd08f05213bacf42b5c5556adef4b19b4c4834879c94f0447468e3bdea4bc6e56a1c0dcd084bca694aea1d66d9618fe581efbc83bc6fb9eb4271ef83744f9669e4e8d4456b96bfb987046a193383320094ed09ac2e842e287642978ff85c17c89312d1ae2f17ae1965667b1a32a3de06b487cae77b39eb2ae4eecba89a1ea8b3e10663c4eb6738570866f4b6a225663d9a4952e91c03e79285f7225897ff", @ANYRES16, @ANYBLOB="01002cbd7000090000000300000014000180060005004e2000000800060000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40020)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r7], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

719.416125ms ago: executing program 1 (id=6653):
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async)
r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x80000000a, 0xffffffb4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x8}, @timestamp, @window={0x3, 0xe978, 0x46}, @sack_perm, @sack_perm], 0x6)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000000040000000800000001", @ANYRES64=r0, @ANYBLOB="607a13c157a6294086d3d29d26bb3c94c6243dc38ad3a9ba07ee7f1c310479f2f5f92ad506b6b3ab613258efa8b471dd35da102a0750ec6bff0f93ab81f5a273e72ccf5a156e616783150fbab7e45c4e6facb2edb5f6b7578e47d07dab27071b9c5e0575164e27a55696e83b155719849f2f17ce3f7b8fe856a60c3cfb880ae4b753c586c2da757867155442154ec7ecaaed49d1b3d995d4317054d8489ae03ef7dd96a7260899862f88208f82a63e098773c39bab5a8dcf72bee3f35bbe4d27b72ca8024083303e2019005ca476fecb50be2c7c38dfeb6ba0d9af4884771783c3419f129decc2d091a5bf", @ANYRESDEC=r1, @ANYRES16=r0], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000004c0)=@ccm_128={{0x304}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "0100009800"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000004c0)=@ccm_128={{0x304}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "0100009800"}, 0x28)
r7 = socket(0x1e, 0x5, 0x0)
connect$tipc(r7, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}}}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af92347514f0b56a20ff27fffe170d93b67f7003709494e3f1675924d13bdfb907b00bfe9a25698472cdcf93aec6a28319ec359b7631c53d400251d66a034e7d2e511c323ad1596dda2bb77e41b61f01769be0c60e995430bbb54d2faa0e33dd92671d3f84423a4c5dac5fa592ffdc4b8241f966938921f6bca54a67504e44703eea608ebdb3d6cf9df12648c31ff5c512e1be00e0fc749d6e75e35ca5e6023cdd0d7f37b20522701a759feb7968fc863cc41638dfe6236cfa5e7c976befc7d7e9a27d2196584ace1034ee6e88660fac61e4abe664cc90bab43b83a6b20aa19ddf6bf95dad7de453f8091a7c8069a30c5c7e92f7a99844bb74a5d029ed7e9a375b10d3701b486531b12429143f2e13ac4cbe09b1aa3d181c4c68679be19f12c20c4f4af9d27aa5888e4bfd8a9ea8064d0598e3020fc8d8e2abb3dc102e58843039fbacd6598a06af0b9a021906ba34ebefac553012e4cf9a50d7376150d19d13b47507ad7c3f5e93c43861abc59496ee4cbc94edf54deab6a096e8402fd17a7d3599d719dfa5dae28ed138943be946585ea4ba438a183edb091dd2aa956585141c9b7205f39f455049a11cc8cae0b4590561e669ec19182a7cf4d82d3ae9cd83cbfde5ba4b93f662cadf87443505d1f2d664fa895d12625a9bc322647d325d02aa5cd12146c0f396ff2012aea68adf355c553b803aafb0b79ffdc539a92eb3068d2314d928c9f3bf8d6fff350297fe28ff2b3e49a51c3d7e755166c4d8fb80e556d8730742dcc1373", 0x2ad}], 0x1}, 0x20004000) (async)
sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="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", 0x2ad}], 0x1}, 0x20004000)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000000))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000b80)="b9ff0300600d698cff9e14f0080005e5cdcdb6ae7d2b3593c8a4884de7f9c7645533", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000b80)="b9ff0300600d698cff9e14f0080005e5cdcdb6ae7d2b3593c8a4884de7f9c7645533", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8800) (async)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x8800)
r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000001700))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140))
write$6lowpan_control(r10, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b)

629.4286ms ago: executing program 1 (id=6654):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28)
recvmmsg(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1}, 0x80000001}], 0x1, 0x102, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
bind$llc(0xffffffffffffffff, 0x0, 0x0)

370.054983ms ago: executing program 0 (id=6655):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0)
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r5, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f00000004c0)=""/257, 0x101}, {&(0x7f0000003380)=""/4095, 0xfff}, {&(0x7f0000001a00)=""/50, 0x32}], 0x5}}], 0x2, 0x42, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)

309.455311ms ago: executing program 1 (id=6656):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000080000000010000800100000000100000", @ANYRES32=r1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000030000000300000007000000000100"/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20)
r4 = openat$cgroup_ro(r1, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0)
connect$unix(r4, &(0x7f0000000940)=@file={0x37f70e4e84c91a46, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r7 = accept(r2, 0x0, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRESDEC=r6], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f00000000c0)="89076e", &(0x7f0000000000)=@udp=r1}, 0x20)
recvmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c00000800020524c5307c98a671266c9f2a00875078a022e1d069eb95446335cad45e75354823f641ae13139e8625555a366f63b691bf3a6a4c8fc7326dface4e87"], 0x1c}, 0x1, 0x0, 0x0, 0x804c895}, 0xc000)
connect$unix(r7, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

0s ago: executing program 2 (id=6657):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x4635c31c06701ee8}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000)
close(0x3)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
ppoll(&(0x7f0000000600)=[{r0, 0x5010}], 0x1, 0x0, &(0x7f0000000680)={[0x8]}, 0x8)

kernel console output (not intermixed with test programs):

[  406.399471][T18586] bond0: option arp_validate: invalid value (55553)
[  406.578508][T18597] netlink: 'syz.2.3622': attribute type 32 has an invalid length.
[  406.602699][T18597] bond17: option coupled_control: invalid value (12)
[  406.607454][T18597] bond17 (unregistering): Released all slaves
[  406.699139][T18603] tipc: Resetting bearer <eth:syzkaller0>
[  406.825577][T18620] netlink: 'syz.1.3629': attribute type 10 has an invalid length.
[  406.844804][T18620] batman_adv: batadv0: Interface deactivated: dummy0
[  406.851766][T18620] batman_adv: batadv0: Removing interface: dummy0
[  406.861438][T18620] team0: Port device dummy0 added
[  406.892598][T18625] ip6_vti0: entered allmulticast mode
[  406.896781][T18624] ip6_vti0: left allmulticast mode
[  406.927758][T18627] __nla_validate_parse: 3 callbacks suppressed
[  406.927770][T18627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3631'.
[  406.947420][T18627] 8021q: adding VLAN 0 to HW filter on device bond21
[  406.952514][T18627] netlink: 'syz.1.3631': attribute type 8 has an invalid length.
[  406.962046][T18627] bond21 (unregistering): Released all slaves
[  407.979045][T18669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3644'.
[  407.983440][T18669] 8021q: VLANs not supported on ip6_vti0
[  408.030138][T18671] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3645'.
[  408.130543][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'.
[  408.213018][T18685] netlink: 'syz.1.3652': attribute type 1 has an invalid length.
[  408.218481][T18685] netlink: 'syz.1.3652': attribute type 2 has an invalid length.
[  408.225879][T18685] netlink: 'syz.1.3652': attribute type 1 has an invalid length.
[  408.230395][T18685] netlink: 'syz.1.3652': attribute type 2 has an invalid length.
[  408.232982][T18685] netlink: 'syz.1.3652': attribute type 1 has an invalid length.
[  408.236163][T18685] netlink: 'syz.1.3652': attribute type 1 has an invalid length.
[  408.489753][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3660'.
[  408.630453][T18738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3666'.
[  409.407331][T18747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3669'.
[  410.364563][T18756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  410.697150][T18801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3682'.
[  410.871727][T18779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  411.110886][T18823] lo speed is unknown, defaulting to 1000
[  411.222065][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3693'.
[  411.229517][T18836] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3693'.
[  411.532297][T18849] k: entered promiscuous mode
[  411.567778][T18849] block nbd1: NBD_DISCONNECT
[  411.569744][T18849] block nbd1: Send disconnect failed -32
[  411.571572][T18849] block nbd1: shutting down sockets
[  411.830285][T18872] validate_nla: 1 callbacks suppressed
[  411.830304][T18872] netlink: 'syz.2.3705': attribute type 14 has an invalid length.
[  411.942223][T18879] ip6_vti0: entered allmulticast mode
[  411.946332][T18878] ip6_vti0: left allmulticast mode
[  412.050361][T18886] __nla_validate_parse: 1 callbacks suppressed
[  412.050376][T18886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3709'.
[  412.055355][T18886] bridge_slave_1: left allmulticast mode
[  412.057319][T18886] bridge_slave_1: left promiscuous mode
[  412.063482][T18886] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.105298][T18888] No such timeout policy "syz1"
[  412.165740][T18888] netlink: 676 bytes leftover after parsing attributes in process `syz.2.3710'.
[  412.409108][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.412313][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.533206][T18907] netlink: 'syz.0.3716': attribute type 10 has an invalid length.
[  412.627843][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3720'.
[  412.664064][T18922] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3721'.
[  412.671913][T18918] veth43: entered allmulticast mode
[  412.677451][T18918] bond21: (slave veth43): Enslaving as an active interface with an up link
[  412.691558][T18918] bond21 (unregistering): (slave veth43): Releasing backup interface
[  412.697194][T18918] bond21 (unregistering): Released all slaves
[  412.711347][T18921] bond0: option arp_validate: invalid value (55553)
[  412.797817][T18930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3723'.
[  412.804262][T18930] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  412.852432][T18937] netlink: 'syz.1.3724': attribute type 14 has an invalid length.
[  412.865019][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'.
[  412.919233][T18940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3725'.
[  413.587526][T18958] lo speed is unknown, defaulting to 1000
[  413.664979][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3730'.
[  414.308492][T18973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3732'.
[  414.499287][T18975] netem: invalid attributes len -1
[  414.501271][T18975] netem: change failed
[  415.543753][T19002] bond0: option arp_validate: invalid value (55553)
[  416.342303][T19013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3745'.
[  416.357250][T19015] xt_hashlimit: max too large, truncated to 1048576
[  416.367644][T19015] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  416.368840][T19016] nbd: must specify an index to disconnect
[  416.455983][T19021] veth43: entered allmulticast mode
[  416.557473][T19028] xt_socket: unknown flags 0x4
[  416.609014][T19032] gre0: entered promiscuous mode
[  416.611052][T19032] gre0: entered allmulticast mode
[  416.620993][T19032] bpf: Bad value for 'gid'
[  416.810586][ T1290] IPVS: starting estimator thread 0...
[  416.898805][T19045] IPVS: using max 78 ests per chain, 187200 per kthread
[  417.863907][T19061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  418.815600][T19102] netlink: 'syz.0.3770': attribute type 10 has an invalid length.
[  418.973440][T19121] netlink: 'syz.0.3774': attribute type 322 has an invalid length.
[  419.103026][T19128] bond0: option arp_validate: invalid value (55553)
[  420.168866][T19151] x_tables: unsorted underflow at hook 1
[  420.285022][T19156] lo speed is unknown, defaulting to 1000
[  420.792660][T19172] __nla_validate_parse: 6 callbacks suppressed
[  420.792677][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'.
[  420.820040][T19172] netlink: 'syz.0.3788': attribute type 1 has an invalid length.
[  420.867540][T19175] netlink: 'syz.0.3789': attribute type 10 has an invalid length.
[  420.902289][T19177] netlink: 'syz.0.3790': attribute type 11 has an invalid length.
[  420.924639][T19177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3790'.
[  420.939770][T19177] veth43: entered allmulticast mode
[  421.005511][T19180] 8021q: VLANs not supported on ip6gre0
[  421.290755][T19187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3793'.
[  421.872214][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3799'.
[  422.141733][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3805'.
[  422.230936][   T55] block nbd1: Receive control failed (result -1)
[  425.139645][T19225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  425.472355][T19269] bpf: Bad value for 'gid'
[  425.543995][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3819'.
[  425.752646][T19291] netlink: 'syz.0.3824': attribute type 29 has an invalid length.
[  425.779124][T19295] syzkaller0: entered promiscuous mode
[  425.781229][T19295] syzkaller0: entered allmulticast mode
[  426.132191][T19327] sctp: [Deprecated]: syz.1.3835 (pid 19327) Use of int in max_burst socket option.
[  426.132191][T19327] Use struct sctp_assoc_value instead
[  426.134711][T19328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3837'.
[  426.140566][T19328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3837'.
[  426.151116][T19328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3837'.
[  426.871429][T19315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  427.074220][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'.
[  427.084208][T19358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3845'.
[  427.163062][T19368] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3848'.
[  427.167727][T19368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3848'.
[  427.872465][T19351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  427.976670][T19382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.002859][T19387] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3853'.
[  428.005875][T19389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3854'.
[  428.006696][T19387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3853'.
[  428.032276][T19391] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  428.037441][T19391] nbd: must specify an index to disconnect
[  428.061551][T19393] netlink: 'syz.1.3856': attribute type 22 has an invalid length.
[  428.067548][T19399] netlink: 'syz.0.3857': attribute type 10 has an invalid length.
[  428.926825][T19401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  429.599654][T19459] netlink: 'syz.2.3874': attribute type 12 has an invalid length.
[  429.612283][T19459] vlan0: MTU too low for tipc bearer
[  429.617019][T19459] tipc: Disabling bearer <eth:vlan0>
[  429.679213][T19463] bpf: Bad value for 'gid'
[  429.832322][T19477] veth45: entered allmulticast mode
[  429.969509][T19487] netlink: zone id is out of range
[  429.972108][T19487] netlink: get zone limit has 4 unknown bytes
[  429.980322][T19489] bpf: Bad value for 'gid'
[  430.063182][T19498] netlink: 'syz.0.3889': attribute type 9 has an invalid length.
[  430.073760][T19500] batadv_slave_0: Caught tx_queue_len zero misconfig
[  430.375858][T19512] bpf: Bad value for 'gid'
[  430.480659][T19520] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  430.719211][T19537] bond19 (unregistering): Released all slaves
[  430.886024][T19552] nbd: couldn't find device at index 0
[  431.285536][T19588] __nla_validate_parse: 16 callbacks suppressed
[  431.285551][T19588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3923'.
[  431.292421][T19585] lo speed is unknown, defaulting to 1000
[  431.605246][T19606] lo speed is unknown, defaulting to 1000
[  431.803446][T19617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3928'.
[  431.830423][T19617] vlan4: entered promiscuous mode
[  431.832915][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3932'.
[  431.836573][T19619] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3932'.
[  431.844025][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3932'.
[  431.953203][T19622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3933'.
[  432.530381][T19634] netlink: 'syz.1.3937': attribute type 6 has an invalid length.
[  432.724564][T19650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3942'.
[  432.848368][T19659] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3946'.
[  432.852274][T19659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3946'.
[  432.856264][T19659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3946'.
