last executing test programs:

1.621110323s ago: executing program 2 (id=3340):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0x4}}}, 0x24}}, 0x4000010)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$inet(0x2, 0x2, 0x1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000040)={'wg0\x00', <r5=>0x0})
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000002c0)="96bced8af9c8", 0x6}], 0x2, &(0x7f00000000c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @broadcast}}}], 0x38}, 0x42090)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x11)

1.510829622s ago: executing program 2 (id=3341):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x9000, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)=0x1)
ioctl$PPPIOCGNPMODE(r7, 0x4008744b, &(0x7f0000000100)={0x281, 0x2})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0)

1.428463482s ago: executing program 2 (id=3344):
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48)
r1 = socket$inet(0x2, 0x3, 0x8) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300090200000000000000fdffffff39ba462b047fcc76a7779acc3be83229b033e857c9bc3b2656aeca6a05ebd3830f5025bacfc1a09f861545d4dc"], 0x10}, 0x1b}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2, 0x81}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0xfffffbff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r5, 0x1)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @empty, 0x3}, 0x1c) (async)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0100002c00010000000000fcdbdf250a01f28004001800140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008002cd943c2c5"], 0x20}, 0x1, 0x0, 0x0, 0x24004801}, 0x40008) (async, rerun: 64)
sendmmsg$inet6(r5, &(0x7f0000001280)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x10, @loopback, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x3, 0x240c089d) (async)
sendfile(r6, r5, &(0x7f0000000380)=0xfffffffffffffff9, 0x5) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000030000000000000804000000040000000000000408000000040000000000000c0000000000000000000000030000000001003f236888d850adcdffff002e615f5f00e66948390f61f00039f85d4f8b736d4c953d0184592b840199b10bc99280c8329594132a29afbc5040ea21e5bc8f5d9cc7a700b23e4fc67d5c3c16fdb8235eea3e9afba6d4dd77f3dfa512250dd3e8f32e23b5d13a4fb953a4f11ffdd75499ec6f799a4c04980d766032257da6c1532b18821fa461482d41a3"], 0x0, 0x5a, 0x0, 0x1}, 0x28) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r7=>0x0}) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000000340)="0700000000000000bcf7d1725c60", 0x0, 0x808005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.359477413s ago: executing program 2 (id=3345):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x9, 0x80000000}}]}}}]}, 0x58}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14)

1.267076445s ago: executing program 1 (id=3347):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = socket$igmp(0x2, 0x3, 0x2)
socket$unix(0x1, 0x2, 0x0)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x4, 0x0, 0x16, 0x4007ff, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x503, 0xfffffffe, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x400, 0x8810}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$unix(0x1, 0x2, 0x0) (async)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x4, 0x0, 0x16, 0x4007ff, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x503, 0xfffffffe, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x400, 0x8810}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async)

1.210106175s ago: executing program 1 (id=3348):
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x20000000, 0x10001, 0x8}, 0x4b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2)
close(r4)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c001400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x4c, 0x1a, 0x148, 0x73, 0x318, 0x258, 0x258, 0x318, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73, 0xc0}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x2, 0x0, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x1, "309e9931c11200107fdd56aa1439c5f53ddb2700e9afeb5815518d63f337"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffff8793, 'system_u:object_r:apt_lock_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x448)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r8, @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001750c000300088b955cc9306eea05001100"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x60040090)

1.149110961s ago: executing program 1 (id=3350):
socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000380)={&(0x7f0000000300)='wrr\x00', &(0x7f0000000340)='wrr\x00', 0x6})
unshare(0x22020600)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="000429"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0xfca2238337819a4d)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x24, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xc9, 0x12d5f, 0x3}}, 0x44)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$kcm(0x29, 0x5, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x3, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x0, 0xc9, 0x80012d58, 0x12d5c}}, 0x44)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="3db47ecbc591879fa5b13226c088074da7034127bee5a388af8255597b97a9a927ca83cd013643431d5ce2f278ac056be2b726a915173e9d538ff7415865849bdeb34bea81", 0x45, 0x200c0004, &(0x7f0000001100)={0x2, 0x4e22, @empty}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a310f1d00000900010073797a31000000001c0003"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400c000"/14], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)

1.148562272s ago: executing program 2 (id=3351):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x40000000}, 0x1c)

1.047585779s ago: executing program 1 (id=3354):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="c289060000000000240012800b00010067656e6576650000140002800600050080b805dd9941599e05c28b4e2200000500080001000000"], 0x44}}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x20004800)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000340)=0xfb78, 0x4)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
r5 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001f80)={0x2c, 0x35, 0x1, 0x70bd25, 0x25dfdbfd, {0x7}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x92}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000001c0)=0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000b400"/28], 0x50)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYRES8=r7, @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x34040017}, 0x4c080)

340.179649ms ago: executing program 0 (id=3368):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000580)}, 0x40011f01)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d00000000000000000300596df0610000000000000a020000000000"], 0x0, 0x46, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/257, 0x4a, 0x101, 0x6}, 0x28)
sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="6a8662366d9aaa4377df89a4cb5ae5bb8648404cd6fbbed4053818e06600254bbd631ee1d420a7aed5f1b8305b8dee9beb8b10754d727d9d41bed3e1ceac7b7207fee3ea920d70331c73c61bc0c5bea11f7299b3fb09406d5493", 0x81}], 0x1}, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

250.764914ms ago: executing program 0 (id=3369):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x0, 0x981, 0x2, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x0)

249.690246ms ago: executing program 2 (id=3370):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000070000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000004400038040000380140001007663616e3000000000000000000000001400010076657468315f746f5f626f6e64"], 0x110}}, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async, rerun: 32)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) (rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r7=>0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4010)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0)

169.345797ms ago: executing program 0 (id=3371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd700006dcdf250100000008000100", @ANYRES32=r1], 0x60}, 0x1, 0x400000000000000}, 0x84)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000e00000000000000008500000053000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r6}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3}, &(0x7f00000009c0), &(0x7f0000000a00)=r5}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3, <r7=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090000004000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'erspan0\x00', <r9=>0x0, 0x8000, 0x20, 0xb6c, 0x0, {{0x2a, 0x4, 0x2, 0x18, 0xa8, 0x67, 0x0, 0x1, 0x4, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x6d, 0x1, 0x7, [{@multicast2, 0x3}, {@remote, 0x2}]}, @ssrr={0x89, 0xb, 0xe3, [@dev={0xac, 0x14, 0x14, 0x14}, @empty]}, @lsrr={0x83, 0xf, 0xfa, [@dev={0xac, 0x14, 0x14, 0x18}, @empty, @private=0xa010100]}, @lsrr={0x83, 0x7, 0xa6, [@dev={0xac, 0x14, 0x14, 0x29}]}, @lsrr={0x83, 0x17, 0x64, [@loopback, @multicast1, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x39, 0x3, [{0x2, 0x10, "8901ead04b7b69043441c7cb5fdf"}, {0x5, 0xb, "9426fd3df74a66a7e4"}, {0x0, 0x7, "a810aeb26b"}, {0x5, 0x8, "b2faea21abcc"}, {0x0, 0x3, 'r'}, {0x7, 0x6, "c4675144"}]}, @lsrr={0x83, 0xf, 0xf0, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}]}]}}}}})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000017c0)={0x1030, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @nested={0x1008, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}, @generic="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"]}, @generic="1f5f"]}, 0x1030}], 0x1, 0x0, 0x0, 0x8011}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x400, 0x6, 0x9, 0x2000000, 0xd985, 0xc}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x2d55, 0x3, 0x80000001, 0x420, 0x8}}]}}}]}, 0x78}}, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000540)={@local, @dev, <r13=>0x0}, &(0x7f0000000580)=0xc)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10021c14}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x50)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000003080102000000000000000000000009050003000600e3e60b6f2d3b8c30ea1d3fbb0000"], 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x0)

163.16825ms ago: executing program 0 (id=3372):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0xa}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x4, 0xfd}]}, &(0x7f0000000240)='GPL\x00', 0x8}, 0x94)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0)
sendmmsg$sock(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18101040}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780000c3789e3b8577215c1d45994abc4b2b4200", @ANYRES16=r5, @ANYBLOB="00032bbd7000fbdbdf25030000002c000280060002004e240000060002004e210000080007008000000005000d0001000000080004000600000030000380080005000a01010014000600ff010000000000000000000000000001060007004e20000006000400020000000800060009000000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000010000000200000f"], 0x0, 0x52, 0x0, 0x8}, 0x28)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000000600020000b0000008000a000000000008001800ac1414aa080019"], 0x58}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf2508000000050014000400000005000600050000000800190000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x40004)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0xa}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x4, 0xfd}]}, &(0x7f0000000240)='GPL\x00', 0x8}, 0x94) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
shutdown(r1, 0x0) (async)
recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) (async)
sendmmsg$sock(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004004) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) (async)
sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18101040}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780000c3789e3b8577215c1d45994abc4b2b4200", @ANYRES16=r5, @ANYBLOB="00032bbd7000fbdbdf25030000002c000280060002004e240000060002004e210000080007008000000005000d0001000000080004000600000030000380080005000a01010014000600ff010000000000000000000000000001060007004e20000006000400020000000800060009000000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x15) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000010000000200000f"], 0x0, 0x52, 0x0, 0x8}, 0x28) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000000600020000b0000008000a000000000008001800ac1414aa080019"], 0x58}}, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf2508000000050014000400000005000600050000000800190000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x40004) (async)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) (async)

162.346053ms ago: executing program 1 (id=3373):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20004094)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair(0xf, 0xa, 0x7f, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x58, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc4}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000080)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x18c, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8014)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="280100001700010000000000000000007f000001000000000000000000000000000000000000000000000000000000000000ffff0a010101ac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff000000000000000000000000000000000100000300000000f9ffffff00000000000000000800"], 0x128}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000440)={<r7=>r1, &(0x7f0000000240)='\xff\xff', 0x12400, &(0x7f0000000280)={@_ha_fsid={[0x9, 0x7]}, {0x5, 0x43, 0x401, 0x1}}, 0x3, &(0x7f0000000300), &(0x7f0000000400)=0x9})
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000000000000020000003441b4339a17466c", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r2, @ANYBLOB="000000000100"/28, @ANYRES32=r6, @ANYBLOB="000000000600"/28, @ANYRES32=r2, @ANYBLOB="000000000100"/28])
r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r13 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r13, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
bind$inet6(r13, &(0x7f0000000000)={0xa, 0x0, 0xd, @empty, 0x4}, 0x1c)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x176bafcf4d0ff629, 0x4}}}]}, 0x3c}}, 0x4000010)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r12, r15, 0x2d, 0x0, @val=@perf_event={0x6}}, 0x18)
sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x28, r11, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x76b60f1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x4054)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000000c0)={r6, r6, 0x206, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'})

70.121111ms ago: executing program 0 (id=3374):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000340)}, 0x10) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async)
socket$packet(0x11, 0xa, 0x300)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xb8}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0xd}, &(0x7f0000000040)=0x8) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r6 = accept4(r1, 0x0, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000040))
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r8, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) (async)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socket(0x400000000010, 0x3, 0x4) (async)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