[  432.912507][T19659] veth43: entered allmulticast mode
[  433.099839][T19687] netlink: 'syz.1.3957': attribute type 1 has an invalid length.
[  433.125242][T19687] 8021q: adding VLAN 0 to HW filter on device bond23
[  433.238408][T19700] syzkaller1: entered promiscuous mode
[  433.241043][T19700] syzkaller1: entered allmulticast mode
[  434.356875][T19771] bpf: Bad value for 'gid'
[  434.357480][T19772] netlink: 'syz.0.3986': attribute type 10 has an invalid length.
[  434.446607][T19781] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0
[  434.544108][T19791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.068755][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  435.130450][T19765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  435.273954][T19817] netlink: 'syz.2.4004': attribute type 10 has an invalid length.
[  435.420246][T19824] macvtap1: entered promiscuous mode
[  435.423005][T19824] macvtap1: entered allmulticast mode
[  435.425244][T19824] veth1_vlan: entered allmulticast mode
[  435.991411][T19858] lo speed is unknown, defaulting to 1000
[  436.605824][T19878] x_tables: duplicate underflow at hook 2
[  436.779496][T19891] netlink: 'syz.0.4027': attribute type 21 has an invalid length.
[  436.782413][T19891] __nla_validate_parse: 15 callbacks suppressed
[  436.782427][T19891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4027'.
[  436.800317][T19891] bpf: Bad value for 'gid'
[  436.876347][T19896] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4029'.
[  436.977942][T19907] lo speed is unknown, defaulting to 1000
[  437.403233][T19926] netlink: 'syz.2.4040': attribute type 1 has an invalid length.
[  437.767334][T19934] pim6reg: entered allmulticast mode
[  438.154060][T19946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4048'.
[  438.160428][   T55] block nbd2: Receive control failed (result -1)
[  438.243014][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4049'.
[  438.258560][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4049'.
[  438.262609][T19949] netlink: 'syz.2.4049': attribute type 18 has an invalid length.
[  438.278344][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4049'.
[  439.120790][T19964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  439.159723][T19966] lo speed is unknown, defaulting to 1000
[  439.913831][T19986] bpf: Bad value for 'gid'
[  440.136738][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4063'.
[  440.446789][T20007] nbd: couldn't find device at index 0
[  441.014737][T20019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4073'.
[  441.050243][T20021] netlink: 'syz.1.4074': attribute type 1 has an invalid length.
[  441.074302][T20021] bond24: entered promiscuous mode
[  441.076993][T20021] 8021q: adding VLAN 0 to HW filter on device bond24
[  441.113034][T20021] bond24: (slave bridge5): making interface the new active one
[  441.115976][T20021] bridge5: entered promiscuous mode
[  441.120603][T20021] bond24: (slave bridge5): Enslaving as an active interface with an up link
[  441.187917][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4075'.
[  441.230644][T20025] veth47: entered allmulticast mode
[  441.236038][T20025] bond25: (slave veth47): Enslaving as an active interface with an up link
[  441.246178][T20025] bond25 (unregistering): (slave veth47): Releasing backup interface
[  441.253187][T20025] bond25 (unregistering): Released all slaves
[  441.626565][T20049] bpf: Bad value for 'gid'
[  442.816668][T20092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4095'.
[  443.084483][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4105'.
[  443.201572][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4109'.
[  443.312073][T20146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4115'.
[  443.579696][T20171] bpf: Bad value for 'gid'
[  443.756495][T20184] bond0: option arp_validate: invalid value (55553)
[  444.555386][T20217] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  444.564722][T20217] CPU: 1 UID: 0 PID: 20217 Comm: syz.2.4130 Not tainted syzkaller #0 PREEMPT(full) 
[  444.564737][T20217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  444.564744][T20217] Call Trace:
[  444.564749][T20217]  <TASK>
[  444.564753][T20217]  dump_stack_lvl+0xe8/0x150
[  444.564771][T20217]  sysfs_warn_dup+0x8e/0xa0
[  444.564784][T20217]  sysfs_do_create_link_sd+0xc0/0x110
[  444.564796][T20217]  device_add_class_symlinks+0x1cf/0x240
[  444.564810][T20217]  device_add+0x475/0xbb0
[  444.564823][T20217]  wiphy_register+0x1dc5/0x2dc0
[  444.564870][T20217]  ? __pfx_wiphy_register+0x10/0x10
[  444.564883][T20217]  ? __pfx_netdev_run_todo+0x10/0x10
[  444.564898][T20217]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  444.564912][T20217]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  444.564928][T20217]  ieee80211_register_hw+0x3d82/0x4a70
[  444.564949][T20217]  ? ieee80211_register_hw+0x18e1/0x4a70
[  444.564972][T20217]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  444.564986][T20217]  ? __asan_memset+0x22/0x50
[  444.564998][T20217]  ? __hrtimer_setup+0x1b7/0x260
[  444.565009][T20217]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  444.565023][T20217]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  444.565044][T20217]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  444.565053][T20217]  ? kstrndup+0xbf/0x160
[  444.565066][T20217]  hwsim_new_radio_nl+0xf6a/0x1c00
[  444.565085][T20217]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  444.565105][T20217]  ? rcu_is_watching+0x15/0xb0
[  444.565118][T20217]  ? trace_kmalloc+0x2a/0xf0
[  444.565134][T20217]  ? __nla_parse+0x40/0x60
[  444.565150][T20217]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  444.565161][T20217]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  444.565174][T20217]  genl_family_rcv_msg_doit+0x22a/0x330
[  444.565186][T20217]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  444.565202][T20217]  ? bpf_lsm_capable+0x9/0x20
[  444.565212][T20217]  ? security_capable+0x7e/0x2c0
[  444.565228][T20217]  genl_rcv_msg+0x61c/0x7a0
[  444.565239][T20217]  ? __pfx_genl_rcv_msg+0x10/0x10
[  444.565247][T20217]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  444.565263][T20217]  netlink_rcv_skb+0x232/0x4b0
[  444.565276][T20217]  ? __pfx_genl_rcv_msg+0x10/0x10
[  444.565285][T20217]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  444.565321][T20217]  ? down_read+0x270/0x2e0
[  444.565330][T20217]  ? genl_rcv+0xd/0x40
[  444.565338][T20217]  genl_rcv+0x28/0x40
[  444.565346][T20217]  netlink_unicast+0x75c/0x8e0
[  444.565361][T20217]  netlink_sendmsg+0x813/0xb40
[  444.565376][T20217]  ? __pfx_netlink_sendmsg+0x10/0x10
[  444.565389][T20217]  ? aa_sock_msg_perm+0xf1/0x1b0
[  444.565401][T20217]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  444.565413][T20217]  ____sys_sendmsg+0x972/0x9f0
[  444.565426][T20217]  ? __might_fault+0xaf/0x130
[  444.565442][T20217]  ? __pfx_____sys_sendmsg+0x10/0x10
[  444.565457][T20217]  ? import_iovec+0x73/0xa0
[  444.565471][T20217]  ___sys_sendmsg+0x2a5/0x360
[  444.565482][T20217]  ? __lock_acquire+0x6b5/0x2cf0
[  444.565494][T20217]  ? __pfx____sys_sendmsg+0x10/0x10
[  444.565508][T20217]  ? futex_wake+0x4ac/0x580
[  444.565529][T20217]  ? __fget_files+0x2a/0x420
[  444.565539][T20217]  ? __fget_files+0x3a0/0x420
[  444.565554][T20217]  __x64_sys_sendmsg+0x1bd/0x2a0
[  444.565567][T20217]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  444.565582][T20217]  ? rcu_is_watching+0x15/0xb0
[  444.565596][T20217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.565605][T20217]  do_syscall_64+0x15f/0xf80
[  444.565617][T20217]  ? trace_irq_disable+0x3b/0x140
[  444.565632][T20217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.565641][T20217] RIP: 0033:0x7fb9ee99cdd9
[  444.565652][T20217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.565660][T20217] RSP: 002b:00007fb9ef8dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  444.565671][T20217] RAX: ffffffffffffffda RBX: 00007fb9eec15fa0 RCX: 00007fb9ee99cdd9
[  444.565677][T20217] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  444.565683][T20217] RBP: 00007fb9eea32d69 R08: 0000000000000000 R09: 0000000000000000
[  444.565688][T20217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  444.565693][T20217] R13: 00007fb9eec16038 R14: 00007fb9eec15fa0 R15: 00007ffe71f6e738
[  444.565707][T20217]  </TASK>
[  445.023029][T20247] netlink: 'syz.2.4139': attribute type 10 has an invalid length.
[  445.309983][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  445.615543][T20235] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  446.105698][T20314] lo speed is unknown, defaulting to 1000
[  446.654405][T20322] netlink: 'syz.1.4160': attribute type 10 has an invalid length.
[  446.662921][T20322] 8021q: adding VLAN 0 to HW filter on device team0
[  446.669935][T20322] bond0: (slave team0): Enslaving as an active interface with an up link
[  446.678684][ T5503] bond0: (slave team0): interface is now down
[  446.684901][ T5503] bond0: now running without any active interface!
[  448.737194][T20292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  448.825027][T20346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4169'.
[  448.853675][T20346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4169'.
[  448.860598][T20346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4169'.
[  448.896908][T20346] veth49: entered allmulticast mode
[  448.949619][T20358] netlink: 'syz.0.4171': attribute type 14 has an invalid length.
[  448.952371][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4171'.
[  449.292148][T20384] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4177'.
[  449.508001][T20399] bpf: Bad value for 'gid'
[  449.712766][T20413] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4184'.
[  449.715770][T20413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4184'.
[  450.718038][T20436] bpf: Bad value for 'gid'
[  450.745597][T20437] syz_tun: left allmulticast mode
[  452.067510][T20376] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  452.071320][T20388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4179'.
[  452.239589][T20455] openvswitch: netlink: IPv4 tun info is not correct
[  452.287034][T20459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4198'.
[  452.319856][T20466] bpf: Bad value for 'gid'
[  452.344787][T20468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4201'.
[  452.380258][T20468] veth45: entered allmulticast mode
[  452.386874][T20468] bond19: (slave veth45): Enslaving as an active interface with an up link
[  452.761662][T20501] netlink: 'syz.0.4211': attribute type 21 has an invalid length.
[  452.766123][T20501] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  455.285967][T20461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  455.337885][T20510] =======================================================
[  455.337885][T20510] WARNING: The mand mount option has been deprecated and
[  455.337885][T20510]          and is ignored by this kernel. Remove the mand
[  455.337885][T20510]          option from the mount to silence this warning.
[  455.337885][T20510] =======================================================
[  455.673862][T20529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.714489][T20532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.730139][T20529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.733690][T20529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  455.741989][T20529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  455.746355][T20529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  455.751566][T20529] 8021q: adding VLAN 0 to HW filter on device hsr0
[  455.754996][T20529] veth0_virt_wifi: entered promiscuous mode
[  455.757966][T20529] veth0_vlan: left promiscuous mode
[  455.761227][T20529] veth0_vlan: entered promiscuous mode
[  455.770319][T20529] veth1_macvtap: left promiscuous mode
[  455.772881][T20529] veth0_macvtap: left promiscuous mode
[  455.775306][T20529] veth0_macvtap: entered promiscuous mode
[  455.778049][T20529] veth1_macvtap: entered promiscuous mode
[  455.785495][T20529] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  455.790467][T20529] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  455.793419][T20529] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  455.800612][T20529] 8021q: adding VLAN 0 to HW filter on device bond1
[  455.805811][T20529] 8021q: adding VLAN 0 to HW filter on device bond2
[  455.810456][T20529] 8021q: adding VLAN 0 to HW filter on device bond3
[  455.813944][T20529] 8021q: adding VLAN 0 to HW filter on device bond4
[  455.820769][T20529] 8021q: adding VLAN 0 to HW filter on device bond5
[  455.830198][T20529] 8021q: adding VLAN 0 to HW filter on device bond6
[  455.844996][T20529] 8021q: adding VLAN 0 to HW filter on device bond7
[  455.849817][T20529] 8021q: adding VLAN 0 to HW filter on device bond8
[  455.853775][T20529] 8021q: adding VLAN 0 to HW filter on device bond9
[  455.860052][T20529] 8021q: adding VLAN 0 to HW filter on device bond12
[  455.866884][T20529] 8021q: adding VLAN 0 to HW filter on device bond13
[  455.871480][T20529] 8021q: adding VLAN 0 to HW filter on device bond14
[  455.875920][T20529] 8021q: adding VLAN 0 to HW filter on device bond15
[  455.880298][T20529] 8021q: adding VLAN 0 to HW filter on device bond16
[  455.887061][T20529] 8021q: adding VLAN 0 to HW filter on device bond17
[  455.891368][T20529] 8021q: adding VLAN 0 to HW filter on device bond18
[  455.896422][T20529] 8021q: adding VLAN 0 to HW filter on device bond19
[  455.905449][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.908089][ T9310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.949549][ T5669] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  455.952681][ T5669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.955952][ T5669] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  455.959795][ T5669] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  455.964199][ T5669] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.968470][ T5669] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  455.980969][ T5669] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  455.985671][ T5669] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.989537][ T5669] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  455.992843][ T5669] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  455.996316][ T5669] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.999820][ T5669] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  456.008977][   T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  456.011627][   T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  456.019954][   T13] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  456.023906][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  456.032693][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  456.037964][   T13] bond1: active interface up!
[  456.047448][ T5677] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  456.267483][T20541] __nla_validate_parse: 3 callbacks suppressed
[  456.267497][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4224'.
[  456.309373][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  456.309376][T20541] veth47: entered allmulticast mode
[  456.311272][T20541] bond21: (slave veth47): Enslaving as an active interface with an up link
[  456.332345][T20541] bond21 (unregistering): (slave veth47): Releasing backup interface
[  456.356375][T20541] bond21 (unregistering): Released all slaves
[  456.443507][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  456.551939][T20560] tunl0: Caught tx_queue_len zero misconfig
[  456.555891][T20561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4229'.
[  456.734064][T20581] lo speed is unknown, defaulting to 1000
[  456.759298][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  456.766988][T20590] nbd: couldn't find device at index 0
[  456.782429][T20592] syzkaller1: entered promiscuous mode
[  456.788654][T20592] syzkaller1: entered allmulticast mode
[  456.834444][   T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  456.841172][T20595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4241'.
[  457.275390][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4249'.
[  457.314306][T20622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4245'.
[  457.319209][ T6969] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  457.325673][T20619] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  457.354809][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4250'.
[  457.367971][T20622] hmac(sha224: entered promiscuous mode
[  457.381769][T20624] veth49: entered allmulticast mode
[  457.456088][T20628] bpf: Bad value for 'gid'
[  457.493447][T20630] batadv_slave_1: mtu less than device minimum
[  457.664542][T20639] nbd: must specify an index to disconnect
[  457.799537][ T6966] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  458.133959][T20648] 8021q: VLANs not supported on lo
[  458.233858][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4263'.
[  458.456836][T20675] netlink: 'syz.0.4269': attribute type 14 has an invalid length.
[  458.992908][T20712] tipc: New replicast peer: 255.255.255.255
[  458.995362][T20712] tipc: Enabled bearer <udp:syz2>, priority 10
[  459.036820][T20716] bpf: Bad value for 'gid'
[  459.087509][T20718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4283'.