69.736708ms ago: executing program 1 (id=3375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000300)="00000000020001000003a90830332b35", 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@gettaction={0x0, 0x32, 0x400, 0x70bd2e, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x9}}, {0x0, 0x412, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048890}, 0x40)

0s ago: executing program 0 (id=3376):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x58000000}, 0x1c)

kernel console output (not intermixed with test programs):

172.20.20.170, load rds_tcp or rds_rdma?
[  216.414788][T12232] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1877'.
[  216.419444][T12232] netlink: 'syz.0.1877': attribute type 2 has an invalid length.
[  216.586483][T12245] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1882'.
[  216.592680][T12245] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1882'.
[  216.717380][T12253] netlink: 'syz.2.1884': attribute type 15 has an invalid length.
[  216.738871][T12256] bond52: option packets_per_slave: invalid value (1048582)
[  216.741363][T12256] bond52: option packets_per_slave: allowed values 0 - 65535
[  216.746548][T12256] bond52 (unregistering): Released all slaves
[  216.765392][T12261] netlink: 'syz.2.1884': attribute type 15 has an invalid length.
[  216.766626][T12253] netlink: 'syz.2.1884': attribute type 15 has an invalid length.
[  216.942672][T12277] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  217.204419][T12302] 8021q: adding VLAN 0 to HW filter on device bond24
[  217.224872][T12302] bond24: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  217.306144][T12310] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  217.311174][ T7645] bond24: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  217.459580][   T13] bond24: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  217.573027][T12321] ipvlan2: entered promiscuous mode
[  217.592271][T12310] syzkaller0: mtu less than device minimum
[  217.731123][T12337] : renamed from bond0 (while UP)
[  217.818145][T12344] bond0: entered promiscuous mode
[  217.822098][T12344] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.824740][T12344] bridge0: port 3(bond0) entered blocking state
[  217.827776][T12344] bridge0: port 3(bond0) entered disabled state
[  217.830949][T12344] bond0: entered allmulticast mode
[  217.835056][T12344] bridge0: port 3(bond0) entered blocking state
[  217.837086][T12344] bridge0: port 3(bond0) entered listening state
[  217.998458][T12351] dvmrp0: entered allmulticast mode
[  218.085085][T12365] netlink: 'syz.0.1915': attribute type 4 has an invalid length.
[  218.199068][T12372] veth0: entered promiscuous mode
[  218.206339][T12371] veth0: left promiscuous mode
[  218.273247][T12374] 8021q: adding VLAN 0 to HW filter on device bond53
[  218.337889][T12377] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  218.354706][ T6063] bridge0: port 3(bond0) entered disabled state
[  218.506196][T12386] xfrm2: entered allmulticast mode
[  218.597862][T12400] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.600638][T12400] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.626234][T12400] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.628661][T12400] bridge0: port 2(bridge_slave_1) entered listening state
[  218.631287][T12400] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.633903][T12400] bridge0: port 1(bridge_slave_0) entered listening state
[  218.645195][T12400] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.647402][T12400] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.814370][T12421] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  218.937426][T12432] validate_nla: 4 callbacks suppressed
[  218.937444][T12432] netlink: 'syz.2.1935': attribute type 1 has an invalid length.
[  218.973663][T12432] 8021q: adding VLAN 0 to HW filter on device bond26
[  218.997775][T12432] vlan1: entered allmulticast mode
[  219.001783][T12432] bond26: (slave vlan1): Error -34 calling dev_set_mtu
[  219.133388][T12441] openvswitch: netlink: Multiple metadata blocks provided
[  219.183907][T12446] netlink: 'syz.2.1940': attribute type 1 has an invalid length.
[  219.211788][T12446] 8021q: adding VLAN 0 to HW filter on device bond27
[  219.241351][T12446] bond27: (slave veth15): Enslaving as an active interface with a down link
[  219.342083][T12463] __nla_validate_parse: 35 callbacks suppressed
[  219.342099][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1945'.
[  219.347580][T12463] bond0: ARP target 170.170.170.170 is already present
[  219.350504][T12463] bond0: option arp_ip_target: invalid value (2863311530)
[  219.504284][T12469] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1948'.
[  219.532312][T12472] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1949'.
[  219.545078][T12472] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  219.547382][T12472] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  219.553725][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'.
[  219.607017][T12478] netlink: 'syz.0.1952': attribute type 1 has an invalid length.
[  219.616326][T12478] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  219.619578][T12478] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  219.674304][T12488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1955'.
[  219.684322][T12488] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1955'.
[  219.688153][T12488] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.691263][T12488] bridge0: port 2(bridge_slave_1) entered listening state
[  219.694804][T12488] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.698507][T12488] bridge0: port 1(bridge_slave_0) entered listening state
[  219.706579][T12488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1955'.
[  219.713152][T12488] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.716249][T12488] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.751252][T12493]  speed is unknown, defaulting to 1000
[  219.774301][T12496] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1957'.
[  219.778924][T12496] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.1957'.
[  220.047589][T12509] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1960'.
[  220.052720][T12509] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  220.491449][T12526]  speed is unknown, defaulting to 1000
[  220.493917][T12537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.654925][T12545] netlink: 'syz.1.1969': attribute type 1 has an invalid length.
[  220.683972][T12545] bond25: entered promiscuous mode
[  220.685984][T12545] 8021q: adding VLAN 0 to HW filter on device bond25
[  220.715836][T12545] bond25: (slave bridge18): making interface the new active one
[  220.719333][T12545] bridge18: entered promiscuous mode
[  220.722655][T12545] bond25: (slave bridge18): Enslaving as an active interface with an up link
[  220.803802][T12549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  220.840382][T12551] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  221.449483][T12565] netlink: 'syz.2.1975': attribute type 11 has an invalid length.
[  221.455667][T12558] veth0_virt_wifi: entered allmulticast mode
[  221.501498][T12570] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  221.565669][T12580] openvswitch: netlink: IPv6 tunnel dst address is zero
[  221.581522][T12580] netem: change failed
[  221.585277][T12580] netlink: 'syz.2.1977': attribute type 5 has an invalid length.
[  221.848699][T12589] bond26: entered allmulticast mode
[  222.110068][T12601] netlink: 'syz.1.1983': attribute type 10 has an invalid length.
[  222.113519][T12601] ipvlan0: entered allmulticast mode
[  222.115391][T12601] veth0_vlan: entered allmulticast mode
[  222.448918][T12619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.593282][T12626] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  222.604866][T12626] bond5: (slave lo): Enslaving as an active interface with an up link
[  222.613842][T12626] A link change request failed with some changes committed already. Interface 76 may have been left with an inconsistent configuration, please check.
[  222.733764][T12635] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  222.945178][T12662] netlink: 'syz.2.1996': attribute type 1 has an invalid length.
[  223.040102][T12671] netlink: 'syz.0.1999': attribute type 1 has an invalid length.
[  223.063110][T12671] bond54: entered promiscuous mode
[  223.066254][T12671] 8021q: adding VLAN 0 to HW filter on device bond54
[  223.085467][T12671] bond54: (slave bridge29): making interface the new active one
[  223.088114][T12671] bridge29: entered promiscuous mode
[  223.091320][T12671] bond54: (slave bridge29): Enslaving as an active interface with an up link
[  223.127548][T12675] netlink: 'syz.0.2000': attribute type 1 has an invalid length.
[  223.134644][T12669]  speed is unknown, defaulting to 1000
[  223.178251][T12675] bond55: (slave bridge30): making interface the new active one
[  223.185046][T12675] bond55: (slave bridge30): Enslaving as an active interface with an up link
[  223.673094][T12704] xt_hashlimit: size too large, truncated to 1048576
[  224.400931][T12711] __nla_validate_parse: 44 callbacks suppressed
[  224.400953][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'.
[  224.460049][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'.
[  224.463745][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'.
[  224.468080][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'.
[  224.472203][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'.
[  224.476033][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'.
[  224.928158][T12732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2015'.
[  225.423219][T12741] validate_nla: 1 callbacks suppressed
[  225.423241][T12741] netlink: 'syz.2.2018': attribute type 9 has an invalid length.
[  225.929401][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2020'.
[  225.965497][T12747] 8021q: adding VLAN 0 to HW filter on device bond27
[  226.036744][T12747] bond27: entered promiscuous mode
[  226.039070][T12747] bond27: entered allmulticast mode
[  226.055921][T12754]  speed is unknown, defaulting to 1000
[  226.078864][T12747] team_slave_1: entered promiscuous mode
[  226.212189][T12761] raw_sendmsg: syz.1.2023 forgot to set AF_INET. Fix it!
[  226.232185][T12756] netlink: 'syz.2.2022': attribute type 4 has an invalid length.
[  226.239406][T12756] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2022'.
[  226.395670][T12771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  226.405894][T12769] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2024'.
[  227.014998][T12808] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.018256][T12808] bridge0: port 2(bridge_slave_1) entered listening state
[  227.021693][T12808] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.024579][T12808] bridge0: port 1(bridge_slave_0) entered listening state
[  227.036721][T12808] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.039386][T12808] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.275311][T12824] netlink: 'syz.0.2037': attribute type 4 has an invalid length.
[  227.331615][T12824] netlink: 'syz.0.2037': attribute type 4 has an invalid length.
[  227.355153][T12824] netlink: 'syz.0.2037': attribute type 4 has an invalid length.
[  227.367246][T12830] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  227.377844][T12834] netlink: 'syz.0.2037': attribute type 4 has an invalid length.
[  227.380700][T12830] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  227.498234][T12849] syzkaller0: entered promiscuous mode
[  227.501123][T12849] syzkaller0: entered allmulticast mode
[  228.410020][T12873] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  228.427220][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.435726][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.441585][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.445713][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.604534][T12890] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.608347][T12890] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  228.613308][T12890] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  228.644988][T12890] tipc: Resetting bearer <eth:syzkaller0>
[  228.742502][T12896] netlink: 'syz.2.2054': attribute type 1 has an invalid length.
[  228.763047][T12896] bond28: entered promiscuous mode
[  228.765153][T12896] 8021q: adding VLAN 0 to HW filter on device bond28
[  228.783605][T12896] bond28: (slave bridge19): making interface the new active one
[  228.786575][T12896] bridge19: entered promiscuous mode
[  228.790356][T12896] bond28: (slave bridge19): Enslaving as an active interface with an up link
[  228.855578][T12899] netlink: 'syz.2.2055': attribute type 1 has an invalid length.
[  228.879079][T12899] 8021q: adding VLAN 0 to HW filter on device bond29
[  228.890618][T12899] vlan0: entered allmulticast mode
[  228.893157][T12899] bond29: (slave vlan0): Error -34 calling dev_set_mtu
[  229.195905][T12917] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  229.239636][T12919] netlink: 'syz.2.2062': attribute type 9 has an invalid length.
[  229.242310][T12920] netlink: 'syz.2.2062': attribute type 9 has an invalid length.
[  229.295046][T12924] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.306055][T12924] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.451840][T12936] __nla_validate_parse: 22 callbacks suppressed
[  229.451861][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2067'.
[  229.469457][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2067'.
[  229.533739][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'.
[  229.605825][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  229.615710][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  229.624283][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  229.628634][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  229.641736][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  229.648158][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  229.653534][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'.
[  229.658512][T12953] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.661457][T12953] bridge0: port 2(bridge_slave_1) entered listening state
[  229.664775][T12953] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.667925][T12953] bridge0: port 1(bridge_slave_0) entered listening state
[  229.708615][T12953] veth0_virt_wifi: left allmulticast mode
[  229.713006][T12953] veth0_macvtap: left allmulticast mode
[  229.716643][T12953] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  229.871430][T12964] bond30: entered promiscuous mode
[  229.982840][T12978] 8021q: adding VLAN 0 to HW filter on device bond31
[  230.331390][T13000] tipc: Enabled bearer <eth:vcan0>, priority 10
[  230.408111][T13002] veth19: entered allmulticast mode
[  230.517120][T13010] validate_nla: 2 callbacks suppressed
[  230.517142][T13010] netlink: 'syz.0.2088': attribute type 1 has an invalid length.
[  230.571883][T13010] bond56: entered promiscuous mode
[  230.574112][T13010] 8021q: adding VLAN 0 to HW filter on device bond56
[  230.594014][T13010] veth21: entered promiscuous mode
[  230.596167][T13010] veth21: entered allmulticast mode
[  230.602462][T13010] bond56: (slave veth21): Enslaving as a backup interface with a down link
[  230.647249][T13016] xt_HMARK: proto mask must be zero with L3 mode
[  230.663933][T13018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.738040][T13023] ip6tnl5: entered allmulticast mode
[  230.743498][   T13] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  230.743761][T13018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.908847][T13030] bond28 (unregistering): Released all slaves
[  231.056023][T13036] syzkaller1: entered promiscuous mode
[  231.057840][T13036] syzkaller1: entered allmulticast mode
[  231.114856][T13038] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  231.194522][T13040] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.196864][T13040] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.218802][T13040] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.221191][T13040] bridge0: port 2(bridge_slave_1) entered listening state
[  231.223563][T13040] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.225825][T13040] bridge0: port 1(bridge_slave_0) entered listening state
[  231.235736][T13040] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.237997][T13040] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.244451][T13042] netlink: 'syz.1.2098': attribute type 1 has an invalid length.
[  231.285664][T13042] bond28: entered promiscuous mode
[  231.291384][T13042] 8021q: adding VLAN 0 to HW filter on device bond28
[  231.329558][T13042] bond28: (slave bridge19): making interface the new active one
[  231.332916][T13042] bridge19: entered promiscuous mode
[  231.335730][T13042] bond28: (slave bridge19): Enslaving as an active interface with an up link
[  231.685206][T13065] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.693470][T13065] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  231.828454][T13100] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  231.834237][T13100] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  232.002193][T13119] netlink: 'syz.1.2119': attribute type 9 has an invalid length.
[  232.080563][T13123] sit4: entered allmulticast mode
[  232.142682][T13128] netlink: 'syz.1.2123': attribute type 1 has an invalid length.
[  232.158666][T13128] 8021q: adding VLAN 0 to HW filter on device bond29
[  232.520277][T13148] netlink: 'syz.2.2129': attribute type 1 has an invalid length.
[  232.543540][T13148] bond32: entered promiscuous mode
[  232.545863][T13148] 8021q: adding VLAN 0 to HW filter on device bond32
[  232.563995][T13148] macvtap1: entered allmulticast mode
[  232.584135][T13148] bond32: (slave bridge20): making interface the new active one
[  232.586999][T13148] bridge20: entered promiscuous mode
[  232.592004][T13148] bond32: (slave bridge20): Enslaving as an active interface with an up link
[  232.596933][T13151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.600408][T13151] syzkaller0: entered promiscuous mode
[  232.602603][T13151] syzkaller0: entered allmulticast mode
[  232.643929][T13151] netlink: 'syz.1.2130': attribute type 1 has an invalid length.
[  232.714781][T13150] tipc: Resetting bearer <eth:syzkaller0>
[  232.741057][T13150] tipc: Disabling bearer <eth:syzkaller0>
[  233.058901][T13183] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  233.386186][T13206] Cannot find set identified by id 65534 to match
[  233.499920][T13213] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  233.502397][T13213] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  233.642196][T13227] netlink: 'syz.1.2152': attribute type 1 has an invalid length.
[  233.683200][T13234] netlink: 'syz.0.2154': attribute type 1 has an invalid length.
[  233.689435][T13227] bond30: (slave bridge20): making interface the new active one
[  233.693727][T13227] bond30: (slave bridge20): Enslaving as an active interface with an up link
[  233.757734][T13232] bond30: (slave gretap2): Enslaving as an active interface with an up link
[  233.765959][T13227] macvlan3: entered promiscuous mode
[  233.767840][T13227] macvlan3: entered allmulticast mode
[  233.771387][T13227] bond30: entered promiscuous mode
[  233.773264][T13227] bridge20: entered promiscuous mode
[  233.778309][T13227] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  233.781522][T13227] bond30: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  233.786853][T13227] bond30: left promiscuous mode
[  233.788339][T13227] bridge20: left promiscuous mode
[  233.817118][T13228] macvlan3: entered promiscuous mode
[  233.818951][T13228] macvlan3: entered allmulticast mode
[  233.821536][T13228] bond30: entered promiscuous mode
[  233.823130][T13228] bridge20: entered promiscuous mode
[  233.825298][T13228] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  233.828328][T13228] bond30: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  233.834796][T13228] bond30: left promiscuous mode
[  233.836973][T13228] bridge20: left promiscuous mode
[  233.864453][T13240] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  233.867445][T13240] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  234.059932][T13253] tipc: Resetting bearer <eth:vcan0>
[  234.070823][T13253] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  234.344460][T13282] netlink: 'syz.1.2167': attribute type 1 has an invalid length.
[  234.373822][T13282] 8021q: adding VLAN 0 to HW filter on device bond31
[  234.509720][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  234.533255][T13293] bridge21: entered promiscuous mode
[  234.536069][T13293] bridge21: entered allmulticast mode
[  234.540384][ T6738] block nbd3: Receive control failed (result -32)
[  234.880281][T13308] __nla_validate_parse: 69 callbacks suppressed
[  234.880298][T13308] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2174'.
[  234.887410][T13308] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2174'.
[  234.940272][T13313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2175'.
[  235.131000][T13316] netlink: 'syz.0.2176': attribute type 4 has an invalid length.
[  235.134357][T13316] netlink: 15506 bytes leftover after parsing attributes in process `syz.0.2176'.
[  235.405502][T13325] veth1_to_batadv: entered promiscuous mode
[  235.408184][T13325] veth1_to_batadv: entered allmulticast mode
[  235.727812][T13349] validate_nla: 2 callbacks suppressed
[  235.727829][T13349] netlink: 'syz.1.2184': attribute type 1 has an invalid length.
[  235.745836][T13349] bond32: entered promiscuous mode
[  235.751981][T13349] 8021q: adding VLAN 0 to HW filter on device bond32
[  235.776196][T13349] bond32: (slave bridge21): making interface the new active one
[  235.778873][T13349] bridge21: entered promiscuous mode
[  235.782019][T13349] bond32: (slave bridge21): Enslaving as an active interface with an up link
[  235.992846][T13368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'.
[  235.996413][T13368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'.
[  236.038379][T13367] netlink: 'syz.2.2189': attribute type 1 has an invalid length.
[  236.041973][T13367] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2189'.
[  236.076759][T13372] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2191'.
[  236.080533][T13372] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2191'.
[  236.084376][T13372] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2191'.
[  236.242297][T13387] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  236.491394][T13412] pim6reg1: entered promiscuous mode
[  236.493348][T13412] pim6reg1: entered allmulticast mode
[  236.548480][T13416] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  236.641322][T13423] netlink: 'syz.1.2208': attribute type 1 has an invalid length.
[  236.703264][T13423] 8021q: adding VLAN 0 to HW filter on device bond33
[  237.493970][T13470] openvswitch: netlink: IPv4 tun info is not correct
[  237.598276][T13478] netlink: 'syz.0.2221': attribute type 13 has an invalid length.
[  237.606264][T13478] netlink: 'syz.0.2221': attribute type 17 has an invalid length.
[  237.622118][T13480] bond34: entered promiscuous mode
[  237.626913][T13480] 8021q: adding VLAN 0 to HW filter on device bond34
[  237.651976][T13478] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.654193][T13478] bridge0: port 2(bridge_slave_1) entered listening state
[  237.656401][T13478] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.658637][T13478] bridge0: port 1(bridge_slave_0) entered listening state
[  237.666507][T13478] 8021q: adding VLAN 0 to HW filter on device 
[  237.678057][T13478] veth1_to_batadv: left promiscuous mode
[  237.682010][T13478] veth1_to_batadv: left allmulticast mode
[  237.692182][T13478] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  237.936421][T13500]  speed is unknown, defaulting to 1000
[  238.832923][T13520]  speed is unknown, defaulting to 1000
[  239.065522][T13543] netlink: 'syz.1.2238': attribute type 1 has an invalid length.
[  239.128320][T13533] lo speed is unknown, defaulting to 1000
[  239.180210][T13533] lo speed is unknown, defaulting to 1000
[  239.226643][T13533] lo speed is unknown, defaulting to 1000
[  239.232025][T13533] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  239.248611][T13533] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  239.263168][T13533] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  239.280295][T13533] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  239.298883][T13533] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  239.313178][T13553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  239.427167][T13533] lo speed is unknown, defaulting to 1000
[  239.446776][T13533] lo speed is unknown, defaulting to 1000
[  239.473033][T13533] lo speed is unknown, defaulting to 1000
[  239.501080][T13533] lo speed is unknown, defaulting to 1000
[  239.702188][T13558] syzkaller0: entered promiscuous mode
[  239.707469][T13558] syzkaller0: entered allmulticast mode
[  242.477708][T13568]  speed is unknown, defaulting to 1000
[  242.755340][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  242.784664][T13568] lo speed is unknown, defaulting to 1000
[  242.892991][T13595] openvswitch: netlink: Duplicate or invalid key (type 0).
[  242.895844][T13595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.954572][T13598] netlink: 'syz.0.2250': attribute type 1 has an invalid length.
[  243.011574][T13598] 8021q: adding VLAN 0 to HW filter on device bond59
[  243.047211][T13606] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  243.173343][T13621] netlink: 'syz.0.2253': attribute type 1 has an invalid length.
[  243.243239][T13621] bond60: entered promiscuous mode
[  243.245509][T13621] 8021q: adding VLAN 0 to HW filter on device bond60
[  243.275553][T13621] bond60: (slave bridge32): making interface the new active one
[  243.278449][T13621] bridge32: entered promiscuous mode
[  243.281573][T13621] bond60: (slave bridge32): Enslaving as an active interface with an up link
[  243.434525][T13637] __nla_validate_parse: 14 callbacks suppressed
[  243.434538][T13637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2257'.
[  243.498843][T13641] netlink: 'syz.0.2258': attribute type 3 has an invalid length.