[  459.113719][T20724] bpf: Bad value for 'gid'
[  459.256907][T20732] bond21 (unregistering): Released all slaves
[  459.287581][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4289'.
[  459.333397][T20733] bond21 (unregistering): Released all slaves
[  459.451841][T20748] bpf: Bad value for 'gid'
[  459.483060][T20751] netlink: 'syz.1.4293': attribute type 10 has an invalid length.
[  459.647804][T20772] bridge_slave_1: invalid flags given to default FDB implementation
[  459.652419][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4301'.
[  459.726125][T20781] netlink: 'syz.1.4303': attribute type 10 has an invalid length.
[  460.400442][T20803] bpf: Bad value for 'gid'
[  460.623114][T20811] bpf: Bad value for 'gid'
[  460.669639][T20816] sctp: [Deprecated]: syz.2.4316 (pid 20816) Use of int in max_burst socket option.
[  460.669639][T20816] Use struct sctp_assoc_value instead
[  460.929233][T20845] netlink: 'syz.0.4328': attribute type 83 has an invalid length.
[  461.327844][T20889] netlink: 'syz.0.4342': attribute type 10 has an invalid length.
[  461.458505][T20900] __nla_validate_parse: 3 callbacks suppressed
[  461.458520][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4343'.
[  461.464224][T20900] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4343'.
[  461.868858][    C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed
[  461.868878][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  464.362000][T20893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  464.457661][T20910] pim6reg1: entered allmulticast mode
[  464.469588][T20911] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4347'.
[  464.469744][T20910] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4347'.
[  464.477755][T20910] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4347'.
[  464.480959][T20911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4347'.
[  464.597814][T20928] netlink: 'syz.2.4353': attribute type 8 has an invalid length.
[  464.621414][ T6966] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  464.670442][T20935] netlink: 'syz.0.4351': attribute type 49 has an invalid length.
[  464.706829][T20935] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  464.749096][T20940] netlink: 'syz.1.4355': attribute type 25 has an invalid length.
[  464.761476][T20940] netlink: 'syz.1.4355': attribute type 23 has an invalid length.
[  464.767573][T20940] IPv6: NLM_F_CREATE should be specified when creating new route
[  465.394711][T21001] openvswitch: netlink: Missing valid actions attribute.
[  465.397102][T21001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.482542][T21008] IPVS: length: 113 != 8
[  465.537459][T21014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4380'.
[  465.836215][T21035] tipc: Resetting bearer <eth:syzkaller0>
[  465.868911][T21037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4389'.
[  465.895777][T21037] veth49: entered allmulticast mode
[  465.901795][T21037] bond25: (slave veth49): Enslaving as an active interface with an up link
[  465.909277][T21037] bond25 (unregistering): (slave veth49): Releasing backup interface
[  465.916957][T21037] bond25 (unregistering): Released all slaves
[  465.994866][T21041] tipc: Resetting bearer <eth:syzkaller0>
[  466.016008][T21041] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  466.066736][T21045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4392'.
[  466.236243][T21057] lo speed is unknown, defaulting to 1000
[  466.431040][T21064] vlan0: entered promiscuous mode
[  467.708420][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  467.801815][T21103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4410'.
[  467.804771][T21103] openvswitch: netlink: Flow actions attr not present in new flow.
[  467.964833][T21113] lo speed is unknown, defaulting to 1000
[  468.202884][T21125] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4416'.
[  468.471455][T21129] bond25: entered promiscuous mode
[  468.474424][T21129] 8021q: adding VLAN 0 to HW filter on device bond25
[  468.477793][T21129] bridge0: port 2(bond25) entered blocking state
[  468.480627][T21129] bridge0: port 2(bond25) entered disabled state
[  468.482918][T21129] bond25: entered allmulticast mode
[  468.486373][T21129] bridge0: port 2(bond25) entered blocking state
[  468.490800][T21129] bridge0: port 2(bond25) entered forwarding state
[  468.849039][ T9310] bridge0: port 2(bond25) entered disabled state
[  469.430640][T21180] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4437'.
[  469.433530][T21180] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4437'.
[  469.436467][T21180] netlink: 'syz.1.4437': attribute type 5 has an invalid length.
[  469.446655][T21180] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4437'.
[  469.459378][T21180] netlink: 'syz.1.4437': attribute type 1 has an invalid length.
[  469.463959][T21180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4437'.
[  469.837144][T21210] lo speed is unknown, defaulting to 1000
[  470.269181][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  470.358056][T21220] netlink: 'syz.2.4450': attribute type 1 has an invalid length.
[  470.372408][T21220] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.4450'.
[  470.382662][T21222] ip6gre0: entered allmulticast mode
[  470.544870][T21237] netlink: 'syz.2.4457': attribute type 1 has an invalid length.
[  470.759369][T21259] bond0: option arp_validate: invalid value (55553)
[  470.828409][T21269] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.857072][T21269] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  470.974348][T21279] netlink: 'syz.2.4466': attribute type 8 has an invalid length.
[  470.977321][T21279] sch_fq: defrate 0 ignored.
[  471.120459][T21290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4470'.
[  471.343981][T21303] netlink: 'syz.2.4472': attribute type 10 has an invalid length.
[  471.350869][T21303] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4472'.
[  471.354234][T21303] veth1_virt_wifi: entered promiscuous mode
[  471.357032][T21303] bridge0: port 2(veth1_virt_wifi) entered blocking state
[  471.359771][T21303] bridge0: port 2(veth1_virt_wifi) entered disabled state
[  471.362433][T21303] veth1_virt_wifi: entered allmulticast mode
[  471.365598][T21303] bridge0: port 2(veth1_virt_wifi) entered blocking state
[  471.368097][T21303] bridge0: port 2(veth1_virt_wifi) entered forwarding state
[  471.472373][T21310] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4474'.
[  471.485251][T21310] tipc: Failed to remove unknown binding: 66,1,1/2205176651:3400904667/3400904669
[  471.495317][T21310] tipc: Failed to remove unknown binding: 66,1,1/2205176651:3400904667/3400904669
[  471.503351][T21310] tipc: Failed to remove unknown binding: 66,1,1/2205176651:3400904667/3400904669
[  471.797505][T21330] netlink: 'syz.2.4481': attribute type 11 has an invalid length.
[  472.580110][T21391] netlink: 'syz.2.4498': attribute type 1 has an invalid length.
[  472.690720][T21395] netlink: 'syz.0.4500': attribute type 39 has an invalid length.
[  472.757738][T21397] bpf: Bad value for 'gid'
[  472.876848][T21405] bridge8: entered promiscuous mode
[  473.088686][T21415] lo speed is unknown, defaulting to 1000
[  473.265863][T21420] bpf: Bad value for 'gid'
[  473.780906][T21446] __nla_validate_parse: 4 callbacks suppressed
[  473.780923][T21446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4518'.
[  474.163739][T21464] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001
[  474.166343][T21469] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001
[  474.249965][T21476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4529'.
[  474.670367][T21502] netlink: 'syz.2.4538': attribute type 1 has an invalid length.
[  474.673508][T21502] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4538'.
[  474.677457][T21502] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4538'.
[  474.681414][T21502] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4538'.
[  475.184570][T21517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4543'.
[  475.415147][T21525] block nbd1: NBD_DISCONNECT
[  475.416856][T21525] block nbd1: Send disconnect failed -32
[  475.419286][T21525] block nbd1: shutting down sockets
[  476.537336][T21564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.654326][T21569] nbd: couldn't find device at index 0
[  476.744959][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4561'.
[  476.816755][T21571] sctp: [Deprecated]: syz.1.4561 (pid 21571) Use of int in maxseg socket option.
[  476.816755][T21571] Use struct sctp_assoc_value instead
[  477.314785][T21593] bpf: Bad value for 'gid'
[  477.527071][T21616] bpf: Bad value for 'gid'
[  477.536860][T21617] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  477.843718][T21655] bpf: Bad value for 'gid'
[  477.984896][T21662] netlink: 'syz.1.4585': attribute type 1 has an invalid length.
[  477.988556][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4585'.
[  478.145156][T21669] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4589'.
[  478.456536][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4590'.
[  478.464271][T21673] netlink: 'syz.1.4590': attribute type 16 has an invalid length.
[  478.468025][T21673] netlink: 'syz.1.4590': attribute type 3 has an invalid length.
[  478.714563][T21659] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  478.750056][T21688] block nbd2: NBD_DISCONNECT
[  478.752191][T21688] block nbd2: shutting down sockets
[  479.043179][T21714] bpf: Bad value for 'gid'
[  479.901877][T21716] Bluetooth: hci1: Opcode 0x0c20 failed: -4
[  480.305130][T21754] wg2: Caught tx_queue_len zero misconfig
[  480.348429][T21756] tipc: Resetting bearer <eth:syzkaller0>
[  480.354406][T21756] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  480.602316][T21764] __nla_validate_parse: 3 callbacks suppressed
[  480.602336][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4619'.
[  480.742882][T21772] bond0: option arp_validate: invalid value (55553)
[  480.970294][T21785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4626'.
[  481.150205][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  481.503304][T21790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4627'.
[  481.779914][T21805] bond0: Error: Cannot enslave bond to itself.
[  481.856900][T21807] bond0: option arp_validate: invalid value (55553)
[  482.109122][T21828] netlink: 64106 bytes leftover after parsing attributes in process `syz.2.4641'.
[  482.217554][T21785] Set syz1 is full, maxelem 65536 reached
[  482.225874][T21840] bond0: option arp_validate: invalid value (55553)
[  482.232134][T21841] netlink: 'syz.2.4644': attribute type 1 has an invalid length.
[  483.035201][T21861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4651'.
[  483.039528][T21861] netlink: 'syz.0.4651': attribute type 3 has an invalid length.
[  483.079490][T21865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4653'.
[  483.353951][T21874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4656'.
[  483.356937][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4656'.
[  483.381096][T21874] veth51: entered allmulticast mode
[  483.387851][T21874] bond21: (slave veth51): Enslaving as an active interface with an up link
[  483.632912][T21895] 5n: entered promiscuous mode
[  483.633888][T21899] netlink: 'syz.1.4663': attribute type 11 has an invalid length.
[  483.641893][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4663'.
[  483.645939][T21899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4663'.
[  483.708721][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  483.745738][T21906] veth53: entered allmulticast mode
[  483.752041][T21906] bond22 (unregistering): Released all slaves
[  484.860031][T21964] 8021q: VLANs not supported on ip6gre0
[  484.887727][T21966] netlink: 'syz.0.4684': attribute type 10 has an invalid length.
[  485.006130][T21971] bond0: option arp_validate: invalid value (55553)
[  485.162124][T21979] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  485.194761][T21983] netlink: 'syz.2.4691': attribute type 10 has an invalid length.
[  485.985721][T22015] lo speed is unknown, defaulting to 1000
[  486.084325][T22016] lo speed is unknown, defaulting to 1000
[  486.344366][T22024] lo speed is unknown, defaulting to 1000
[  486.561498][T22029] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  486.568419][T22029] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  486.574071][T22029] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  486.597661][T22029] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  486.909085][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  487.099125][T22052] netlink: 'syz.2.4709': attribute type 10 has an invalid length.
[  487.163714][T22059] ieee802154 phy1 wpan1: encryption failed: -22
[  487.192535][T22061] lo speed is unknown, defaulting to 1000
[  487.197215][T22065] tls_set_device_offload_rx: netdev not found
[  487.303761][T22078] __nla_validate_parse: 21 callbacks suppressed
[  487.303784][T22078] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4712'.
[  487.392032][T22085] netlink: 'syz.1.4719': attribute type 3 has an invalid length.
[  487.505483][T22091] netlink: 'syz.2.4721': attribute type 10 has an invalid length.
[  487.613573][T22096] netlink: 364 bytes leftover after parsing attributes in process `syz.0.4722'.
[  488.290897][T22124] netlink: 'syz.1.4729': attribute type 10 has an invalid length.
[  488.515864][T22136] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4734'.
[  488.805400][T22144] bond0: option arp_validate: invalid value (55553)
[  489.480618][   T13] tipc: Subscription rejected, illegal request
[  489.605576][T22185] netlink: 'syz.1.4751': attribute type 10 has an invalid length.
[  489.647595][T22188] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  489.843111][ T5622] Bluetooth: hci2: link tx timeout
[  489.846754][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  489.853761][ T5622] Bluetooth: hci2: link tx timeout
[  489.855532][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  489.877147][ T5622] Bluetooth: hci2: link tx timeout
[  489.882189][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  489.903940][ T5622] Bluetooth: hci2: link tx timeout
[  489.906517][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  490.010081][ T5622] Bluetooth: hci2: link tx timeout
[  490.011991][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  490.320685][ T5622] Bluetooth: hci2: link tx timeout
[  490.323457][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  490.395792][T22248] bond0: option arp_validate: invalid value (55553)
[  490.595757][T22253] bpf: Bad value for 'gid'
[  491.070702][ T5622] Bluetooth: hci2: link tx timeout
[  491.072628][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  491.075328][ T5622] Bluetooth: hci2: link tx timeout
[  491.077215][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  491.155269][T22266] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4777'.
[  491.163157][T22266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4777'.
[  491.190978][T22266] veth55: entered allmulticast mode
[  491.195060][T22266] bond22: (slave veth55): Enslaving as an active interface with an up link
[  491.202963][T22266] bond22 (unregistering): (slave veth55): Releasing backup interface
[  491.208815][T22266] bond22 (unregistering): Released all slaves
[  491.391763][ T5622] Bluetooth: hci2: link tx timeout
[  491.393926][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  491.407788][T22287] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4781'.
[  491.421083][T22287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4781'.
[  491.444060][T22287] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4781'.
[  491.449567][T22287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4781'.
[  491.477814][T22287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4781'.
[  491.558692][ T5622] Bluetooth: hci2: link tx timeout
[  491.560407][ T5622] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  491.608297][T22296] 8021q: adding VLAN 0 to HW filter on device bond26
[  491.744571][T22309] bpf: Bad value for 'gid'
[  491.755291][T22303] veth51: entered allmulticast mode
[  491.882801][ T5622] Bluetooth: hci2: command 0x0401 tx timeout
[  491.949929][T22318] netlink: 'syz.1.4791': attribute type 10 has an invalid length.
[  492.560089][T22337] __nla_validate_parse: 4 callbacks suppressed
[  492.560107][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4798'.
[  492.596488][T22337] veth57: entered allmulticast mode
[  492.604971][T22337] bond23: (slave veth57): Enslaving as an active interface with an up link
[  492.613074][T22337] bond23 (unregistering): (slave veth57): Releasing backup interface
[  492.623860][T22337] bond23 (unregistering): Released all slaves
[  493.094511][T22361] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4805'.
[  495.100687][T22411] syzkaller1: entered promiscuous mode
[  495.103472][T22411] syzkaller1: entered allmulticast mode
[  495.368589][T22432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4825'.
[  495.369257][T22430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4825'.
[  495.481796][T22439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4828'.
[  495.543964][ T7843] block nbd1: Receive control failed (result -1)
[  495.660993][T22444] bpf: Bad value for 'gid'
[  495.686046][T22446] netlink: 'syz.0.4830': attribute type 10 has an invalid length.
[  495.755042][T22449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4831'.
[  495.827291][T22451] tls_set_device_offload_rx: netdev not found
[  496.517069][T22446] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  496.636138][T22464] bpf: Bad value for 'gid'
[  496.701858][T22471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4838'.