[  243.502103][T13641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2258'.
[  243.515731][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'.
[  243.518426][T13643] gretap0: left allmulticast mode
[  243.561583][T13645] rdma_rxe: rxe_newlink: failed to add lo
[  243.567557][T13645] : left allmulticast mode
[  243.574004][T13645] gre0: left allmulticast mode
[  243.577639][T13645] erspan0: left allmulticast mode
[  243.582520][T13645] ip_vti0: left allmulticast mode
[  243.585386][T13645] ip6_vti0: left allmulticast mode
[  243.663826][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'.
[  243.823762][T13675] netlink: 'syz.1.2268': attribute type 1 has an invalid length.
[  243.855978][T13675] bond35: entered promiscuous mode
[  243.858419][T13675] 8021q: adding VLAN 0 to HW filter on device bond35
[  243.949478][T13682] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.953415][T13682] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  243.956150][T13682] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  243.958794][T13681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.963172][T13684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2270'.
[  243.970048][T13684] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2270'.
[  243.975202][T13684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2270'.
[  244.012129][T13687] netlink: 'syz.0.2271': attribute type 29 has an invalid length.
[  244.016104][T13687] netlink: 'syz.0.2271': attribute type 29 has an invalid length.
[  244.028793][T13689] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  244.030767][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2271'.
[  244.198147][T13691] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  244.235423][T13701] x_tables: duplicate underflow at hook 4
[  244.238880][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'.
[  244.331558][T13709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.339891][T13709] syzkaller0: entered promiscuous mode
[  244.341715][T13709] syzkaller0: entered allmulticast mode
[  244.355172][T13709] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2278'.
[  244.362034][T13709] tipc: Resetting bearer <eth:syzkaller0>
[  244.370326][T13708] tipc: Resetting bearer <eth:syzkaller0>
[  244.386640][T13708] tipc: Disabling bearer <eth:syzkaller0>
[  244.484593][T13719] netlink: 'syz.1.2280': attribute type 21 has an invalid length.
[  245.577205][T13763] netlink: 'syz.0.2295': attribute type 1 has an invalid length.
[  245.611623][T13763] bond61: entered promiscuous mode
[  245.614412][T13763] 8021q: adding VLAN 0 to HW filter on device bond61
[  245.640091][T13763] bond61: (slave bridge33): making interface the new active one
[  245.643327][T13763] bridge33: entered promiscuous mode
[  245.646925][T13763] bond61: (slave bridge33): Enslaving as an active interface with an up link
[  245.853488][T13773] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  245.856006][T13773] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  245.915346][T13779] netlink: 'syz.2.2300': attribute type 4 has an invalid length.
[  245.926262][T13779] netlink: 'syz.2.2300': attribute type 4 has an invalid length.
[  245.939077][T13784] xt_time: invalid argument - start or stop time greater than 23:59:59
[  246.012482][T13792] bond62: entered promiscuous mode
[  246.014567][T13792] 8021q: adding VLAN 0 to HW filter on device bond62
[  246.019986][T13792] ip6t_srh: unknown srh invflags 4000
[  246.147892][T13810] 8021q: VLANs not supported on ip6_vti0
[  246.167760][T13810] 8021q: VLANs not supported on wg1
[  246.363559][T13829] syzkaller0: entered promiscuous mode
[  246.365421][T13829] syzkaller0: entered allmulticast mode
[  246.398599][T13833] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.500608][T13841] 8021q: adding VLAN 0 to HW filter on device bond36
[  246.628769][T13854] 8021q: adding VLAN 0 to HW filter on device bond33
[  246.653470][T13857] bond63: entered promiscuous mode
[  246.655945][T13857] 8021q: adding VLAN 0 to HW filter on device bond63
[  246.686016][T13854] bond33: (slave veth19): Enslaving as an active interface with a down link
[  246.705035][T13857] bond63: (slave bridge35): making interface the new active one
[  246.708591][T13857] bridge35: entered promiscuous mode
[  246.712563][T13857] bond63: (slave bridge35): Enslaving as an active interface with an up link
[  246.728972][T13854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.742498][T13854] bond33: (slave batadv0): making interface the new active one
[  246.746314][T13854] batadv0: entered promiscuous mode
[  246.749122][T13854] bond33: (slave batadv0): Enslaving as an active interface with an up link
[  246.938890][T13881] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.941237][T13881] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.952216][T13881] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.954429][T13881] bridge0: port 2(bridge_slave_1) entered listening state
[  246.956555][T13881] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.958918][T13881] bridge0: port 1(bridge_slave_0) entered listening state
[  246.973914][T13881] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.976476][T13881] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.015122][T13883] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  247.019259][T13883] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  247.034486][T13883] bridge21: entered promiscuous mode
[  247.390480][T13920] bond34: invalid ARP target 0.0.0.0 specified for addition
[  247.392833][T13920] bond34: option arp_ip_target: invalid value (0)
[  247.395948][T13920] bond34 (unregistering): Released all slaves
[  247.544520][T13927] bond34: entered promiscuous mode
[  247.552126][T13927] 8021q: adding VLAN 0 to HW filter on device bond34
[  247.951442][T13942] 8021q: adding VLAN 0 to HW filter on device bond35
[  247.968148][T13942] 8021q: adding VLAN 0 to HW filter on device bond35
[  247.974660][T13942] bond35: (slave geneve3): making interface the new active one
[  247.977875][T13942] bond35: (slave geneve3): Enslaving as an active interface with an up link
[  247.981550][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  247.984378][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  247.988786][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  247.993772][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  248.096187][T13947] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.204547][T13959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.208152][T13959] syzkaller0: entered promiscuous mode
[  248.215863][T13959] syzkaller0: entered allmulticast mode
[  248.244970][T13959] tipc: Resetting bearer <eth:syzkaller0>
[  248.274783][T13959] tipc: Disabling bearer <eth:syzkaller0>
[  248.424017][T13973] bond36 (unregistering): Released all slaves
[  248.455293][T13970]  speed is unknown, defaulting to 1000
[  248.506117][T13975] vlan0: entered promiscuous mode
[  248.521226][T13980] __nla_validate_parse: 29 callbacks suppressed
[  248.521241][T13980] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2362'.
[  248.527303][T13980] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2362'.
[  248.535846][T13980] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2362'.
[  248.540391][T13980] netlink: 580 bytes leftover after parsing attributes in process `syz.2.2362'.
[  248.673865][T13970] lo speed is unknown, defaulting to 1000
[  248.942308][T13990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2365'.
[  248.980993][T13990] lo: Caught tx_queue_len zero misconfig
[  249.028692][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2366'.
[  249.037745][T13994] vlan4: entered promiscuous mode
[  249.040195][T13994] bridge0: entered promiscuous mode
[  249.075626][T13998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2368'.
[  249.078458][T13998] tipc: Resetting bearer <eth:vcan0>
[  249.085206][T13998] tipc: Disabling bearer <eth:vcan0>
[  249.133441][T13999] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2368'.
[  249.308713][T14007] validate_nla: 8 callbacks suppressed
[  249.308731][T14007] netlink: 'syz.0.2369': attribute type 13 has an invalid length.
[  249.317822][T14007] netlink: 'syz.0.2369': attribute type 17 has an invalid length.
[  249.372015][T14011] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2369'.
[  250.116450][T14007] 8021q: adding VLAN 0 to HW filter on device 
[  250.121750][T14007] 8021q: adding VLAN 0 to HW filter on device `
[  250.134513][T14007] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.136780][T14007] bridge0: port 1(bridge_slave_0) entered listening state
[  250.145289][T14007] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.148323][T14007] bridge0: port 2(bridge_slave_1) entered listening state
[  250.170733][T14007] veth1_macvtap: left promiscuous mode
[  250.172995][T14007] veth0_macvtap: left promiscuous mode
[  250.175852][T14007] veth0_macvtap: entered promiscuous mode
[  250.178636][T14007] veth1_macvtap: entered promiscuous mode
[  250.186646][T14007] bridge1: left allmulticast mode
[  250.189862][T14007] 8021q: adding VLAN 0 to HW filter on device bond1
[  250.192784][T14007] bond2: left allmulticast mode
[  250.194542][T14007] 8021q: adding VLAN 0 to HW filter on device bond2
[  250.197452][T14007] bond3: left promiscuous mode
[  250.198939][T14007] bridge2: left promiscuous mode
[  250.203988][T14007] 8021q: adding VLAN 0 to HW filter on device bond3
[  250.207998][T14007] bond4: left promiscuous mode
[  250.211716][T14007] bridge3: left promiscuous mode
[  250.214861][T14007] 8021q: adding VLAN 0 to HW filter on device bond4
[  250.218648][T14007] bridge4: port 1(veth0_to_bond) entered blocking state
[  250.220816][T14007] bridge4: port 1(veth0_to_bond) entered forwarding state
[  250.224493][T14007] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  250.265296][T14014] bond37: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  250.282924][T14014] bond37: (slave lo): Enslaving as an active interface with an up link
[  250.287962][T14014] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  250.293683][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  250.297948][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  250.311898][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  250.317731][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  250.325706][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  250.329984][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  250.339656][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  250.342942][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  250.394069][T14026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2376'.
[  250.507167][T14039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.542334][T14040]  speed is unknown, defaulting to 1000
[  250.647607][T14039]  speed is unknown, defaulting to 1000
[  250.654976][T14040] lo speed is unknown, defaulting to 1000
[  250.841741][T14041]  speed is unknown, defaulting to 1000
[  250.959828][T14041] lo speed is unknown, defaulting to 1000
[  250.967181][T14039] lo speed is unknown, defaulting to 1000
[  251.320919][T14048] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  251.661070][T14074]  speed is unknown, defaulting to 1000
[  251.852055][T14074] lo speed is unknown, defaulting to 1000
[  252.199860][T14116] netlink: 'syz.0.2401': attribute type 1 has an invalid length.
[  252.277093][T14116] bond64: entered promiscuous mode
[  252.280161][T14116] 8021q: adding VLAN 0 to HW filter on device bond64
[  252.331272][T14099] nbd4: detected capacity change from 0 to 14524332126952846
[  252.338257][   T56] block nbd4: Receive control failed (result -32)
[  252.353044][T11810] block nbd4: Send control failed (result -32)
[  252.365102][T11810] block nbd4: Request send failed, requeueing
[  252.385736][  T461] block nbd4: Dead connection, failed to find a fallback
[  252.390017][  T461] block nbd4: shutting down sockets
[  252.394006][  T461] blk_print_req_error: 138 callbacks suppressed
[  252.394020][  T461] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  252.403981][  T461] buffer_io_error: 138 callbacks suppressed
[  252.403991][  T461] Buffer I/O error on dev nbd4, logical block 0, async page read
[  252.417390][T11810] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  252.420569][T11810] Buffer I/O error on dev nbd4, logical block 1, async page read
[  252.423393][T11810] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  252.426461][T11810] Buffer I/O error on dev nbd4, logical block 2, async page read
[  252.431061][T11810] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  252.434994][T11810] Buffer I/O error on dev nbd4, logical block 3, async page read
[  252.437905][T11810] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  252.444555][T11810] Buffer I/O error on dev nbd4, logical block 0, async page read
[  252.447287][T11810] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  252.450769][T11810] Buffer I/O error on dev nbd4, logical block 1, async page read
[  252.455748][T11810] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  252.459092][T11810] Buffer I/O error on dev nbd4, logical block 2, async page read