[  496.714844][T22471] openvswitch: netlink: Flow actions attr not present in new flow.
[  496.956962][T22508] lo speed is unknown, defaulting to 1000
[  497.155325][T22523] IPv6: NLM_F_CREATE should be specified when creating new route
[  497.171196][T22521] vlan0: entered promiscuous mode
[  497.560210][T22540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4856'.
[  497.563733][T22540] netlink: 'syz.0.4856': attribute type 1 has an invalid length.
[  497.569732][T22535] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  497.573089][T22535] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  497.582012][T22535] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  497.584095][T22535] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  497.596342][T22535] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  497.598425][T22535] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  498.033705][T22558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4858'.
[  498.175792][T22558] veth59: entered allmulticast mode
[  498.247306][T22569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4860'.
[  498.343078][T22569] veth51: entered allmulticast mode
[  498.357965][T22569] bond27: (slave veth51): Enslaving as an active interface with an up link
[  498.480705][T22590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.632831][T22608] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  498.730546][T22616] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4870'.
[  499.261158][T22643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4874'.
[  499.267811][T22643] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  499.335025][T22652] lo speed is unknown, defaulting to 1000
[  499.555971][T22666] bpf: Bad value for 'gid'
[  499.826091][T22680] lo speed is unknown, defaulting to 1000
[  499.986416][T22691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4883'.
[  499.990594][T22692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4883'.
[  499.996552][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4883'.
[  500.326964][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4891'.
[  500.330459][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4891'.
[  500.333757][T22725] netlink: 'syz.1.4891': attribute type 14 has an invalid length.
[  500.336912][T22725] netlink: 'syz.1.4891': attribute type 13 has an invalid length.
[  500.390595][T22727] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  500.395640][T22729] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4893'.
[  500.679655][   T55] block nbd2: Receive control failed (result -1)
[  500.961132][T22770] bond29: (slave bond_slave_1): Device is not our slave
[  500.963377][T22770] bond29: option active_slave: invalid value (bond_slave_1)
[  500.966979][T22770] bond29 (unregistering): Released all slaves
[  501.163700][T22795] netlink: 'syz.1.4915': attribute type 1 has an invalid length.
[  501.202307][T22796] bond29: (slave geneve4): making interface the new active one
[  501.206635][T22796] bond29: (slave geneve4): Enslaving as an active interface with an up link
[  501.212538][ T5503] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  501.216184][ T5503] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  501.220473][ T5503] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  501.225202][ T5503] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  501.332153][T22807] xt_cgroup: invalid path, errno=-2
[  501.365800][T22809] xt_limit: Overflow, try lower: 268435456/134217728
[  501.393361][T22814] smc: net device wlan0 applied user defined pnetid SYZ0
[  501.443423][T22817] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  501.484791][T22823] netlink: 'syz.2.4926': attribute type 1 has an invalid length.
[  501.530194][T22823] 8021q: adding VLAN 0 to HW filter on device bond21
[  501.547908][T22822] nbd: couldn't find device at index 0
[  501.643496][T22842] netlink: 'syz.0.4929': attribute type 13 has an invalid length.
[  501.647105][T22842] netlink: 'syz.0.4929': attribute type 17 has an invalid length.
[  501.727759][T22849] netlink: 'syz.1.4931': attribute type 1 has an invalid length.
[  501.789890][T22842] gre0: left promiscuous mode
[  501.791725][T22842] gre0: left allmulticast mode
[  501.818344][T22842] ip6gre0: left allmulticast mode
[  501.830689][T22842] bond0: left promiscuous mode
[  501.836825][T22842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  501.845989][T22842] wireguard: wg0: Could not create IPv4 socket
[  501.849187][T22842] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  501.861149][T22845] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  501.865958][T22845] batman_adv: batadv0: Adding interface: ip6gretap1
[  501.869448][T22845] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  501.881293][T22845] batman_adv: batadv0: Interface activated: ip6gretap1
[  501.887220][ T5503] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  501.906074][ T5503] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  501.912911][ T5503] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  501.919509][ T5503] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  502.040497][T22865] x_tables: duplicate underflow at hook 1
[  502.197726][T22875] Dead loop on virtual device ip6_vti0 (net 27), fix it urgently!
[  502.494625][T22878] bpf: Bad value for 'gid'
[  502.941929][T22900] bpf: Bad value for 'gid'
[  503.082719][T22914] __nla_validate_parse: 10 callbacks suppressed
[  503.082735][T22914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4951'.
[  503.121979][T22914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4951'.
[  503.142745][T22914] veth53: entered allmulticast mode
[  503.151041][T22914] bond30: (slave veth53): Enslaving as an active interface with an up link
[  503.166268][T22914] bond30 (unregistering): (slave veth53): Releasing backup interface
[  503.175165][T22914] bond30 (unregistering): Released all slaves
[  503.310968][T22937] netlink: 'syz.0.4955': attribute type 10 has an invalid length.
[  503.399918][T22939] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4957'.
[  503.642787][T22963] netlink: 'syz.2.4965': attribute type 10 has an invalid length.
[  503.810938][T22979] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4969'.
[  503.883391][T22982] xt_TPROXY: Can be used only with -p tcp or -p udp
[  503.901391][T22982] netlink: 'syz.0.4971': attribute type 4 has an invalid length.
[  503.904759][T22982] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4971'.
[  504.387944][T22990] bond0: option arp_validate: invalid value (55553)
[  504.675848][T23009] netlink: 'syz.2.4980': attribute type 1 has an invalid length.
[  504.753162][T23018] netlink: 'syz.2.4982': attribute type 11 has an invalid length.
[  504.759126][T23018] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.4982'.
[  504.884886][T23025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4984'.
[  505.033732][T23046] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  505.163845][T23052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4992'.
[  505.672536][T23060] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  505.672536][T23060] Please contact the netfilter-devel mailing list or update your nftables rules.
[  505.835571][T23068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4997'.
[  505.835570][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4997'.
[  505.859887][T23068] bond25 (unregistering): Released all slaves
[  506.750615][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  506.847829][T23091] netlink: 'syz.0.5004': attribute type 10 has an invalid length.
[  506.934859][T23095] tap0: tun_chr_ioctl cmd 1074025680
[  507.404807][T23105] bpf: Bad value for 'gid'
[  507.522274][T23114] lo speed is unknown, defaulting to 1000
[  507.550512][T23111] bond0: option arp_validate: invalid value (55553)
[  508.551309][T23131] xt_l2tp: v2 sid > 0xffff: 8388608
[  508.581136][T23133] bpf: Bad value for 'gid'
[  508.954563][T23159] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  509.016799][T23161] bpf: Bad value for 'gid'
[  509.095871][T23168] __nla_validate_parse: 3 callbacks suppressed
[  509.095891][T23168] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5029'.
[  509.105524][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'.
[  509.112153][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5029'.
[  509.129425][T23168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5029'.
[  509.170830][T23168] veth55: entered allmulticast mode
[  509.183758][T23168] bond31: (slave veth55): Enslaving as an active interface with an up link
[  509.195645][T23168] bond31 (unregistering): (slave veth55): Releasing backup interface
[  509.204696][T23168] bond31 (unregistering): Released all slaves
[  510.227038][T23194] bond0: option arp_validate: invalid value (55553)
[  510.503789][T23216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5043'.
[  510.903316][T23243] x_tables: unsorted underflow at hook 4
[  511.000966][T23247] bpf: Bad value for 'gid'
[  511.170390][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5054'.
[  511.173970][T23258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5054'.
[  511.182075][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5054'.
[  511.186332][T23258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5054'.
[  511.573296][T23268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5057'.
[  511.672298][T23285] netlink: 'syz.0.5061': attribute type 10 has an invalid length.
[  511.882863][T23305] netlink: 'syz.1.5066': attribute type 30 has an invalid length.
[  512.061757][T23318] netlink: 'syz.0.5070': attribute type 10 has an invalid length.
[  512.131299][T23324] netlink: 'syz.0.5072': attribute type 11 has an invalid length.
[  512.134597][T23324] netlink: 'syz.0.5072': attribute type 4 has an invalid length.
[  512.291055][T23339] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  512.291650][T23337] tap0: tun_chr_ioctl cmd 1074025680
[  512.320680][T23341] netlink: 'syz.0.5078': attribute type 10 has an invalid length.
[  512.393162][T23343] veth59: entered allmulticast mode
[  512.400461][T23343] bond25: (slave veth59): Enslaving as an active interface with an up link
[  512.408515][T23343] bond25 (unregistering): (slave veth59): Releasing backup interface
[  512.420064][T23343] bond25 (unregistering): Released all slaves
[  512.532925][T23361] netlink: 'syz.0.5085': attribute type 10 has an invalid length.
[  512.746045][T23374] bridge9: entered promiscuous mode
[  512.747801][T23374] bridge9: entered allmulticast mode
[  512.953751][T23392] netlink: 'syz.2.5097': attribute type 7 has an invalid length.
[  512.957965][T23392] netlink: 'syz.2.5097': attribute type 8 has an invalid length.
[  513.189155][T23419] xt_NFQUEUE: number of total queues is 0
[  513.246398][T23423] veth43: entered allmulticast mode
[  513.255733][T23423] bond23: (slave veth43): Enslaving as an active interface with an up link
[  513.269565][T23423] bond23 (unregistering): (slave veth43): Releasing backup interface
[  513.281776][T23423] bond23 (unregistering): Released all slaves
[  513.309932][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.350676][T23440] netlink: 'syz.0.5111': attribute type 10 has an invalid length.
[  513.375100][T23443] nbd: couldn't find device at index 0
[  513.788407][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  513.974723][T23481] netlink: 'syz.0.5123': attribute type 19 has an invalid length.
[  513.977775][T23481] netlink: 'syz.0.5123': attribute type 19 has an invalid length.
[  514.082987][T23486] netem: change failed
[  514.269906][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.348661][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.542311][T23508] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  515.033945][T23534] lo speed is unknown, defaulting to 1000
[  515.201485][T23542] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  515.388745][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.975013][T23579] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  516.036497][T23581] xt_ecn: cannot match TCP bits for non-tcp packets
[  516.055591][T23581] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  516.281332][T23592] __nla_validate_parse: 16 callbacks suppressed
[  516.281335][T23591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5162'.
[  516.281354][T23592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5162'.
[  516.340434][T23590] veth57: entered allmulticast mode
[  516.347031][T23590] bond31: (slave veth57): Enslaving as an active interface with an up link
[  516.438931][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.757451][T23609] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  516.821500][T23616] IPVS: length: 15 != 8
[  516.857250][T23621] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  517.308530][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.470495][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.955729][T23710] validate_nla: 1 callbacks suppressed
[  517.955747][T23710] netlink: 'syz.0.5199': attribute type 10 has an invalid length.
[  517.962463][T23707] bond0: option arp_validate: invalid value (55553)
[  518.192875][T23738] netlink: 'syz.0.5207': attribute type 10 has an invalid length.
[  518.264636][T23746] lo speed is unknown, defaulting to 1000
[  518.320483][T23749] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5212'.
[  518.513702][T23759] netlink: 'syz.0.5215': attribute type 10 has an invalid length.
[  518.519837][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.610033][T23765] netlink: 'syz.0.5216': attribute type 1 has an invalid length.
[  518.879915][T23783] netlink: 'syz.0.5222': attribute type 10 has an invalid length.
[  518.908273][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  519.012971][T23787] lo speed is unknown, defaulting to 1000
[  519.214725][T23792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5225'.
[  519.561311][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.668840][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5230'.
[  519.672339][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5230'.
[  519.812565][T23813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5232'.
[  519.865128][T23818] lo speed is unknown, defaulting to 1000
[  520.226992][T23823] xt_hashlimit: size too large, truncated to 1048576
[  520.348403][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.352271][T23827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5235'.
[  520.400268][T23827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5235'.
[  520.423207][T23827] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5235'.
[  520.435274][T23827] bond24 (unregistering): Released all slaves
[  520.532949][T23836] bpf: Bad value for 'gid'
[  520.589249][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.613677][T23849] netlink: 'syz.2.5242': attribute type 10 has an invalid length.
[  520.693134][T23857] bpf: Bad value for 'gid'
[  520.786932][T23864] veth1_to_hsr: entered allmulticast mode
[  521.600510][T23868] netlink: 'syz.1.5250': attribute type 3 has an invalid length.
[  521.628748][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.635627][T23874] netlink: 'syz.0.5251': attribute type 10 has an invalid length.
[  521.826681][T23896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5258'.
[  521.839460][T23896] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.5258'.
[  521.854667][T23898] batman_adv: batadv0: Adding interface: macvlan0
[  521.856866][T23898] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1552 would solve the problem.
[  521.867789][T23898] batman_adv: batadv0: Interface activated: macvlan0
[  522.178582][T23916] bond0: option arp_validate: invalid value (55553)
[  522.432924][T23922] netlink: 'syz.2.5266': attribute type 1 has an invalid length.
[  522.435603][T23922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5266'.
[  522.468080][T23927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5267'.
[  522.668368][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.392360][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.460336][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5283'.
[  523.708420][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.044882][T23992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5288'.
[  524.063554][T23992] veth59: entered allmulticast mode
[  524.067636][T23994] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5289'.
[  524.384695][T24004] netlink: 'syz.1.5291': attribute type 1 has an invalid length.
[  524.397318][T24004] bond32: entered promiscuous mode
[  524.400537][T24004] 8021q: adding VLAN 0 to HW filter on device bond32
[  524.416224][T24004] 8021q: adding VLAN 0 to HW filter on device bond32
[  524.418678][T24004] bond32: (slave vcan0): The slave device specified does not support setting the MAC address
[  524.421901][T24004] bond32: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  524.427811][T24004] bond32: (slave vcan0): making interface the new active one
[  524.432110][T24004] vcan0: entered promiscuous mode
[  524.435655][T24004] bond32: (slave vcan0): Enslaving as an active interface with an up link
[  524.443046][T24004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5291'.
[  524.463633][T24004] lo speed is unknown, defaulting to 1000
[  524.646978][T24011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5293'.
[  524.659288][T24011] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  524.749646][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.934035][T24024] netlink: 'syz.0.5297': attribute type 1 has an invalid length.
[  524.959873][T24024] 8021q: adding VLAN 0 to HW filter on device bond25
[  525.007085][T24024] macvlan2: entered promiscuous mode
[  525.009164][T24024] macvlan2: entered allmulticast mode
[  525.107571][T24034] lo speed is unknown, defaulting to 1000
[  525.146654][T24035] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5299'.
[  525.502532][T24061] sctp: [Deprecated]: syz.2.5307 (pid 24061) Use of struct sctp_assoc_value in delayed_ack socket option.
[  525.502532][T24061] Use struct sctp_sack_info instead
[  525.790667][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.428626][ T5670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.829349][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.878603][T24104] netlink: 'syz.0.5321': attribute type 2 has an invalid length.
[  526.906898][T24110] netlink: 'syz.1.5322': attribute type 10 has an invalid length.
[  527.019065][T24121] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  527.156669][T24131] netlink: 'syz.1.5331': attribute type 10 has an invalid length.
[  527.427253][T24149] lo speed is unknown, defaulting to 1000
[  527.868854][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.888062][T24158] lo speed is unknown, defaulting to 1000
[  528.693528][T24192] __nla_validate_parse: 2 callbacks suppressed
[  528.693541][T24192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5345'.
[  528.701518][T24193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5345'.
[  528.756744][T24193] 8021q: adding VLAN 0 to HW filter on device bond24
[  528.908870][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.478866][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.533114][T24213] tls_set_device_offload: netdev not found
[  529.832694][T24235] netlink: 'syz.1.5355': attribute type 3 has an invalid length.
[  529.948878][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.107326][T24258] netlink: 'syz.1.5362': attribute type 10 has an invalid length.
[  530.989441][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.127426][T24287] netlink: 'syz.1.5373': attribute type 11 has an invalid length.
[  531.135046][T24287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5373'.
[  531.229924][T24297] bond0: option arp_validate: invalid value (55553)
[  531.273729][T24303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5377'.
[  531.448768][T24325] netlink: 'syz.1.5384': attribute type 10 has an invalid length.
[  531.764192][T24332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.768758][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.799318][T24334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5387'.
[  531.824740][T24334] bond25 (unregistering): Released all slaves
[  532.028962][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.105421][T24353] bpf: Bad value for 'gid'
[  532.250098][T24373] netlink: 'syz.2.5397': attribute type 10 has an invalid length.
[  532.275035][T24375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5398'.
[  532.278719][T24375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5398'.
[  532.284592][T24376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5398'.
[  532.288898][T24376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5398'.
[  532.292410][T24375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5398'.
[  532.508562][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.706447][T24392] ip6tnl0: Caught tx_queue_len zero misconfig
[  533.068866][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.080891][T24411] netlink: 'syz.0.5407': attribute type 4 has an invalid length.
[  533.141606][T24415] bpf: Bad value for 'gid'
[  533.447253][T24444] bpf: Bad value for 'gid'
[  533.547264][T24450] xt_hashlimit: overflow, rate too high: 0
[  533.744102][T24453] bond27: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  533.880239][T24453] bond27 (unregistering): Released all slaves
[  533.917593][T24473] bpf: Bad value for 'gid'
[  534.108759][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.404322][T24480] lo speed is unknown, defaulting to 1000
[  534.663416][T24496] __nla_validate_parse: 9 callbacks suppressed
[  534.663430][T24496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5432'.
[  534.720002][T24498] netlink: 'syz.0.5431': attribute type 29 has an invalid length.
[  534.724052][T24498] netlink: 'syz.0.5431': attribute type 29 has an invalid length.
[  534.729396][T24498] netlink: 'syz.0.5431': attribute type 32 has an invalid length.
[  534.732805][T24498] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5431'.
[  534.743134][T24498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5431'.
[  534.766007][T24496] veth59: entered allmulticast mode
[  534.777471][T24496] bond33: (slave veth59): Enslaving as an active interface with an up link
[  534.789626][T24496] bond33 (unregistering): (slave veth59): Releasing backup interface
[  534.802861][T24496] bond33 (unregistering): Released all slaves
[  534.966978][T24513] netlink: 'syz.2.5437': attribute type 5 has an invalid length.
[  534.978797][T24513] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5437'.
[  534.985343][T24513] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5437'.
[  535.027801][T24520] sctp: [Deprecated]: syz.1.5441 (pid 24520) Use of struct sctp_assoc_value in delayed_ack socket option.
[  535.027801][T24520] Use struct sctp_sack_info instead
[  535.124401][T24530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5443'.
[  535.148742][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.170111][T24538] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  535.516438][T24557] tls_set_device_offload_rx: netdev not found
[  535.549222][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.947128][T24569] netlink: 'syz.1.5453': attribute type 10 has an invalid length.
[  536.164719][T24589] bpf: Bad value for 'gid'
[  536.189907][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.456831][T24606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5467'.
[  536.883505][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5475'.
[  536.906943][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5475'.
[  536.955467][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5477'.
[  536.959750][T24643] netlink: 'syz.2.5477': attribute type 7 has an invalid length.
[  536.977148][T24643] netlink: 'syz.2.5477': attribute type 7 has an invalid length.
[  536.985866][T24641] syzkaller1: entered promiscuous mode
[  536.989062][T24641] syzkaller1: entered allmulticast mode
[  537.228576][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.832923][T24675] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  538.269151][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.565339][T24702] bond33 (unregistering): Released all slaves
[  538.588580][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.802885][T24723] syzkaller1: entered promiscuous mode
[  538.804574][T24723] syzkaller1: entered allmulticast mode
[  539.308438][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.110033][T24760] __nla_validate_parse: 7 callbacks suppressed
[  540.110047][T24760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5514'.
[  540.349177][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.741159][T24780] netlink: 'syz.1.5519': attribute type 10 has an invalid length.
[  540.833896][T24785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5520'.
[  540.893297][T24786] bond0: option arp_validate: invalid value (55553)
[  540.944677][T24792] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  540.950225][T24794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5525'.
[  540.991532][T24804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5526'.
[  541.113152][T24812] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  541.149659][T24804] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5526'.
[  541.330910][T24841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5537'.
[  541.339952][T24843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5538'.
[  541.361233][T24843] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5538'.
[  541.388599][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.628501][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.702989][T24874] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5544'.
[  542.291671][T24889] netlink: 'syz.0.5547': attribute type 2 has an invalid length.
[  542.295585][T24889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5547'.
[  542.402525][T24892] bpf: Bad value for 'gid'
[  542.429312][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.581199][T24880] syz.2.5545 (24880) used greatest stack depth: 18696 bytes left
[  542.802494][T24902] bond0: option arp_validate: invalid value (55553)
[  542.966192][T24909] xt_l2tp: v2 sid > 0xffff: 8388608
[  543.346135][T24932] lo speed is unknown, defaulting to 1000
[  543.468670][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.492485][T24940] geneve0: Caught tx_queue_len zero misconfig
[  543.582761][T24944] netlink: 'syz.1.5565': attribute type 7 has an invalid length.
[  543.748921][T24946] erspan0: entered promiscuous mode
[  544.510612][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.678533][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.052306][T25024] netlink: 'syz.2.5589': attribute type 83 has an invalid length.
[  545.513750][T25040] __nla_validate_parse: 5 callbacks suppressed
[  545.513764][T25040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5595'.
[  545.536903][T25040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5595'.
[  545.542991][T25040] bond33 (unregistering): Released all slaves
[  545.548981][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.882820][T25056] bond0: option arp_validate: invalid value (55553)
[  545.937588][T25072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5606'.
[  545.946972][T25072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5606'.
[  545.954486][T25071] lo speed is unknown, defaulting to 1000
[  546.099296][T25090] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5610'.
[  546.588992][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.741521][T25139] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  546.824502][T25143] ipt_rpfilter: unknown options
[  546.840591][T25144] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5626'.
[  546.940309][T25141] veth1_to_hsr: left allmulticast mode
[  546.944961][T25141] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  546.948751][T25141] veth3: left allmulticast mode
[  546.951572][T25141] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  546.954717][T25141] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  546.958126][T25141] team1: left promiscuous mode
[  546.961376][T25141] team1: left allmulticast mode
[  546.964636][T25141] team2: left promiscuous mode
[  546.966871][T25141] team2: left allmulticast mode
[  546.969973][T25141] team3: left promiscuous mode
[  546.972316][T25141] team3: left allmulticast mode
[  546.974984][T25141] veth5: left allmulticast mode
[  546.977492][T25141] veth7: left allmulticast mode
[  546.980492][T25141] veth9: left allmulticast mode
[  546.982909][T25141] ip6gre2: left promiscuous mode
[  546.985141][T25141] ip6gre2: left allmulticast mode
[  546.989728][T25141] ip6gre3: left promiscuous mode
[  546.992490][T25141] ip6gre3: left allmulticast mode
[  546.995123][T25141] veth11: left allmulticast mode
[  546.998682][T25141] veth13: left allmulticast mode
[  547.001653][T25141] veth15: left allmulticast mode
[  547.004487][T25141] veth19: left allmulticast mode
[  547.007003][T25141] veth21: left allmulticast mode
[  547.009807][T25141] veth23: left allmulticast mode
[  547.012320][T25141] veth25: left allmulticast mode
[  547.014809][T25141] veth27: left allmulticast mode
[  547.017243][T25141] veth29: left allmulticast mode
[  547.020036][T25141] veth31: left allmulticast mode
[  547.022731][T25141] veth33: left allmulticast mode
[  547.025513][T25141] veth35: left allmulticast mode
[  547.027581][T25141] bond15: left promiscuous mode
[  547.030161][T25141] veth37: left allmulticast mode
[  547.032419][T25141] erspan1: left promiscuous mode
[  547.034936][T25141] erspan1: left allmulticast mode
[  547.038075][T25141] veth39: left allmulticast mode
[  547.042412][T25141] veth43: left allmulticast mode
[  547.049658][T25141] veth45: left allmulticast mode
[  547.052732][T25141] veth47: left allmulticast mode
[  547.055231][T25152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5628'.
[  547.055500][T25141] bridge8: left promiscuous mode
[  547.062429][T25141] veth51: left allmulticast mode
[  547.064322][T25141] veth53: left allmulticast mode
[  547.066143][T25141] veth55: left allmulticast mode
[  547.068026][T25141] veth57: left allmulticast mode
[  547.071714][T25141] veth59: left allmulticast mode
[  547.076545][T25141] bridge9: left promiscuous mode
[  547.078889][T25141] bridge9: left allmulticast mode
[  547.089223][T25141] macvlan2: left promiscuous mode
[  547.092990][T25141] macvlan2: left allmulticast mode
[  547.213269][T25160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5629'.
[  547.273754][T25165] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5633'.
[  547.277545][T25165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5633'.
[  547.310613][T25165] bond33 (unregistering): Released all slaves
[  547.415034][T25169] block nbd1: NBD_DISCONNECT
[  547.416673][T25169] block nbd1: Send disconnect failed -32
[  547.420813][T25169] block nbd1: shutting down sockets
[  547.628678][ T6969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.713867][T25187] openvswitch: netlink: Actions may not be safe on all matching packets
[  547.719064][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.755598][T25189] bpf: Bad value for 'gid'
[  548.166055][T25214] team_slave_1: Caught tx_queue_len zero misconfig
[  548.203696][T25222] netlink: 'syz.1.5651': attribute type 3 has an invalid length.
[  548.253858][T25230] netlink: 'syz.0.5653': attribute type 4 has an invalid length.
[  548.670664][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.834512][T25277] bond33 (unregistering): Released all slaves
[  548.967295][T25283] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  548.970213][T25283] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  549.029681][T25287] bond0: option arp_validate: invalid value (55553)
[  549.115790][T25303] x_tables: duplicate underflow at hook 3
[  549.202392][T25318] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  549.211954][T25319] lo speed is unknown, defaulting to 1000
[  549.710167][T20539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.036114][T25363] openvswitch: netlink: Message has 4 unknown bytes.
[  550.179438][T25365] lo speed is unknown, defaulting to 1000
[  550.187685][T25367] netlink: 'syz.1.5690': attribute type 11 has an invalid length.
[  550.190721][T25367] netlink: 'syz.1.5690': attribute type 23 has an invalid length.
[  550.295127][T25371] vlan2: entered promiscuous mode
[  550.596967][T25380] __nla_validate_parse: 14 callbacks suppressed
[  550.596982][T25380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5694'.
[  550.641642][T25378] lo speed is unknown, defaulting to 1000
[  550.677530][T25380] veth45: entered allmulticast mode
[  550.695675][T25380] bond27: (slave veth45): Enslaving as an active interface with an up link
[  550.748782][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.752563][T20539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.820411][T25389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  550.902831][T25393] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  550.905339][T25394] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  551.439523][T25423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5704'.
[  551.757175][T25435] bpf: Bad value for 'gid'
[  551.786497][T25437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5709'.
[  552.497801][T25441] ip6gretap1: entered promiscuous mode
[  552.688330][T25449] No such timeout policy "syz0"
[  552.772386][T25456] bpf: Bad value for 'gid'
[  552.906045][T25461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5717'.
[  552.965823][T25461] xt_recent: Unsupported userspace flags (000000b1)
[  553.892266][T25488] bpf: Bad value for 'gid'
[  554.349425][T25514] nbd: couldn't find a device at index 0
[  554.404926][T25516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5733'.
[  554.413518][T25516] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  554.606471][T25529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5736'.
[  554.709092][T25528] bridge0: port 2(veth1_virt_wifi) entered disabled state
[  554.711647][T25528] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.893467][T25528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  554.910043][T25528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  555.104525][T25528] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  555.113527][T25528] veth3: left allmulticast mode
[  555.120254][T25528] bond1: left promiscuous mode
[  555.139515][T25528] veth5: left promiscuous mode
[  555.145762][T25528] veth5: left allmulticast mode
[  555.175071][T25528] veth7: left allmulticast mode
[  555.186960][T25528] veth9: left allmulticast mode
[  555.218809][T25528] veth11: left allmulticast mode
[  555.253992][T25528] veth13: left allmulticast mode
[  555.262393][T25528] veth15: left allmulticast mode
[  555.272764][T25528] veth17: left allmulticast mode
[  555.289112][T25528] geneve2: left promiscuous mode
[  555.290866][T25528] geneve2: left allmulticast mode
[  555.297169][T25528] veth19: left allmulticast mode
[  555.309037][T25528] veth21: left allmulticast mode
[  555.333548][T25528] vlan3: left promiscuous mode
[  555.337742][T25528] bridge0: left promiscuous mode
[  555.341562][T25528] veth23: left allmulticast mode
[  555.356662][T25528] veth25: left allmulticast mode
[  555.364432][T25528] ip6gre2: left promiscuous mode
[  555.369099][T25528] ip6gre2: left allmulticast mode
[  555.386045][T25528] veth27: left allmulticast mode
[  555.404243][T25528] veth29: left allmulticast mode
[  555.414020][T25528] bond10: left promiscuous mode
[  555.435582][T25528] veth31: left allmulticast mode
[  555.470025][T25528] bond11: left promiscuous mode
[  555.472374][T25528] bridge2: left promiscuous mode
[  555.476909][T25528] bond11: left allmulticast mode
[  555.481090][T25528] bridge2: left allmulticast mode
[  555.514703][T25528] veth35: left allmulticast mode
[  555.570565][T25528] veth39: left allmulticast mode
[  555.594474][T25528] veth41: left allmulticast mode
[  555.610248][T25528] vlan4: left promiscuous mode
[  555.620888][T25528] veth1_vlan: left allmulticast mode
[  555.624860][T25528] macvtap1: left promiscuous mode
[  555.626647][T25528] macvtap1: left allmulticast mode
[  555.701941][T25528] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  555.721583][T25528] veth43: left allmulticast mode
[  555.735954][T25528] veth45: left allmulticast mode
[  555.759815][   T32] syz1: Port: 1 Link DOWN
[  555.764003][ T5669] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  555.774055][ T5669] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.777185][ T5669] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  555.780904][ T5669] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  555.784348][ T5669] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.787697][ T5669] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  555.793425][ T5669] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  555.796505][ T5669] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.800735][ T5669] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  555.807406][ T5669] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  555.811017][ T5669] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  555.813984][ T5669] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  556.746731][T25632] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  557.195200][T25641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5767'.
[  557.199066][T25641] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5767'.
[  557.315765][T25655] syzkaller0: entered promiscuous mode
[  557.317547][T25655] syzkaller0: entered allmulticast mode
[  557.332013][T25655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5770'.