[  252.462253][T11810] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  252.465246][T11810] Buffer I/O error on dev nbd4, logical block 3, async page read
[  252.467775][T11810] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  252.471374][T11810] Buffer I/O error on dev nbd4, logical block 0, async page read
[  252.475474][T11810] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  252.480071][T11810] Buffer I/O error on dev nbd4, logical block 1, async page read
[  252.487789][T11810] ldm_validate_partition_table(): Disk read failed.
[  252.494883][T11810] Dev nbd4: unable to read RDB block 0
[  252.501577][T11810]  nbd4: unable to read partition table
[  252.515330][T11810] ldm_validate_partition_table(): Disk read failed.
[  252.518960][T11810] Dev nbd4: unable to read RDB block 0
[  252.524058][T11810]  nbd4: unable to read partition table
[  252.607606][T14145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.613120][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.618598][T14151] Bluetooth: MGMT ver 1.23
[  252.649071][T14152] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20000
[  252.709687][T14152] : (slave dummy0): Releasing backup interface
[  252.727429][T14157] netlink: 'syz.1.2412': attribute type 13 has an invalid length.
[  252.943766][T14173] bridge_slave_1: left allmulticast mode
[  252.946020][T14173] bridge_slave_1: left promiscuous mode
[  252.948400][T14173] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.955407][T14173] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  253.120629][T14188] bond36 (unregistering): Released all slaves
[  253.332211][T14204] veth23: entered promiscuous mode
[  254.081569][T14219] __nla_validate_parse: 10 callbacks suppressed
[  254.081587][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'.
[  254.158786][T14222] ip6gre1: entered allmulticast mode
[  254.266936][T14232] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.274328][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2433'.
[  254.365254][T14238] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2436'.
[  254.387620][T14238] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2436'.
[  254.394064][T14238] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2436'.
[  254.621932][T14265] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2445'.
[  254.738524][T14273] erspan0: entered promiscuous mode
[  255.446755][T14299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2453'.
[  255.454768][T14298] macsec0: entered promiscuous mode
[  255.462005][T14301] macsec0: left promiscuous mode
[  255.465831][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'.
[  255.579003][T14312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.591384][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2459'.
[  255.678755][T14316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2461'.
[  255.764103][T14322] syzkaller0: entered promiscuous mode
[  255.766320][T14322] syzkaller0: entered allmulticast mode
[  255.960923][T14342] geneve4: entered promiscuous mode
[  255.965218][ T5477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.971143][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.988025][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 56470 - 0
[  255.993263][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 56470 - 0
[  255.997061][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 56470 - 0
[  256.000305][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 56470 - 0
[  256.111917][T14357] netlink: 'syz.0.2472': attribute type 16 has an invalid length.
[  256.233762][T14366] netlink: 'syz.1.2475': attribute type 1 has an invalid length.
[  256.258250][T14366] team_slave_1: Caught tx_queue_len zero misconfig
[  256.286405][T14366] bond39: (slave geneve5): making interface the new active one
[  256.291814][T14366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.295680][T14366] bond39: (slave geneve5): Enslaving as an active interface with an up link
[  256.298993][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  256.306274][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  256.313606][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  256.319830][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  256.388912][T14378]  speed is unknown, defaulting to 1000
[  256.543253][T14367] netlink: 'syz.0.2476': attribute type 10 has an invalid length.
[  256.645179][T14378] lo speed is unknown, defaulting to 1000
[  256.789939][T14399]  speed is unknown, defaulting to 1000
[  256.949554][T14399] lo speed is unknown, defaulting to 1000
[  257.133627][T14412] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  257.143744][T14412] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  257.197805][T14416] bridge: RTM_NEWNEIGH with invalid state 0x8
[  257.252677][T14416] macsec2: entered promiscuous mode
[  257.636290][T14442]  speed is unknown, defaulting to 1000
[  257.664703][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.667342][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.787622][T14452] gretap0: entered promiscuous mode
[  257.805013][T14452] vlan0: entered promiscuous mode
[  257.849600][   T12] batadv0: left promiscuous mode
[  257.907858][T14442] lo speed is unknown, defaulting to 1000
[  257.960092][T14462] netlink: 'syz.1.2500': attribute type 1 has an invalid length.
[  258.002629][T14462] bond40: (slave bridge23): making interface the new active one
[  258.005642][T14462] bond40: (slave bridge23): Enslaving as an active interface with an up link
[  258.025991][T14462] netpci0: tun_chr_ioctl cmd 1074025678
[  258.037595][T14462] netpci0: group set to 0
[  258.105460][T14468] netlink: 'syz.2.2502': attribute type 3 has an invalid length.
[  258.297172][T14486] lo: Caught tx_queue_len zero misconfig
[  258.557894][T14498] bond37: (slave lo): Releasing backup interface
[  258.577753][T14498] bond37: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  258.595135][T14498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  258.748018][T14509] netlink: 'syz.1.2513': attribute type 10 has an invalid length.
[  258.806679][T14514] veth0: entered promiscuous mode
[  258.811457][T14514] bond0: entered promiscuous mode
[  258.816988][T14514] geneve2: entered promiscuous mode
[  258.895648][T14508] bond0: left promiscuous mode
[  258.897940][T14508] geneve2: left promiscuous mode
[  258.901835][T14508] veth0: left promiscuous mode
[  259.328362][T14556] __nla_validate_parse: 23 callbacks suppressed
[  259.328382][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2523'.
[  259.345353][T14556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2523'.
[  259.351155][T14545] netlink: 'syz.2.2521': attribute type 1 has an invalid length.
[  259.413355][T14563] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2525'.
[  259.418960][T14563] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2525'.
[  259.422392][T14560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2524'.
[  259.422837][T14563] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2525'.
[  259.519717][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'.
[  259.592603][T14584] netlink: 'syz.2.2530': attribute type 2 has an invalid length.
[  259.596258][T14584] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2530'.
[  259.643132][T14584] netlink: 'syz.2.2530': attribute type 4 has an invalid length.
[  259.731482][T14602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2533'.
[  259.762113][T14607] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2534'.
[  259.864934][T14616] netlink: 'syz.0.2536': attribute type 10 has an invalid length.
[  259.933660][T14625] syz_tun (unregistering): left allmulticast mode
[  260.055558][T14616] nbd5: detected capacity change from 0 to 63
[  260.074389][   T55] block nbd5: Receive control failed (result -104)
[  260.081146][ T6738] block nbd5: Receive control failed (result -32)
[  260.255339][T14647] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.259018][T14647] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  260.261929][T14647] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  260.272441][T14645] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  260.275002][T14645] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  260.573868][T14673] pim6reg0: tun_chr_ioctl cmd 1074025675
[  260.576506][T14673] pim6reg0: persist disabled
[  260.583646][T14673] vlan0: entered promiscuous mode
[  260.585390][T14673] geneve1: entered promiscuous mode
[  260.587204][T14673] vlan0: entered allmulticast mode
[  260.588821][T14673] geneve1: entered allmulticast mode
[  260.782189][   T33] audit: type=1800 audit(1778411345.076:3): pid=14685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2556" name="memory.events" dev="tmpfs" ino=4325 res=0 errno=0
[  260.967977][T14707] 8021q: adding VLAN 0 to HW filter on device bond65
[  260.981882][T14707] bond65: (slave batadv0): Opening slave failed
[  261.035587][T14713] 8021q: adding VLAN 0 to HW filter on device bond41
[  261.058024][T14717] bond0: (slave dummy0): Releasing backup interface
[  261.064564][T14717] dummy0: left promiscuous mode
[  261.066282][T14717] dummy0: left allmulticast mode
[  261.072968][T14717] team0: Port device dummy0 added
[  261.106482][T14720] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  261.140427][T14725] validate_nla: 4 callbacks suppressed
[  261.140438][T14725] netlink: 'syz.2.2566': attribute type 10 has an invalid length.
[  261.166623][T14725] team0: Port device dummy0 removed
[  261.175654][T14725] dummy0: entered promiscuous mode
[  261.181324][T14725] dummy0: entered allmulticast mode
[  261.192069][T14725] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  261.330481][T14717] nbd6: detected capacity change from 0 to 63
[  261.340236][T14122] block nbd6: Receive control failed (result -104)
[  261.344575][   T56] block nbd6: Receive control failed (result -32)
[  261.438974][T14750] No such timeout policy "syz0"
[  261.450800][T14754] netlink: 'syz.2.2572': attribute type 1 has an invalid length.
[  261.493943][T14754] bond36: (slave vxcan3): The slave device specified does not support setting the MAC address
[  261.499285][T14754] bond36: (slave vxcan3): Error -95 calling set_mac_address
[  261.546983][T14760] bond36: (slave gretap1): making interface the new active one
[  261.558568][T14760] bond36: (slave gretap1): Enslaving as an active interface with an up link
[  261.571529][T14754] macvlan2: entered promiscuous mode
[  261.573157][T14754] macvlan2: entered allmulticast mode
[  261.575114][T14754] bond36: entered promiscuous mode
[  261.576734][T14754] gretap1: entered promiscuous mode
[  261.581267][T14754] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  261.585667][T14754] bond36: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  261.590826][T14754] bond36: left promiscuous mode
[  261.592510][T14754] gretap1: left promiscuous mode
[  261.645824][T14767] bond42: option miimon: invalid value (18446744073709551607)
[  261.648283][T14767] bond42: option miimon: allowed values 0 - 2147483647
[  261.655327][T14767] bond42 (unregistering): Released all slaves
[  261.708216][T14772] netlink: 'syz.2.2577': attribute type 1 has an invalid length.
[  261.942113][T14783]  speed is unknown, defaulting to 1000
[  261.945732][T14789] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  261.948641][T14789] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  262.025606][T14791] netlink: 'syz.2.2584': attribute type 1 has an invalid length.
[  262.042923][T14791] 8021q: adding VLAN 0 to HW filter on device bond37
[  262.071997][T14791] bond37: (slave veth21): Enslaving as an active interface with a down link
[  262.081496][T14791] 8021q: adding VLAN 0 to HW filter on device batadv3
[  262.085422][T14791] bond37: (slave batadv3): making interface the new active one
[  262.088931][T14791] batadv3: entered promiscuous mode
[  262.091214][T14791] bond37: (slave batadv3): Enslaving as an active interface with an up link
[  262.101295][T14791] bond37 (unregistering): (slave veth21): Releasing active interface
[  262.106089][T14791] bond37 (unregistering): (slave batadv3): Releasing active interface
[  262.110399][T14791] bond37 (unregistering): Released all slaves
[  262.123119][T14783] lo speed is unknown, defaulting to 1000
[  262.392413][T14817] unsupported nla_type 216
[  262.615608][T14841] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  263.966781][T14890] bond0: Device is already in use.
[  264.249786][T14900] netlink: 'syz.2.2613': attribute type 1 has an invalid length.
[  264.252523][T14900] netlink: 'syz.2.2613': attribute type 4 has an invalid length.
[  264.317170][T14902] netlink: 'syz.1.2614': attribute type 1 has an invalid length.
[  264.323875][T14902] netlink: 'syz.1.2614': attribute type 1 has an invalid length.
[  264.331901][T14902] __nla_validate_parse: 32 callbacks suppressed
[  264.331919][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2614'.
[  264.340434][T14902] netlink: 580 bytes leftover after parsing attributes in process `syz.1.2614'.
[  264.396411][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2616'.
[  264.416003][T14914] bond42: entered promiscuous mode
[  264.418084][T14914] 8021q: adding VLAN 0 to HW filter on device bond42
[  264.578697][T14914] 8021q: adding VLAN 0 to HW filter on device bond42
[  264.581283][T14914] bond42: (slave sit5): The slave device specified does not support setting the MAC address
[  264.584949][T14914] bond42: (slave sit5): Error -95 calling set_mac_address
[  264.694985][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'.
[  264.721924][T14930] xt_l2tp: invalid flags combination: 8
[  264.724974][T14930] veth1_to_team: Caught tx_queue_len zero misconfig
[  264.727737][T14930] netlink: 'syz.1.2621': attribute type 1 has an invalid length.
[  264.799029][T14934] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2623'.
[  264.807338][T14934] pimreg9: entered allmulticast mode
[  264.849149][T14936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2624'.
[  264.934293][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2626'.
[  264.937617][T14943] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2626'.
[  264.938641][T14945] netlink: 'syz.1.2627': attribute type 1 has an invalid length.
[  264.971401][T14945] bond43: (slave bridge24): making interface the new active one
[  264.976769][T14945] bond43: (slave bridge24): Enslaving as an active interface with an up link
[  264.986917][T14945] macvlan5: entered promiscuous mode
[  264.989138][T14945] macvlan5: entered allmulticast mode
[  264.993902][T14945] bond43: entered promiscuous mode
[  264.995982][T14945] bridge24: entered promiscuous mode
[  264.998716][T14945] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  265.002655][T14945] bond43: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  265.008908][T14945] bond43: left promiscuous mode
[  265.012620][T14945] bridge24: left promiscuous mode
[  265.113399][T14957] 8021q: adding VLAN 0 to HW filter on device bond37
[  265.116409][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2629'.
[  265.136601][T14956] bond37: (slave gretap2): making interface the new active one
[  265.147445][T14956] bond37: (slave gretap2): Enslaving as an active interface with an up link
[  265.226910][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'.
[  265.468103][ T5477] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  265.473196][ T5477] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  265.476894][ T5477] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  265.487573][ T5477] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  265.533342][T14979] bond0: (slave dummy0): Releasing backup interface
[  265.537194][T14979] dummy0: left promiscuous mode
[  265.543306][T14979] dummy0: left allmulticast mode
[  265.558613][T14979] team0: Port device dummy0 added
[  265.591875][T14980] team0: Port device dummy0 removed
[  265.597638][T14980] dummy0: entered promiscuous mode
[  265.601856][T14980] dummy0: entered allmulticast mode
[  265.604553][T14980] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  265.773259][T14992] bond0: Device is already in use.
[  265.850775][T14996] openvswitch: netlink: Message has 2 unknown bytes.
[  265.970980][T15007] geneve7: entered promiscuous mode
[  265.973347][T15007] geneve7: entered allmulticast mode
[  266.390359][T15027] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  266.393080][T15028] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  266.461241][T15034] validate_nla: 7 callbacks suppressed
[  266.461262][T15034] netlink: 'syz.0.2656': attribute type 13 has an invalid length.
[  266.515097][T15036] geneve6: entered promiscuous mode
[  266.519665][   T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  266.524535][   T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  266.528222][   T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  266.532060][   T12] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  266.954411][T15055] ip6tnl0: Caught tx_queue_len zero misconfig
[  266.982007][T15055] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.991238][T15055] syzkaller0: entered promiscuous mode
[  266.993908][T15055] syzkaller0: entered allmulticast mode
[  267.672205][T15051] tipc: Resetting bearer <eth:syzkaller0>
[  267.716870][T15051] tipc: Disabling bearer <eth:syzkaller0>
[  267.945653][T15074] 8021q: adding VLAN 0 to HW filter on device bond44
[  268.672848][T15099] netlink: 'syz.0.2674': attribute type 1 has an invalid length.
[  268.710163][T15099] 8021q: adding VLAN 0 to HW filter on device bond66
[  268.875870][T15105] sctp: [Deprecated]: syz.1.2677 (pid 15105) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.875870][T15105] Use struct sctp_sack_info instead
[  268.933380][T15106] netlink: 'syz.1.2677': attribute type 1 has an invalid length.
[  269.257225][T15120] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:1
[  269.788222][T15142] __nla_validate_parse: 30 callbacks suppressed
[  269.788242][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2687'.
[  270.080969][T15146] netlink: 'syz.1.2688': attribute type 21 has an invalid length.
[  270.084214][T15146] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2688'.
[  270.087862][T15146] netlink: 'syz.1.2688': attribute type 4 has an invalid length.
[  270.094958][T15146] netlink: 'syz.1.2688': attribute type 3 has an invalid length.
[  270.098289][T15146] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2688'.
[  270.227546][T15149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2689'.
[  270.766021][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2693'.
[  270.811281][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'.
[  270.817669][T15161] ip6tnl6: entered allmulticast mode
[  270.912963][T15166] netlink: 'syz.0.2696': attribute type 7 has an invalid length.
[  270.926862][T15164] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.000159][T15164] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.046796][T15168] netlink: 'syz.1.2697': attribute type 1 has an invalid length.
[  271.073986][T15168] 8021q: adding VLAN 0 to HW filter on device bond45
[  271.087473][T15168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2697'.
[  271.089635][T15164] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.107463][T15168] sit5: entered promiscuous mode
[  271.147835][T15164] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.207199][T15173] bond46: (slave bond_slave_1): Device is not bonding slave
[  271.209674][T15173] bond46: option active_slave: invalid value (bond_slave_1)
[  271.214250][T15173] bond46 (unregistering): Released all slaves
[  271.241135][T15175] netlink: 210640 bytes leftover after parsing attributes in process `syz.1.2698'.
[  271.247559][ T5477] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.281662][ T5477] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.315863][ T5477] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.333973][ T5477] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.353898][T15178] sctp: [Deprecated]: syz.1.2699 (pid 15178) Use of int in max_burst socket option.
[  271.353898][T15178] Use struct sctp_assoc_value instead
[  271.428621][T15186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2700'.
[  271.433087][T15186] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2700'.
[  271.437273][T15186] tc_dump_action: action bad kind
[  271.706854][T15212] xt_CT: You must specify a L4 protocol and not use inversions on it
[  271.712633][T15212] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  271.715220][T15212] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.837268][T15219] veth23: entered allmulticast mode
[  271.854517][T15219] bond38: (slave veth23): Enslaving as an active interface with an up link
[  271.868882][T15219] bond38 (unregistering): (slave veth23): Releasing backup interface
[  271.879564][T15219] bond38 (unregistering): Released all slaves
[  271.999921][T15235] netlink: 'syz.2.2714': attribute type 1 has an invalid length.
[  272.012108][T15235] workqueue: Failed to create a rescuer kthread for wq "bond38": -EINTR
[  272.239971][T15263] netlink: 'syz.2.2723': attribute type 12 has an invalid length.
[  272.577179][T15282] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  273.329947][T15316]  speed is unknown, defaulting to 1000
[  273.426198][T15316] lo speed is unknown, defaulting to 1000
[  273.844710][T15331] netlink: 'syz.1.2745': attribute type 7 has an invalid length.
[  273.854014][T15333] x_tables: ip_tables: osf match: only valid for protocol 6
[  273.869099][T15333] openvswitch: netlink: Multiple metadata blocks provided
[  273.974440][T15335] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 56470 - 0
[  273.979021][T15335] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  273.988816][T15335] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  274.046960][T15335] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 56470 - 0
[  274.050912][T15335] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  274.054335][T15335] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  274.106124][T15335] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 56470 - 0
[  274.110586][T15335] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  274.114027][T15335] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  274.146449][T15335] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 56470 - 0
[  274.149638][T15335] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  274.152749][T15335] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  274.199040][ T5477] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.202751][ T5477] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  274.206142][ T5477] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 56470 - 0
[  274.215434][ T5477] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.218690][ T5477] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  274.222727][ T5477] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 56470 - 0
[  274.237159][ T5477] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.241029][ T5477] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  274.244665][ T5477] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 56470 - 0
[  274.259153][ T5477] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.263866][ T5477] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  274.266976][ T5477] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 56470 - 0
[  274.467689][T15349] netlink: 'syz.1.2750': attribute type 2 has an invalid length.
[  275.175065][T15370] netlink: 'syz.0.2755': attribute type 1 has an invalid length.
[  275.381893][T15385] __nla_validate_parse: 15 callbacks suppressed
[  275.381915][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2760'.
[  275.440015][T15387] bond46 (unregistering): Released all slaves
[  275.458003][T15390] netlink: 'syz.2.2762': attribute type 1 has an invalid length.
[  275.496742][T15390] bond38: entered promiscuous mode
[  275.500040][T15390] 8021q: adding VLAN 0 to HW filter on device bond38
[  275.550833][T15390] bond38: (slave bridge23): making interface the new active one
[  275.553326][T15390] bridge23: entered promiscuous mode
[  275.556615][T15390] bond38: (slave bridge23): Enslaving as an active interface with an up link
[  275.566934][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'.
[  275.587842][T15398] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2764'.
[  275.665455][T15405] netlink: 'syz.1.2767': attribute type 1 has an invalid length.
[  275.668542][T15407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2766'.
[  275.688631][T15405] 8021q: adding VLAN 0 to HW filter on device bond46
[  275.701931][T15411] macvlan2: entered promiscuous mode
[  275.703981][T15411] erspan0: entered promiscuous mode
[  275.706452][T15411] erspan0: left promiscuous mode
[  275.716301][T15405] vlan0: entered allmulticast mode
[  275.718204][T15405] bond46: entered allmulticast mode
[  275.757464][T15417] netlink: 'syz.1.2769': attribute type 8 has an invalid length.
[  275.780573][T15414] bond67 (unregistering): Released all slaves
[  275.784934][T15420] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2771'.
[  275.878933][T15431] bond27: (slave 26): Releasing backup interface
[  275.895552][T15431] bond27: (slave 26): last VLAN challenged slave left bond - VLAN blocking is removed
[  275.911586][T15431] bridge_slave_0: left allmulticast mode
[  275.913410][T15431] bridge_slave_0: left promiscuous mode
[  275.915180][T15431] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.922456][T15431] veth0_to_bond: left promiscuous mode
[  275.925130][T15431] bridge4: port 1(veth0_to_bond) entered disabled state
[  275.935315][T15431] : (slave bond_slave_0): Releasing backup interface
[  275.950139][T15431] : (slave bond_slave_1): Releasing backup interface
[  275.975723][T15431] `: Port device team_slave_0 removed
[  276.001509][T15431] `: Port device team_slave_1 removed
[  276.007688][T15431] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  276.017281][   T24]  speed is unknown, defaulting to 1000
[  276.019598][   T24] sqz0: Port: 1 Link DOWN
[  276.052857][   T24]  speed is unknown, defaulting to 1000
[  276.083798][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2778'.
[  276.105408][T15450] 8021q: adding VLAN 0 to HW filter on device bond67