[  559.284482][T25661] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR
[  559.315138][T25689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5781'.
[  559.325472][T25691] tipc: Failed to remove unknown binding: 66,0,0/2886997007:550366169/550366171
[  559.334805][T25691] tipc: Failed to remove unknown binding: 66,0,0/2886997007:550366169/550366170
[  559.341662][T25691] tipc: Failed to remove unknown binding: 66,0,0/2886997007:550366169/550366171
[  559.346981][T25691] tipc: Failed to remove unknown binding: 66,0,0/2886997007:550366169/550366170
[  559.612444][T25739] syzkaller1: entered promiscuous mode
[  559.614296][T25739] syzkaller1: entered allmulticast mode
[  559.740526][T25755] lo speed is unknown, defaulting to 1000
[  559.951909][T25771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5800'.
[  560.282881][T25779] lo speed is unknown, defaulting to 1000
[  560.653249][T25791] bpf: Bad value for 'gid'
[  560.952086][T25814] lo speed is unknown, defaulting to 1000
[  561.506145][T25828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5817'.
[  561.797511][T25841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5821'.
[  562.054994][T25873] sit1: entered allmulticast mode
[  562.120666][T25880] syzkaller0: entered promiscuous mode
[  562.122635][T25880] syzkaller0: entered allmulticast mode
[  562.141819][T25881] xt_nat: multiple ranges no longer supported
[  562.963095][T25887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5836'.
[  563.037715][T25893] lo speed is unknown, defaulting to 1000
[  563.244333][T25902] xt_l2tp: missing protocol rule (udp|l2tpip)
[  565.346190][T25894] lo speed is unknown, defaulting to 1000
[  565.470796][T25917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5845'.
[  565.665956][T25926] bpf: Bad value for 'gid'
[  565.705044][T25928] netlink: 'syz.2.5848': attribute type 1 has an invalid length.
[  565.707534][T25928] netlink: 'syz.2.5848': attribute type 2 has an invalid length.
[  565.712742][T25928] netlink: 'syz.2.5848': attribute type 1 has an invalid length.
[  565.806661][T25931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5849'.
[  566.090423][T25939] lo speed is unknown, defaulting to 1000
[  566.132727][T25940] batman_adv: batadv0: Adding interface: ipvlan2
[  566.134979][T25940] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  566.143601][T25940] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  566.450345][T25954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5855'.
[  566.477723][T25956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5856'.
[  566.495526][T25956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  566.516319][T25956] veth63: entered allmulticast mode
[  566.525110][T25956] bond33: (slave veth63): Enslaving as an active interface with an up link
[  566.532773][T25956] bond33 (unregistering): (slave veth63): Releasing backup interface
[  566.540084][T25956] bond33 (unregistering): Released all slaves
[  566.724137][T25971] bridge_slave_1: invalid flags given to default FDB implementation
[  566.827086][T25976] lo: left allmulticast mode
[  567.082628][T25990] netlink: 'syz.2.5865': attribute type 6 has an invalid length.
[  567.665377][T26008] x_tables: duplicate underflow at hook 3
[  567.716485][T26017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5872'.
[  567.753324][T26017] veth65: entered allmulticast mode
[  567.764461][T26017] bond33: (slave veth65): Enslaving as an active interface with an up link
[  567.775433][T26017] bond33 (unregistering): (slave veth65): Releasing backup interface
[  567.784462][T26017] bond33 (unregistering): Released all slaves
[  567.841144][T26021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5873'.
[  567.895380][T26024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5874'.
[  568.190532][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  568.198384][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  568.816925][T26044] pim6reg1: entered promiscuous mode
[  568.819859][T26044] pim6reg1: entered allmulticast mode
[  569.002703][T26048] bond0: option arp_validate: invalid value (55553)
[  569.190392][T26063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5885'.
[  569.319798][T26070] bond30: entered promiscuous mode
[  569.322835][T26070] 8021q: adding VLAN 0 to HW filter on device bond30
[  569.422994][T26084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5891'.
[  569.525221][T26088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5893'.
[  569.660010][T26098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5896'.
[  569.709354][ T7843] block nbd1: Receive control failed (result -1)
[  569.873110][T26111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5899'.
[  569.892475][T26111] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5899'.
[  569.897130][T26111] bond31 (unregistering): Released all slaves
[  569.996521][T26114] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  570.242100][T26126] syzkaller1: entered promiscuous mode
[  570.243982][T26126] syzkaller1: entered allmulticast mode
[  570.249027][T26126] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5904'.
[  570.551123][T26159] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5913'.
[  570.631491][T26170] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5916'.
[  570.635910][T26170] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5916'.
[  570.866178][T26184] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  572.574402][T26266] netlink: 'syz.0.5945': attribute type 3 has an invalid length.
[  572.631401][T26266] bond31 (unregistering): Released all slaves
[  572.660534][T26274] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  572.752201][T26280] ieee802154 phy1 wpan1: encryption failed: -22
[  572.960156][T26293] lo speed is unknown, defaulting to 1000
[  572.991776][T26296] netlink: 'syz.2.5954': attribute type 21 has an invalid length.
[  573.163186][T26306] SET target dimension over the limit!
[  573.455149][T26322] bpf: Bad value for 'gid'
[  573.465833][T26318] veth67: entered allmulticast mode
[  573.480540][T26318] bond33: (slave veth67): Enslaving as an active interface with an up link
[  573.501760][T26318] bond33 (unregistering): (slave veth67): Releasing backup interface
[  573.516359][T26318] bond33 (unregistering): Released all slaves
[  573.680799][T26331] netlink: 'syz.1.5964': attribute type 3 has an invalid length.
[  573.701933][T26331] veth0_macvtap: Caught tx_queue_len zero misconfig
[  574.126358][T26356] bpf: Bad value for 'gid'
[  574.210252][T26363] __nla_validate_parse: 12 callbacks suppressed
[  574.210266][T26363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5973'.
[  574.262747][T26369] netlink: 'syz.0.5974': attribute type 1 has an invalid length.
[  574.276468][T26369] bond32: entered promiscuous mode
[  574.281799][T26369] 8021q: adding VLAN 0 to HW filter on device bond32
[  574.286058][T26369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5974'.
[  574.290564][T26369] bond32: entered allmulticast mode
[  574.304321][T26370] bond32: (slave bridge11): making interface the new active one
[  574.306890][T26370] bridge11: entered promiscuous mode
[  574.309270][T26370] bridge11: entered allmulticast mode
[  574.316736][T26370] bond32: (slave bridge11): Enslaving as an active interface with an up link
[  574.881816][T26399] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5982'.
[  574.882918][T26396] bond33: ARP target 9.0.0.0 is already present
[  574.885364][T26399] unsupported nlmsg_type 40
[  574.887244][T26396] bond33: option arp_ip_target: invalid value (9)
[  574.894971][T26396] bond33 (unregistering): Released all slaves
[  575.002746][T26404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5984'.
[  575.033621][ T7843] block nbd7: Receive control failed (result -1)
[  575.193445][T26416] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5987'.
[  575.212879][T26416] 0: renamed from hsr0
[  575.220877][T26416] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  575.226080][T26416] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  575.230275][T26416] 0: entered allmulticast mode
[  575.232422][T26416] hsr_slave_0: entered allmulticast mode
[  575.234876][T26416] hsr_slave_1: entered allmulticast mode
[  575.241935][T26416] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  575.322988][T26428] IPVS: length: 15 != 169957396344
[  576.160438][T26442] bpf: Bad value for 'gid'
[  576.230282][T26446] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  576.446150][T26464] bpf: Bad value for 'gid'
[  576.481538][T26466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6003'.
[  576.503501][T26466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6003'.
[  576.518817][T26466] bond33 (unregistering): Released all slaves
[  576.587085][T26469] lo speed is unknown, defaulting to 1000
[  577.153714][T26496] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  577.157831][T26496] netem: change failed
[  577.163228][T26496] tipc: Resetting bearer <eth:syzkaller0>
[  577.199397][T26498] netlink: 'syz.0.6013': attribute type 8 has an invalid length.
[  577.305243][T26502] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  577.637421][T26523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6022'.
[  578.063523][T26544] tls_set_device_offload_rx: netdev not found
[  578.131177][T26551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6030'.
[  578.165939][T26551] veth49: entered allmulticast mode
[  578.172995][T26551] bond28: (slave veth49): Enslaving as an active interface with an up link
[  578.182315][T26551] bond28 (unregistering): (slave veth49): Releasing backup interface
[  578.187470][T26551] bond28 (unregistering): Released all slaves
[  578.253169][T26555] netlink: 'syz.0.6031': attribute type 4 has an invalid length.
[  578.275565][T26555] netlink: 'syz.0.6031': attribute type 4 has an invalid length.
[  578.293587][T26555] netlink: 'syz.0.6031': attribute type 4 has an invalid length.
[  578.426248][T26569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6036'.
[  578.508108][T26572] bpf: Bad value for 'gid'
[  578.693274][T26583] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20000
[  578.900673][T26604] veth61: entered allmulticast mode
[  579.162546][T26563] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  579.207767][T26630] bpf: Bad value for 'gid'
[  579.268298][T26640] netlink: 'syz.1.6057': attribute type 1 has an invalid length.
[  579.278097][T26640] __nla_validate_parse: 3 callbacks suppressed
[  579.278113][T26640] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6057'.
[  579.278603][T26642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6058'.
[  579.322223][T26642] veth61: entered allmulticast mode
[  579.328528][T26642] bond34: (slave veth61): Enslaving as an active interface with an up link
[  579.343627][T26642] bond34 (unregistering): (slave veth61): Releasing backup interface
[  579.353139][T26642] bond34 (unregistering): Released all slaves
[  579.410420][T26651] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6059'.
[  579.497686][T26656] bond0: option arp_validate: invalid value (55553)
[  579.743322][T26667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6063'.
[  580.095272][T26669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6064'.
[  580.725196][T26694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6071'.
[  580.950721][T26702] bond0: option arp_validate: invalid value (55553)
[  581.068550][T26709] sctp: [Deprecated]: syz.1.6076 (pid 26709) Use of int in max_burst socket option.
[  581.068550][T26709] Use struct sctp_assoc_value instead
[  581.333020][T26733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6082'.
[  581.351761][T26733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6082'.
[  581.682452][T26764] bpf: Bad value for 'gid'
[  582.679000][T26781] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  582.891372][T26809] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6104'.
[  582.905550][T26793] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  583.024655][T26820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6107'.
[  583.054301][T26822] bond34: option arp_validate: invalid value (18446744073709551613)
[  583.059702][T26822] bond34 (unregistering): Released all slaves
[  583.084386][   T55] block nbd8: Receive control failed (result -1)
[  584.276993][T26882] Dead loop on virtual device ip6_vti0 (net 27), fix it urgently!
[  584.341438][T26883] __nla_validate_parse: 8 callbacks suppressed
[  584.341459][T26883] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.6125'.
[  584.348055][T26883] netlink: Unknown conntrack attr (type=2304, max=9)
[  584.584335][T26872] Set syz1 is full, maxelem 65536 reached
[  584.701609][T26890] lo speed is unknown, defaulting to 1000
[  585.322756][T26937] bpf: Bad value for 'gid'
[  585.333700][T26939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6141'.
[  585.375448][   T55] block nbd9: Receive control failed (result -1)
[  585.735999][T26955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6146'.
[  586.039122][T26962] bpf: Bad value for 'gid'
[  586.087435][T26967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6149'.
[  586.188912][T26974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6153'.
[  586.195633][T26974] netlink: 'syz.1.6153': attribute type 1 has an invalid length.
[  586.202344][T26974] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6153'.
[  586.225765][T26978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6154'.
[  586.252940][T26978] veth63: entered allmulticast mode
[  586.256797][T26978] bond34: (slave veth63): Enslaving as an active interface with an up link
[  586.263965][T26978] bond34 (unregistering): (slave veth63): Releasing backup interface
[  586.272145][T26978] bond34 (unregistering): Released all slaves
[  586.324930][T26983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6155'.
[  586.364143][T26985] bpf: Bad value for 'gid'
[  586.395674][T26988] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.6157'.
[  586.515878][T26994] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6159'.
[  587.232062][T27011] sctp: [Deprecated]: syz.1.6165 (pid 27011) Use of int in maxseg socket option.
[  587.232062][T27011] Use struct sctp_assoc_value instead
[  587.393105][T27021] veth69: entered allmulticast mode
[  587.401788][T27021] bond35: (slave veth69): Enslaving as an active interface with an up link
[  587.486669][T27003] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  587.717997][T27047] lo speed is unknown, defaulting to 1000
[  587.921487][T27060] vlan0: entered promiscuous mode
[  588.368520][T26940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  588.501921][T27070] bridge4: the hash_elasticity option has been deprecated and is always 16
[  588.595057][T27073] bond29 (unregistering): Released all slaves
[  588.831697][T27087] lo speed is unknown, defaulting to 1000
[  588.930906][T27096] 8021q: VLANs not supported on gre0
[  589.207012][T27111] veth65: entered allmulticast mode
[  589.229670][T27111] bond34: (slave veth65): Enslaving as an active interface with an up link
[  589.335225][T27120] syzkaller1: entered promiscuous mode
[  589.342920][T27120] syzkaller1: entered allmulticast mode
[  589.551217][T27136] __nla_validate_parse: 5 callbacks suppressed
[  589.551560][T27136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6199'.
[  589.583666][T27138] xt_TPROXY: Can be used only with -p tcp or -p udp
[  589.641138][T27142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6201'.
[  590.316887][T27173] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6210'.
[  590.332251][T27173] macvtap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  590.816172][T27193] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6215'.
[  590.958012][T27209] pim6reg: entered allmulticast mode
[  590.961641][T27209] pim6reg: left allmulticast mode
[  591.018762][T27211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6223'.
[  591.054337][T27213] netlink: zone id is out of range
[  591.102582][T27215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6225'.
[  591.106710][T27215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6225'.
[  591.475826][T27235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6231'.
[  591.835595][T27249] netlink: 'syz.0.6235': attribute type 1 has an invalid length.
[  591.918056][T27256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6237'.
[  591.993420][T27265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6239'.
[  592.023183][   T55] block nbd10: Receive control failed (result -1)
[  592.649909][T27301] bpf: Bad value for 'gid'
[  593.263067][T27338] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  593.395665][T27350] nbd: couldn't find device at index 0
[  593.434344][T27360] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  593.855015][T27398] netlink: 'syz.2.6274': attribute type 3 has an invalid length.
[  593.860769][T27398] block nbd2: NBD_DISCONNECT
[  593.862876][T27398] block nbd2: Send disconnect failed -32
[  593.865378][T27398] block nbd2: shutting down sockets
[  594.569040][T27431] __nla_validate_parse: 4 callbacks suppressed
[  594.569052][T27431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6285'.
[  594.608872][T27431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6285'.
[  594.613819][T27431] bond35 (unregistering): Released all slaves
[  594.815337][T27447] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6289'.
[  594.910548][T27453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6291'.
[  595.239549][T27456] bpf: Bad value for 'gid'
[  595.290575][T27458] netlink: 'syz.1.6293': attribute type 14 has an invalid length.
[  595.293957][T27458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6293'.