[  276.139763][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2779'.
[  276.169445][T15454] 8021q: adding VLAN 0 to HW filter on device bond39
[  276.173343][T15450] bond67: entered promiscuous mode
[  276.177068][T15450] bond67: entered allmulticast mode
[  276.182566][T15454] bond39: option mode: unable to set because the bond device is up
[  276.188148][T15450] team_slave_1: entered promiscuous mode
[  276.201944][T15450] team_slave_1: entered allmulticast mode
[  276.204246][T15450] bond67: (slave team_slave_1): Enslaving as an active interface with an up link
[  276.207159][T15454] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  276.210068][T15454] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  276.212583][T15454] veth0_virt_wifi: entered allmulticast mode
[  276.216331][T15454] veth0_virt_wifi: entered promiscuous mode
[  276.260345][T15458] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2780'.
[  276.622876][T15490] netlink: 'syz.0.2789': attribute type 21 has an invalid length.
[  276.628204][T15490] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2789'.
[  276.745906][T15494] netlink: 'syz.2.2791': attribute type 1 has an invalid length.
[  276.787345][T15494] bond40: entered promiscuous mode
[  276.790406][T15494] 8021q: adding VLAN 0 to HW filter on device bond40
[  276.798236][T15494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2791'.
[  276.980864][T15500] bond47: entered promiscuous mode
[  276.982921][T15500] 8021q: adding VLAN 0 to HW filter on device bond47
[  277.015687][T15500] bond47: (slave bridge26): making interface the new active one
[  277.019903][T15500] bridge26: entered promiscuous mode
[  277.022868][T15500] bond47: (slave bridge26): Enslaving as an active interface with an up link
[  277.157178][T15526] validate_nla: 1 callbacks suppressed
[  277.157188][T15526] netlink: 'syz.0.2802': attribute type 10 has an invalid length.
[  277.202214][T15535] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  277.243096][T15537] netlink: 'syz.0.2802': attribute type 10 has an invalid length.
[  277.248120][T15540] netlink: 'syz.2.2805': attribute type 1 has an invalid length.
[  277.270445][T15540] bond41: entered promiscuous mode
[  277.272628][T15540] 8021q: adding VLAN 0 to HW filter on device bond41
[  277.286693][T15540] bond41: (slave bridge24): making interface the new active one
[  277.289126][T15540] bridge24: entered promiscuous mode
[  277.293453][T15540] bond41: (slave bridge24): Enslaving as an active interface with an up link
[  277.367267][T15547] bridge_slave_1: entered promiscuous mode
[  277.449326][T15526] nbd7: detected capacity change from 0 to 63
[  277.567594][   T55] block nbd7: Receive control failed (result -104)
[  277.575961][ T6738] block nbd7: Receive control failed (result -32)
[  277.607477][T15556] bond5: option mode: unable to set because the bond device has slaves
[  277.656177][T15563] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.659522][T15563] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  277.662584][T15563] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 56470 - 0
[  277.715930][T15569] netlink: 'syz.0.2816': attribute type 1 has an invalid length.
[  277.758619][T15569] bond68: entered promiscuous mode
[  277.760927][T15569] 8021q: adding VLAN 0 to HW filter on device bond68
[  277.774254][T15563] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.777640][T15563] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  277.784564][T15563] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 56470 - 0
[  277.805956][T15569] bond68: (slave bridge36): making interface the new active one
[  277.808291][T15569] bridge36: entered promiscuous mode
[  277.811945][T15569] bond68: (slave bridge36): Enslaving as an active interface with an up link
[  277.841509][T15573]  speed is unknown, defaulting to 1000
[  277.850546][T15563] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.862468][T15563] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  277.870059][T15563] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 56470 - 0
[  277.972723][T15563] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.981733][T15563] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  277.991840][T15563] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 56470 - 0
[  278.088504][ T7645] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.093916][ T7645] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  278.096342][ T7645] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 56470 - 0
[  278.118957][ T7645] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.125000][ T7645] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  278.129719][ T7645] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 56470 - 0
[  278.148279][ T7645] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.153145][ T7645] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  278.157233][ T7645] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 56470 - 0
[  278.176069][ T7645] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.180144][ T7645] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  278.183506][ T7645] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 56470 - 0
[  278.258880][T15573] lo speed is unknown, defaulting to 1000
[  278.515377][T15614] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  278.560542][T15614] nbd: couldn't find a device at index 1
[  278.799147][T15626] netlink: 'syz.2.2833': attribute type 13 has an invalid length.
[  278.854869][T15628] netlink: 'syz.0.2834': attribute type 3 has an invalid length.
[  278.924351][T15630] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  278.928879][T15630] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  279.859910][T15648]  speed is unknown, defaulting to 1000
[  280.006407][T15652]  speed is unknown, defaulting to 1000
[  280.008697][T15648] lo speed is unknown, defaulting to 1000
[  280.222959][T15652] lo speed is unknown, defaulting to 1000
[  280.287082][T15663] netlink: 'syz.1.2842': attribute type 27 has an invalid length.
[  280.360335][T15666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.498650][T15678] __nla_validate_parse: 10 callbacks suppressed
[  280.498664][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'.
[  280.531006][T15682] netlink: 'syz.1.2846': attribute type 1 has an invalid length.
[  280.558923][T15682] bond48: entered promiscuous mode
[  280.563964][T15682] 8021q: adding VLAN 0 to HW filter on device bond48
[  280.581827][T15682] bond48: (slave bridge27): making interface the new active one
[  280.584997][T15682] bridge27: entered promiscuous mode
[  280.588345][T15682] bond48: (slave bridge27): Enslaving as an active interface with an up link
[  280.631279][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2847'.
[  280.696452][T15688] netlink: 'syz.1.2847': attribute type 13 has an invalid length.
[  280.702239][T15688] netlink: 'syz.1.2847': attribute type 17 has an invalid length.
[  280.777620][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2850'.
[  281.036193][T15688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  281.054522][T15688] team_slave_1: left promiscuous mode
[  281.062215][T15688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  281.068150][T15688] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  281.105465][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.113311][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  281.118212][   T13] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 56470 - 0
[  281.123992][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.132999][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  281.139826][   T13] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 56470 - 0
[  281.189890][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.197436][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  281.204955][   T13] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 56470 - 0
[  281.211852][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  281.217489][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  281.224670][   T13] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 56470 - 0
[  281.299697][T15703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2852'.
[  281.467683][T15706] bond49: entered promiscuous mode
[  281.470806][T15706] 8021q: adding VLAN 0 to HW filter on device bond49
[  281.498138][T15706] bond49: (slave bridge28): making interface the new active one
[  281.500897][T15706] bridge28: entered promiscuous mode
[  281.503393][T15706] bond49: (slave bridge28): Enslaving as an active interface with an up link
[  281.647642][T15711] netlink: set zone limit has 4 unknown bytes
[  281.706547][T15715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2855'.
[  281.743322][T15711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2855'.
[  281.746902][T15718] veth25: entered allmulticast mode
[  281.816305][T15721] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2858'.
[  281.824585][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2858'.
[  281.848620][T15721] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  282.273212][T15726] mac80211_hwsim hwsim27 wlan1: Caught tx_queue_len zero misconfig
[  282.305553][T15728] 8021q: adding VLAN 0 to HW filter on device batadv0
[  282.330711][T15728] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  282.793166][T15753] validate_nla: 4 callbacks suppressed
[  282.793182][T15753] netlink: 'syz.2.2866': attribute type 12 has an invalid length.
[  282.797530][T15753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2866'.
[  282.804821][T15753] netlink: 'syz.2.2866': attribute type 39 has an invalid length.
[  283.053909][T15761] vxcan2: entered allmulticast mode
[  283.495482][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2873'.
[  283.507019][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  283.510385][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  283.513209][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  283.516366][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  283.628363][   T33] audit: type=1800 audit(1778411367.916:4): pid=15774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2874" name=CB dev="tmpfs" ino=5458 res=0 errno=0
[  283.684158][T15777] ip6tnl7: entered allmulticast mode
[  284.059090][T15785] netlink: 'syz.2.2879': attribute type 1 has an invalid length.
[  284.085143][T15785] bond43: entered promiscuous mode
[  284.087788][T15785] bond43: entered allmulticast mode
[  284.089747][T15785] 8021q: adding VLAN 0 to HW filter on device bond43
[  284.208675][T15793] openvswitch: netlink: Flow actions attr not present in new flow.
[  284.261866][T15796] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  284.621598][T15808] netlink: 'syz.0.2886': attribute type 30 has an invalid length.
[  284.625571][T15808] netlink: 'syz.0.2886': attribute type 30 has an invalid length.
[  284.954471][T15829] netlink: 'syz.0.2892': attribute type 1 has an invalid length.
[  285.499013][T15842] rdma_rxe: rxe_newlink: failed to add lo
[  285.689860][T15851] __nla_validate_parse: 13 callbacks suppressed
[  285.689874][T15851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2899'.
[  285.698168][T15851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2899'.
[  285.703991][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2899'.
[  285.902856][T15866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2902'.
[  285.906877][T15866] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2902'.
[  285.910628][T15866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2902'.
[  285.914214][T15866] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2902'.
[  286.075405][T15872] netlink: 'syz.1.2902': attribute type 4 has an invalid length.
[  286.368909][T15876] netlink: 'syz.0.2904': attribute type 21 has an invalid length.
[  286.539382][T15881] netlink: 'syz.0.2905': attribute type 16 has an invalid length.
[  286.542522][T15881] netlink: 'syz.0.2905': attribute type 17 has an invalid length.
[  286.630328][T15881] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  286.664605][ T5683]  speed is unknown, defaulting to 1000
[  286.674243][ T5683] sqz0: Port: 1 Link ACTIVE
[  286.689680][ T5683]  speed is unknown, defaulting to 1000
[  286.774338][T15892] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2907'.
[  286.813696][T15892]  speed is unknown, defaulting to 1000
[  287.093510][T15892] lo speed is unknown, defaulting to 1000
[  287.180073][T15906] x_tables: duplicate entry at hook 3
[  287.284383][T15906] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.290959][T15906] 8021q: adding VLAN 0 to HW filter on device team0
[  287.305150][T15897] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2907'.
[  287.333718][T15906] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  287.349699][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2913'.
[  287.362696][T15907] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  287.495170][T15914] workqueue: Failed to create a rescuer kthread for wq "bond69": -EINTR
[  287.905808][T15938] bond69: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  287.915334][T15938] bond69 (unregistering): Released all slaves