[  595.297706][T27458] bond0: option xmit_hash_policy: invalid value (191)
[  595.392844][T27467] lo speed is unknown, defaulting to 1000
[  595.495369][T27476] vlan0: entered promiscuous mode
[  595.801622][T27482] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6300'.
[  595.807177][T27482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6300'.
[  595.811378][T27482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6300'.
[  595.814298][T27482] netlink: 18 bytes leftover after parsing attributes in process `syz.0.6300'.
[  595.864829][T27482] veth67: entered allmulticast mode
[  596.146741][T27491] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6304'.
[  596.394637][T27499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.714241][T27511] lo speed is unknown, defaulting to 1000
[  596.790195][T27521] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  596.986578][T27534] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  596.989835][T27534] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  596.993714][T27534] tipc: Resetting bearer <eth:syzkaller0>
[  597.071621][T27536] veth71: entered allmulticast mode
[  597.082391][T27536] bond36: (slave veth71): Enslaving as an active interface with an up link
[  597.091133][T27536] bond36 (unregistering): (slave veth71): Releasing backup interface
[  597.099444][T27536] bond36 (unregistering): Released all slaves
[  597.217677][T27549] netlink: 'syz.1.6319': attribute type 16 has an invalid length.
[  597.224384][T27549] netlink: 'syz.1.6319': attribute type 17 has an invalid length.
[  597.272378][T27549] tipc: Resetting bearer <eth:syzkaller0>
[  597.293668][ T5670] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  597.304890][ T5670] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  597.509777][ T5670] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  597.764032][T27586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.806789][T27586] batman_adv: batadv0: Removing interface: batadv_slave_0
[  597.910609][T27602] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  597.913397][T27602] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  597.916267][T27602] tipc: Resetting bearer <eth:syzkaller0>
[  598.109061][ T5670] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  598.189717][T27622] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  598.482677][T27655] bridge12: entered promiscuous mode
[  598.489834][T27655] bridge12: entered allmulticast mode
[  599.735898][T27708] lo speed is unknown, defaulting to 1000
[  600.164341][T27719] __nla_validate_parse: 6 callbacks suppressed
[  600.164361][T27719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6370'.
[  600.304159][T27724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6372'.
[  600.513538][T27730] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  600.557766][T27732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6376'.
[  600.584845][T27732] veth73: entered allmulticast mode
[  600.590690][T27732] bond36: (slave veth73): Enslaving as an active interface with an up link
[  600.597264][T27732] bond36 (unregistering): (slave veth73): Releasing backup interface
[  600.604385][T27732] bond36 (unregistering): Released all slaves
[  600.841549][T27751] lo speed is unknown, defaulting to 1000
[  601.026787][T27756] vlan0: entered promiscuous mode
[  602.133662][T27785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6389'.
[  602.203549][T27793] syzkaller0: entered promiscuous mode
[  602.205857][T27793] syzkaller0: entered allmulticast mode
[  602.442845][T27805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6396'.
[  602.485231][T27807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6397'.
[  602.525441][T27809] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  602.533383][T27809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6398'.
[  602.552186][T27809] bond30 (unregistering): Released all slaves
[  602.632121][T27812] IPVS: set_ctl: invalid protocol: 29 172.20.20.57:20001
[  603.052766][T27843] bpf: Bad value for 'gid'
[  603.200868][T27859] smbdirect: ib_dev[syz1] renamed to [syz2]
[  603.269067][T27863] openvswitch: netlink: Flow key attr not present in new flow.
[  603.351050][T27870] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  603.383423][T27872] x_tables: duplicate underflow at hook 1
[  604.059981][T27894] openvswitch: netlink: Message has 4 unknown bytes.
[  604.145002][T27899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6421'.
[  604.149867][T27899] sctp: [Deprecated]: syz.0.6421 (pid 27899) Use of struct sctp_assoc_value in delayed_ack socket option.
[  604.149867][T27899] Use struct sctp_sack_info instead
[  605.105826][T27910] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6425'.
[  605.110666][T27910] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6425'.
[  606.422778][T27875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  606.426760][T27880] block nbd1: NBD_DISCONNECT
[  606.428859][T27880] block nbd1: Send disconnect failed -104
[  606.431321][T27880] block nbd1: shutting down sockets
[  606.560375][T27928] netlink: 'syz.0.6430': attribute type 10 has an invalid length.
[  606.668756][T27935] lo speed is unknown, defaulting to 1000
[  606.835572][T27935] vlan0: entered promiscuous mode
[  607.655794][T27961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6438'.
[  607.679996][T27961] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  607.696237][T27961] batadv_slave_0: entered promiscuous mode
[  607.701054][T27961] batadv_slave_0: left promiscuous mode
[  607.712063][T27961] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  607.847995][T27982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6444'.
[  607.911537][T27990] bpf: Bad value for 'gid'
[  608.073563][T27997] sctp: [Deprecated]: syz.0.6449 (pid 27997) Use of struct sctp_assoc_value in delayed_ack socket option.
[  608.073563][T27997] Use struct sctp_sack_info instead
[  608.341242][T28026] tipc: Enabling of bearer <eth:ipvlan0> rejected, max 3 bearers permitted
[  608.524728][T28042] netem: change failed
[  609.084783][T28063] lo speed is unknown, defaulting to 1000
[  609.500808][T28076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6467'.
[  609.704216][T28091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6472'.
[  609.757301][T28091] veth75: entered allmulticast mode
[  609.766993][T28091] bond36 (unregistering): Released all slaves
[  610.158015][T28135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6484'.
[  610.203068][T28135] bond30 (unregistering): Released all slaves
[  610.231185][T28140] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6486'.
[  610.403210][T28149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6490'.
[  610.443634][T28149] veth51: entered allmulticast mode
[  610.453897][T28152] lo speed is unknown, defaulting to 1000
[  610.752978][T28170] xt_CT: You must specify a L4 protocol and not use inversions on it
[  610.797683][T28173] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  611.029381][T28197] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6506'.
[  611.551599][T28204] sctp: [Deprecated]: syz.2.6509 (pid 28204) Use of int in max_burst socket option.
[  611.551599][T28204] Use struct sctp_assoc_value instead
[  611.596157][T28206] bpf: Bad value for 'gid'
[  611.854031][T28225] netlink: 'syz.2.6516': attribute type 5 has an invalid length.
[  611.873759][T28227] bpf: Bad value for 'gid'
[  611.985158][   T32] lo speed is unknown, defaulting to 1000
[  611.989463][   T32] sqz0: Port: 1 Link DOWN
[  611.995761][T28237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6520'.
[  612.004298][   T32] lo speed is unknown, defaulting to 1000
[  612.064324][T28243] lo speed is unknown, defaulting to 1000
[  612.092299][T28247] netlink: 'syz.0.6524': attribute type 4 has an invalid length.
[  612.099950][T28247] netlink: 'syz.0.6524': attribute type 4 has an invalid length.
[  612.105185][T28247] netlink: 'syz.0.6524': attribute type 4 has an invalid length.
[  612.263712][T28261] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6526'.
[  612.601674][T28268] netlink: 'syz.1.6529': attribute type 13 has an invalid length.
[  612.746066][T28279] netlink: 'syz.2.6532': attribute type 1 has an invalid length.
[  612.750250][T28279] netlink: 'syz.2.6532': attribute type 2 has an invalid length.
[  612.835741][T28286] ieee802154 phy1 wpan1: encryption failed: -22
[  612.879631][T28289] lo speed is unknown, defaulting to 1000
[  613.816948][T28319] __nla_validate_parse: 2 callbacks suppressed
[  613.817129][T28319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6545'.
[  613.826389][T28318] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  613.829739][T28318] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  613.982584][T28325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6548'.
[  614.178892][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6550'.
[  614.182196][T28335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6550'.
[  614.186526][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6550'.
[  614.192447][T28335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6550'.
[  614.226763][T28337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6551'.
[  614.270190][   T55] block nbd1: Receive control failed (result -1)
[  614.461800][T28343] netlink: 'syz.1.6553': attribute type 1 has an invalid length.
[  614.482218][T28343] 8021q: adding VLAN 0 to HW filter on device bond37
[  614.558722][T28357] x_tables: duplicate underflow at hook 1
[  614.607430][T28368] netlink: 'syz.2.6559': attribute type 1 has an invalid length.
[  614.611495][T28368] netlink: 'syz.2.6559': attribute type 3 has an invalid length.
[  614.856275][T28405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6569'.
[  614.981598][T28411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6571'.
[  615.055940][T28416] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  615.059383][T28416] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  615.144245][T28423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6574'.
[  616.316084][T28459] lo speed is unknown, defaulting to 1000
[  616.752398][T28480] bond38: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  616.758873][T28480] bond38: (slave lo): Enslaving as an active interface with an up link
[  616.772017][T28480] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  616.834392][T25549] lo speed is unknown, defaulting to 1000
[  616.837840][T25549] sqz0: Port: 1 Link ACTIVE
[  616.840607][T25549] lo speed is unknown, defaulting to 1000
[  617.108942][T28524] validate_nla: 3 callbacks suppressed
[  617.108958][T28524] netlink: 'syz.2.6605': attribute type 1 has an invalid length.
[  617.119542][T28523] nbd: couldn't find device at index 0
[  617.126407][T28525] netlink: 'syz.2.6605': attribute type 8 has an invalid length.
[  617.133896][T28524] netlink: 'syz.2.6605': attribute type 8 has an invalid length.
[  617.138761][T28527] netlink: 'syz.1.6607': attribute type 10 has an invalid length.
[  617.210320][T28535] netlink: 'syz.1.6607': attribute type 10 has an invalid length.
[  617.216513][T28535] team0: Port device dummy0 removed
[  617.220904][T28535] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  617.228408][   T13] bond0: (slave dummy0): interface is now down
[  617.231561][   T13] bond0: now running without any active interface!
[  617.378833][T28527] nbd2: detected capacity change from 0 to 63
[  617.384381][ T7843] block nbd2: Receive control failed (result -32)
[  617.386794][   T56] block nbd2: Receive control failed (result -32)
[  617.388107][T26729] block nbd2: Send control failed (result -32)
[  617.396715][T26729] block nbd2: Request send failed, requeueing
[  617.408033][   T11] block nbd2: Dead connection, failed to find a fallback
[  617.413814][   T11] block nbd2: shutting down sockets
[  617.416347][   T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  617.422607][   T11] Buffer I/O error on dev nbd2, logical block 0, async page read
[  617.427677][T26729] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  617.434114][T26729] Buffer I/O error on dev nbd2, logical block 1, async page read
[  617.437719][T26729] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  617.440891][T26729] Buffer I/O error on dev nbd2, logical block 2, async page read
[  617.443643][T26729] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  617.446666][T26729] Buffer I/O error on dev nbd2, logical block 3, async page read
[  617.450056][T26729] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  617.454698][T26729] Buffer I/O error on dev nbd2, logical block 0, async page read
[  617.457894][T26729] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  617.461747][T26729] Buffer I/O error on dev nbd2, logical block 1, async page read
[  617.465096][T26729] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  617.469988][T26729] Buffer I/O error on dev nbd2, logical block 2, async page read
[  617.473316][T26729] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  617.483540][T26729] Buffer I/O error on dev nbd2, logical block 3, async page read
[  617.490031][T26729] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  617.497126][T26729] Buffer I/O error on dev nbd2, logical block 0, async page read
[  617.500202][T26729] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  617.503096][T26729] Buffer I/O error on dev nbd2, logical block 1, async page read
[  617.506983][T26729] ldm_validate_partition_table(): Disk read failed.
[  617.514501][T26729] Dev nbd2: unable to read RDB block 0
[  617.522988][T26729]  nbd2: unable to read partition table
[  617.532710][T28545] lo speed is unknown, defaulting to 1000
[  617.540376][T26729] ldm_validate_partition_table(): Disk read failed.
[  617.544709][T26729] Dev nbd2: unable to read RDB block 0
[  617.553317][T26729]  nbd2: unable to read partition table
[  619.018567][T28587] bpf: Bad value for 'gid'
[  619.115556][T28589] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  619.223046][T28603] __nla_validate_parse: 8 callbacks suppressed
[  619.223065][T28603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6630'.
[  619.239907][T28603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6630'.
[  619.303939][T28607] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6632'.
[  620.025963][T28638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6641'.
[  620.029832][T28638] block nbd11: Unsupported socket: should be TCP or UNIX.
[  620.227604][T28651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6644'.
[  620.237169][T28651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6644'.
[  621.026063][T28680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6652'.
[  622.383376][T28701] 
[  622.384225][T28701] ======================================================
[  622.386386][T28701] WARNING: possible circular locking dependency detected
[  622.388576][T28701] syzkaller #0 Not tainted
[  622.390189][T28701] ------------------------------------------------------
[  622.392598][T28701] syz.0.6658/28701 is trying to acquire lock:
[  622.394682][T28701] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  622.398372][T28701] 
[  622.398372][T28701] but task is already holding lock:
[  622.401322][T28701] ffff888012cc2530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  622.405186][T28701] 
[  622.405186][T28701] which lock already depends on the new lock.
[  622.405186][T28701] 
[  622.409499][T28701] 
[  622.409499][T28701] the existing dependency chain (in reverse order) is:
[  622.413202][T28701] 
[  622.413202][T28701] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  622.415580][T28701]        __mutex_lock+0x1a3/0x1550
[  622.417202][T28701]        __ipv6_dev_mc_inc+0x4e/0xa50
[  622.418971][T28701]        __ipv6_sock_mc_join+0x503/0x750
[  622.420748][T28701]        do_ipv6_mcast_group_source+0x3df/0x4c0
[  622.422694][T28701]        do_ipv6_setsockopt+0x16e9/0x3150
[  622.424501][T28701]        ipv6_setsockopt+0x59/0x170
[  622.426230][T28701]        do_sock_setsockopt+0x17c/0x1b0
[  622.427974][T28701]        __x64_sys_setsockopt+0x13d/0x1b0
[  622.429766][T28701]        do_syscall_64+0x15f/0xf80
[  622.431398][T28701]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.433503][T28701] 
[  622.433503][T28701] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  622.436042][T28701]        lock_sock_nested+0x41/0x100
[  622.437840][T28701]        inet_shutdown+0x6a/0x390
[  622.439567][T28701]        nbd_mark_nsock_dead+0x2e9/0x560
[  622.441340][T28701]        recv_work+0x1c2e/0x1d40
[  622.442893][T28701]        process_scheduled_works+0xb5d/0x1860
[  622.444825][T28701]        worker_thread+0xa53/0xfc0
[  622.446547][T28701]        kthread+0x388/0x470
[  622.448034][T28701]        ret_from_fork+0x514/0xb70
[  622.449647][T28701]        ret_from_fork_asm+0x1a/0x30
[  622.451424][T28701] 
[  622.451424][T28701] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  622.453849][T28701]        __mutex_lock+0x1a3/0x1550
[  622.455485][T28701]        nbd_queue_rq+0x37b/0x1100
[  622.457086][T28701]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  622.458966][T28701]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  622.461121][T28701]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  622.463155][T28701]        blk_mq_run_hw_queue+0x348/0x4f0
[  622.464918][T28701]        blk_mq_dispatch_list+0xd16/0xe10
[  622.466734][T28701]        blk_mq_flush_plug_list+0x48d/0x570
[  622.468671][T28701]        __blk_flush_plug+0x3ed/0x4d0
[  622.470376][T28701]        __submit_bio+0x28d/0x580
[  622.472117][T28701]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  622.474251][T28701]        block_read_full_folio+0x599/0x830
[  622.476172][T28701]        filemap_read_folio+0x137/0x3b0
[  622.478010][T28701]        do_read_cache_folio+0x358/0x590
[  622.479815][T28701]        read_part_sector+0xb6/0x2b0
[  622.481551][T28701]        adfspart_check_ICS+0xb1/0x960
[  622.483569][T28701]        bdev_disk_changed+0x817/0x1770
[  622.485462][T28701]        blkdev_get_whole+0x380/0x510
[  622.487213][T28701]        bdev_open+0x31e/0xd30
[  622.489226][T28701]        blkdev_open+0x470/0x610
[  622.491268][T28701]        do_dentry_open+0x785/0x14e0
[  622.493391][T28701]        vfs_open+0x3b/0x340
[  622.495182][T28701]        path_openat+0x2e08/0x3860
[  622.496805][T28701]        do_file_open+0x23e/0x4a0
[  622.498749][T28701]        do_sys_openat2+0x113/0x200
[  622.500919][T28701]        __x64_sys_openat+0x138/0x170
[  622.503246][T28701]        do_syscall_64+0x15f/0xf80
[  622.505339][T28701]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.507914][T28701] 
[  622.507914][T28701] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  622.510909][T28701]        __mutex_lock+0x1a3/0x1550
[  622.513019][T28701]        nbd_queue_rq+0xc6/0x1100
[  622.515122][T28701]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  622.517600][T28701]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  622.520330][T28701]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  622.522501][T28701]        blk_mq_run_hw_queue+0x348/0x4f0
[  622.524743][T28701]        blk_mq_dispatch_list+0xd16/0xe10
[  622.527059][T28701]        blk_mq_flush_plug_list+0x48d/0x570
[  622.529406][T28701]        __blk_flush_plug+0x3ed/0x4d0
[  622.531496][T28701]        __submit_bio+0x28d/0x580
[  622.533289][T28701]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  622.535209][T28701]        block_read_full_folio+0x599/0x830
[  622.537090][T28701]        filemap_read_folio+0x137/0x3b0
[  622.538880][T28701]        do_read_cache_folio+0x358/0x590
[  622.541183][T28701]        read_part_sector+0xb6/0x2b0
[  622.543345][T28701]        adfspart_check_ICS+0xb1/0x960
[  622.545533][T28701]        bdev_disk_changed+0x817/0x1770
[  622.547809][T28701]        blkdev_get_whole+0x380/0x510
[  622.550064][T28701]        bdev_open+0x31e/0xd30
[  622.552022][T28701]        blkdev_open+0x470/0x610
[  622.554039][T28701]        do_dentry_open+0x785/0x14e0
[  622.555913][T28701]        vfs_open+0x3b/0x340
[  622.557367][T28701]        path_openat+0x2e08/0x3860
[  622.558956][T28701]        do_file_open+0x23e/0x4a0
[  622.560534][T28701]        do_sys_openat2+0x113/0x200
[  622.562182][T28701]        __x64_sys_openat+0x138/0x170
[  622.563835][T28701]        do_syscall_64+0x15f/0xf80
[  622.565448][T28701]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.567419][T28701] 
[  622.567419][T28701] -> #3 (set->srcu){.+.+}-{0:0}:
[  622.569588][T28701]        __synchronize_srcu+0xca/0x300
[  622.571318][T28701]        elevator_switch+0x1e8/0x7a0
[  622.573031][T28701]        elevator_change+0x2cc/0x450
[  622.574727][T28701]        elevator_set_default+0x36c/0x430
[  622.576826][T28701]        blk_register_queue+0x3e9/0x4e0
[  622.578681][T28701]        __add_disk+0x677/0xd50
[  622.580651][T28701]        add_disk_fwnode+0xfb/0x480
[  622.582683][T28701]        nbd_dev_add+0x72c/0xb50
[  622.584649][T28701]        nbd_init+0x168/0x1f0
[  622.586529][T28701]        do_one_initcall+0x250/0x870
[  622.588392][T28701]        do_initcall_level+0x104/0x190
[  622.590123][T28701]        do_initcalls+0x59/0xa0
[  622.591868][T28701]        kernel_init_freeable+0x2a6/0x3e0
[  622.593827][T28701]        kernel_init+0x1d/0x1d0
[  622.595457][T28701]        ret_from_fork+0x514/0xb70
[  622.597082][T28701]        ret_from_fork_asm+0x1a/0x30
[  622.598656][T28701] 
[  622.598656][T28701] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  622.601688][T28701]        __mutex_lock+0x1a3/0x1550
[  622.603783][T28701]        elevator_change+0x1b3/0x450
[  622.605926][T28701]        elevator_set_none+0xb5/0x140
[  622.608152][T28701]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  622.610753][T28701]        nbd_start_device+0x17f/0xb10
[  622.612896][T28701]        nbd_genl_connect+0x165b/0x1cf0
[  622.615153][T28701]        genl_family_rcv_msg_doit+0x22a/0x330
[  622.617672][T28701]        genl_rcv_msg+0x61c/0x7a0
[  622.619429][T28701]        netlink_rcv_skb+0x232/0x4b0
[  622.621028][T28701]        genl_rcv+0x28/0x40
[  622.622657][T28701]        netlink_unicast+0x75c/0x8e0
[  622.624470][T28701]        netlink_sendmsg+0x813/0xb40
[  622.626627][T28701]        ____sys_sendmsg+0x972/0x9f0
[  622.628774][T28701]        ___sys_sendmsg+0x2a5/0x360
[  622.630832][T28701]        __x64_sys_sendmsg+0x1bd/0x2a0
[  622.633080][T28701]        do_syscall_64+0x15f/0xf80
[  622.635171][T28701]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.637768][T28701] 
[  622.637768][T28701] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  622.641225][T28701]        blk_alloc_queue+0x546/0x680
[  622.643388][T28701]        __blk_mq_alloc_disk+0x197/0x390
[  622.645636][T28701]        nbd_dev_add+0x499/0xb50
[  622.647732][T28701]        nbd_init+0x168/0x1f0
[  622.649675][T28701]        do_one_initcall+0x250/0x870
[  622.651856][T28701]        do_initcall_level+0x104/0x190
[  622.654035][T28701]        do_initcalls+0x59/0xa0
[  622.655757][T28701]        kernel_init_freeable+0x2a6/0x3e0
[  622.657613][T28701]        kernel_init+0x1d/0x1d0
[  622.659224][T28701]        ret_from_fork+0x514/0xb70
[  622.660888][T28701]        ret_from_fork_asm+0x1a/0x30
[  622.662623][T28701] 
[  622.662623][T28701] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  622.665047][T28701]        __lock_acquire+0x15a5/0x2cf0
[  622.666968][T28701]        lock_acquire+0x106/0x350
[  622.668644][T28701]        fs_reclaim_acquire+0x71/0x100
[  622.670474][T28701]        __kmalloc_cache_noprof+0x40/0x660
[  622.672356][T28701]        __ipv6_dev_mc_inc+0x44f/0xa50
[  622.674149][T28701]        ipv6_add_dev+0xe34/0x13a0
[  622.675909][T28701]        addrconf_notify+0x771/0x1050
[  622.677687][T28701]        notifier_call_chain+0x1ad/0x3d0
[  622.679508][T28701]        register_netdevice+0x18c9/0x1ec0
[  622.681356][T28701]        l2tp_eth_create+0x7f7/0xbe0
[  622.683058][T28701]        l2tp_nl_cmd_session_create+0x766/0xc60
[  622.685191][T28701]        genl_family_rcv_msg_doit+0x22a/0x330
[  622.687555][T28701]        genl_rcv_msg+0x61c/0x7a0
[  622.689242][T28701]        netlink_rcv_skb+0x232/0x4b0
[  622.690961][T28701]        genl_rcv+0x28/0x40
[  622.692455][T28701]        netlink_unicast+0x75c/0x8e0
[  622.694216][T28701]        netlink_sendmsg+0x813/0xb40
[  622.696312][T28701]        ____sys_sendmsg+0x972/0x9f0
[  622.698315][T28701]        ___sys_sendmsg+0x2a5/0x360
[  622.699943][T28701]        __x64_sys_sendmsg+0x1bd/0x2a0
[  622.702084][T28701]        do_syscall_64+0x15f/0xf80
[  622.704128][T28701]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.706648][T28701] 
[  622.706648][T28701] other info that might help us debug this:
[  622.706648][T28701] 
[  622.710061][T28701] Chain exists of:
[  622.710061][T28701]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  622.710061][T28701] 
[  622.714081][T28701]  Possible unsafe locking scenario:
[  622.714081][T28701] 
[  622.716561][T28701]        CPU0                    CPU1
[  622.718286][T28701]        ----                    ----
[  622.720011][T28701]   lock(&idev->mc_lock);
[  622.721453][T28701]                                lock(sk_lock-AF_INET6);
[  622.723717][T28701]                                lock(&idev->mc_lock);
[  622.726168][T28701]   lock(fs_reclaim);
[  622.727770][T28701] 
[  622.727770][T28701]  *** DEADLOCK ***
[  622.727770][T28701] 
[  622.730366][T28701] 4 locks held by syz.0.6658/28701:
[  622.731957][T28701]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  622.734486][T28701]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  622.737453][T28701]  #2: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: l2tp_eth_create+0x7cf/0xbe0
[  622.740399][T28701]  #3: ffff888012cc2530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  622.743460][T28701] 
[  622.743460][T28701] stack backtrace:
[  622.745518][T28701] CPU: 0 UID: 0 PID: 28701 Comm: syz.0.6658 Not tainted syzkaller #0 PREEMPT(full) 
[  622.745530][T28701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  622.745536][T28701] Call Trace:
[  622.745542][T28701]  <TASK>
[  622.745547][T28701]  dump_stack_lvl+0xe8/0x150
[  622.745566][T28701]  print_circular_bug+0x2e1/0x300
[  622.745585][T28701]  check_noncircular+0x12e/0x150
[  622.745606][T28701]  __lock_acquire+0x15a5/0x2cf0
[  622.745623][T28701]  ? rcu_is_watching+0x15/0xb0
[  622.745638][T28701]  ? trace_contention_end+0x3d/0x140
[  622.745656][T28701]  ? __mutex_lock+0x319/0x1550
[  622.745676][T28701]  ? __kmalloc_cache_noprof+0x40/0x660
[  622.745691][T28701]  lock_acquire+0x106/0x350
[  622.745700][T28701]  ? __kmalloc_cache_noprof+0x40/0x660
[  622.745716][T28701]  ? __pfx___mutex_lock+0x10/0x10
[  622.745732][T28701]  fs_reclaim_acquire+0x71/0x100
[  622.745748][T28701]  ? __kmalloc_cache_noprof+0x40/0x660
[  622.745764][T28701]  __kmalloc_cache_noprof+0x40/0x660
[  622.745780][T28701]  ? __ipv6_dev_mc_inc+0x44f/0xa50
[  622.745794][T28701]  __ipv6_dev_mc_inc+0x44f/0xa50
[  622.745807][T28701]  ? addrconf_sysctl_register+0x1a9/0x1c0
[  622.745825][T28701]  ipv6_add_dev+0xe34/0x13a0
[  622.745842][T28701]  addrconf_notify+0x771/0x1050
[  622.745859][T28701]  notifier_call_chain+0x1ad/0x3d0
[  622.745877][T28701]  register_netdevice+0x18c9/0x1ec0
[  622.745900][T28701]  ? __pfx_register_netdevice+0x10/0x10
[  622.745918][T28701]  ? __pfx_l2tp_session_register+0x10/0x10
[  622.745938][T28701]  ? l2tp_eth_create+0x383/0xbe0
[  622.745956][T28701]  l2tp_eth_create+0x7f7/0xbe0
[  622.745974][T28701]  ? l2tp_eth_create+0x383/0xbe0
[  622.746029][T28701]  ? __pfx_l2tp_eth_create+0x10/0x10
[  622.746049][T28701]  l2tp_nl_cmd_session_create+0x766/0xc60
[  622.746067][T28701]  ? rcu_is_watching+0x15/0xb0
[  622.746085][T28701]  ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10
[  622.746104][T28701]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  622.746120][T28701]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  622.746135][T28701]  genl_family_rcv_msg_doit+0x22a/0x330
[  622.746149][T28701]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  622.746172][T28701]  ? bpf_lsm_capable+0x9/0x20
[  622.746188][T28701]  ? security_capable+0x7e/0x2c0
[  622.746205][T28701]  genl_rcv_msg+0x61c/0x7a0
[  622.746220][T28701]  ? __pfx_genl_rcv_msg+0x10/0x10
[  622.746233][T28701]  ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10
[  622.746253][T28701]  netlink_rcv_skb+0x232/0x4b0
[  622.746270][T28701]  ? __pfx_genl_rcv_msg+0x10/0x10
[  622.746284][T28701]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  622.746303][T28701]  ? down_read+0x270/0x2e0
[  622.746314][T28701]  ? genl_rcv+0xd/0x40
[  622.746326][T28701]  genl_rcv+0x28/0x40
[  622.746337][T28701]  netlink_unicast+0x75c/0x8e0
[  622.746354][T28701]  netlink_sendmsg+0x813/0xb40
[  622.746372][T28701]  ? __pfx_netlink_sendmsg+0x10/0x10
[  622.746389][T28701]  ? aa_sock_msg_perm+0xf1/0x1b0
[  622.746405][T28701]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  622.746422][T28701]  ____sys_sendmsg+0x972/0x9f0
[  622.746440][T28701]  ? __might_fault+0xaf/0x130
[  622.746457][T28701]  ? __pfx_____sys_sendmsg+0x10/0x10
[  622.746474][T28701]  ? import_iovec+0x73/0xa0
[  622.746491][T28701]  ___sys_sendmsg+0x2a5/0x360
[  622.746506][T28701]  ? try_to_wake_up+0x7f2/0x1380
[  622.746524][T28701]  ? __pfx____sys_sendmsg+0x10/0x10
[  622.746541][T28701]  ? futex_wait+0x2a2/0x390
[  622.746562][T28701]  ? file_init_path+0x434/0x590
[  622.746577][T28701]  __x64_sys_sendmsg+0x1bd/0x2a0
[  622.746593][T28701]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  622.746611][T28701]  ? rcu_is_watching+0x15/0xb0
[  622.746627][T28701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.746641][T28701]  do_syscall_64+0x15f/0xf80
[  622.746658][T28701]  ? trace_irq_disable+0x3b/0x140
[  622.746677][T28701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.746689][T28701] RIP: 0033:0x7f8c7119cdd9
[  622.746702][T28701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  622.746713][T28701] RSP: 002b:00007f8c6f3ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  622.746728][T28701] RAX: ffffffffffffffda RBX: 00007f8c71415fa0 RCX: 00007f8c7119cdd9
[  622.746740][T28701] RDX: 0000000000008080 RSI: 0000200000000140 RDI: 0000000000000007
[  622.746749][T28701] RBP: 00007f8c71232d69 R08: 0000000000000000 R09: 0000000000000000
[  622.746757][T28701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  622.746765][T28701] R13: 00007f8c71416038 R14: 00007f8c71415fa0 R15: 00007ffcf8dd91f8
[  622.746779][T28701]  </TASK>
[  629.629474][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