[  287.946863][T15939] bond44: (slave bridge25): making interface the new active one
[  287.952712][T15939] bond44: (slave bridge25): Enslaving as an active interface with an up link
[  288.445128][T15959] validate_nla: 2 callbacks suppressed
[  288.445143][T15959] netlink: 'syz.2.2926': attribute type 1 has an invalid length.
[  288.758768][T15980] bond50: entered promiscuous mode
[  288.982418][T15988] bond27: (slave 26): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  288.995031][T15988] bond27: (slave 26): Enslaving as an active interface with an up link
[  289.003520][T15988] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  289.013019][ T7341]  speed is unknown, defaulting to 1000
[  289.015402][ T7341]  speed is unknown, defaulting to 1000
[  289.017601][ T5683]  speed is unknown, defaulting to 1000
[  289.280210][T16009] netlink: 'syz.1.2939': attribute type 1 has an invalid length.
[  289.308243][T16009] 8021q: adding VLAN 0 to HW filter on device bond51
[  289.666512][T16028] netlink: 'syz.2.2946': attribute type 1 has an invalid length.
[  289.696800][T16028] bond46: (slave vxcan3): The slave device specified does not support setting the MAC address
[  289.700387][T16028] bond46: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  289.707958][T16028] bond46: (slave vxcan3): making interface the new active one
[  289.711118][T16028] bond46: (slave vxcan3): Enslaving as an active interface with an up link
[  289.722066][T16028] bond46 (unregistering): (slave vxcan3): Releasing backup interface
[  289.726301][T16028] bond46 (unregistering): Released all slaves
[  289.758668][T16032] SET target dimension over the limit!
[  289.822683][T16036] netlink: 'syz.0.2948': attribute type 1 has an invalid length.
[  289.915422][T16046] xt_l2tp: invalid flags combination: 8
[  289.917777][T16047] xt_l2tp: invalid flags combination: 8
[  289.993329][T16054] 8021q: adding VLAN 0 to HW filter on device bond46
[  290.006134][T16054] team_slave_1: entered promiscuous mode
[  290.015007][T16054] team0: Port device team_slave_1 removed
[  290.028101][T16054] bond46: (slave team_slave_1): Enslaving as an active interface with an up link
[  290.126537][  T461] block nbd5: Connection timed out, retrying (0/2 alive)
[  290.141487][  T461] block nbd5: Connection timed out, retrying (0/2 alive)
[  290.144632][  T461] block nbd5: Connection timed out, retrying (0/2 alive)
[  290.147767][  T461] block nbd5: Connection timed out, retrying (0/2 alive)
[  290.151836][  T461] block nbd5: Dead connection, failed to find a fallback
[  290.156644][  T461] block nbd5: shutting down sockets
[  290.158834][  T461] blk_print_req_error: 123 callbacks suppressed
[  290.158849][  T461] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.165694][  T461] buffer_io_error: 122 callbacks suppressed
[  290.165707][  T461] Buffer I/O error on dev nbd5, logical block 3, async page read
[  290.172917][  T461] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.176844][  T461] Buffer I/O error on dev nbd5, logical block 2, async page read
[  290.181473][  T461] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.185082][  T461] Buffer I/O error on dev nbd5, logical block 1, async page read
[  290.188177][  T461] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.192387][  T461] Buffer I/O error on dev nbd5, logical block 0, async page read
[  290.201562][T11810] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.207696][T11810] Buffer I/O error on dev nbd5, logical block 0, async page read
[  290.212509][T11810] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.216279][T11810] Buffer I/O error on dev nbd5, logical block 1, async page read
[  290.220837][T11810] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.224856][T11810] Buffer I/O error on dev nbd5, logical block 2, async page read
[  290.228241][T11810] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.232516][T11810] Buffer I/O error on dev nbd5, logical block 3, async page read
[  290.236093][T11810] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.240584][T11810] Buffer I/O error on dev nbd5, logical block 0, async page read
[  290.244085][T11810] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.247707][T11810] Buffer I/O error on dev nbd5, logical block 1, async page read
[  290.253844][T11810] ldm_validate_partition_table(): Disk read failed.
[  290.257174][T11810] Dev nbd5: unable to read RDB block 0
[  290.261210][T11810]  nbd5: unable to read partition table
[  290.271154][T11810] ldm_validate_partition_table(): Disk read failed.
[  290.275558][T11810] Dev nbd5: unable to read RDB block 0
[  290.278388][T11810]  nbd5: unable to read partition table
[  290.334427][T16077] netlink: 'syz.0.2960': attribute type 22 has an invalid length.
[  290.337904][T16077] bond0: option ad_select: invalid value (16)
[  290.532078][T16092] bond69: option arp_interval: invalid value (18446744073709551615)
[  290.534525][T16092] bond69: option arp_interval: allowed values 0 - 2147483647
[  290.541068][T16092] bond69 (unregistering): Released all slaves
[  290.664542][T16099] bond47: option arp_all_targets: invalid value (129)
[  290.671655][T16099] bond47 (unregistering): Released all slaves
[  290.847789][T16109] __nla_validate_parse: 19 callbacks suppressed
[  290.847806][T16109] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2971'.
[  291.036847][T16124] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2976'.
[  291.051699][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2976'.
[  291.088119][T16132] bridge29: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  291.118963][T16136] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2979'.
[  291.154225][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2976'.
[  291.177604][T16137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2978'.
[  291.177873][T16132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2978'.
[  291.375200][T16147] netlink: 'syz.0.2983': attribute type 1 has an invalid length.
[  291.389916][   T52] block nbd6: Connection timed out, retrying (0/2 alive)
[  291.393894][   T52] block nbd6: Connection timed out, retrying (0/2 alive)
[  291.396132][   T52] block nbd6: Connection timed out, retrying (0/2 alive)
[  291.398363][   T52] block nbd6: Connection timed out, retrying (0/2 alive)
[  291.401588][   T52] block nbd6: Dead connection, failed to find a fallback
[  291.404286][   T52] block nbd6: shutting down sockets
[  291.411397][T11777] ldm_validate_partition_table(): Disk read failed.
[  291.416427][T11777] Dev nbd6: unable to read RDB block 0
[  291.422853][T11777]  nbd6: unable to read partition table
[  291.433095][T11777] ldm_validate_partition_table(): Disk read failed.
[  291.437794][T11777] Dev nbd6: unable to read RDB block 0
[  291.442689][T11777]  nbd6: unable to read partition table
[  291.521182][ T7346] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  291.530242][T16157] netlink: 'syz.2.2986': attribute type 1 has an invalid length.
[  291.552404][T16157] bond47: entered promiscuous mode
[  291.555571][T16157] 8021q: adding VLAN 0 to HW filter on device bond47
[  291.576398][T16157] bond47: (slave bridge26): making interface the new active one
[  291.579793][T16157] bridge26: entered promiscuous mode
[  291.583077][T16157] bond47: (slave bridge26): Enslaving as an active interface with an up link
[  291.591329][T16165] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2988'.
[  291.647791][T16167] netlink: 'syz.0.2990': attribute type 1 has an invalid length.
[  291.653070][T16167] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2990'.
[  291.656679][T16167] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2990'.
[  291.964956][T16178] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  292.269755][T15697] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.278301][T15697] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.289585][T15697] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.300011][T15697] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.303239][T15697] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.306374][T15697] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.312705][T15697] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  292.319738][T15697] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.588098][T16197] syzkaller1: entered promiscuous mode
[  292.590346][T16197] syzkaller1: entered allmulticast mode
[  292.831313][T16209] ip6_vti0: entered promiscuous mode
[  293.109029][T16214] netlink: 'syz.2.3003': attribute type 7 has an invalid length.
[  293.125307][T16214] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.129524][T16214] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  293.198213][T16214] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.202782][T16214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  293.246430][T16214] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.249835][T16214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  293.303530][T16214] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  293.306710][T16214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  293.377303][T15697] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.380235][T15697] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  293.389790][T15697] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.392696][T15697] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  293.418877][T15697] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.422189][T15697] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  293.432393][T15697] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.435407][T15697] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  294.044240][T16232]  speed is unknown, defaulting to 1000
[  294.192908][T16234] nbd1: detected capacity change from 0 to 63
[  294.200991][T16236] block nbd1: NBD_DISCONNECT
[  294.207636][T16236] block nbd1: Disconnected due to user request.
[  294.208328][T16232] lo speed is unknown, defaulting to 1000
[  294.218632][T16236] block nbd1: shutting down sockets
[  294.243187][T11810] ldm_validate_partition_table(): Disk read failed.
[  294.249836][T11810] Dev nbd1: unable to read RDB block 0
[  294.253078][T11810]  nbd1: unable to read partition table
[  294.262636][T11810] ldm_validate_partition_table(): Disk read failed.
[  294.266330][T11810] Dev nbd1: unable to read RDB block 0
[  294.271832][T11810]  nbd1: unable to read partition table
[  294.362711][T16240] bond48: entered promiscuous mode
[  294.364970][T16240] 8021q: adding VLAN 0 to HW filter on device bond48
[  294.464839][T16244] ip6tnl0: Caught tx_queue_len zero misconfig
[  294.510780][T16243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.201692][T16274] netlink: 'syz.1.3020': attribute type 13 has an invalid length.
[  295.237798][T16271]  speed is unknown, defaulting to 1000
[  295.308351][T16279] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  295.324912][T16279] netlink: 'syz.0.3019': attribute type 3 has an invalid length.
[  295.414039][T16271] lo speed is unknown, defaulting to 1000
[  295.447390][T16287] netlink: 'syz.1.3024': attribute type 10 has an invalid length.
[  295.551326][T16297] bridge39: entered promiscuous mode
[  296.296798][T16320] __nla_validate_parse: 11 callbacks suppressed
[  296.296814][T16320] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3030'.
[  296.541901][T16326] rdma_op ffff888168e629f0 conn xmit_rdma 0000000000000000
[  296.614477][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3035'.
[  297.324531][T16341] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3037'.
[  297.432047][T16343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3038'.
[  297.443327][T16343] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3038'.
[  297.612082][T16358] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3041'.
[  297.639305][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'.
[  297.664536][T16360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'.
[  297.675694][T16353] netlink: 'syz.2.3039': attribute type 11 has an invalid length.
[  297.799477][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'.
[  297.810827][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  297.815760][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  297.822921][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'.
[  297.828764][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  297.833386][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  297.850207][T16364] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.854819][T16364] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  297.954166][T16364] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  297.961239][T16364] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  298.035466][T16368] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.068471][T16368] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  298.077724][T16368] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  298.140392][T16364] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.144551][T16364] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  298.161210][T16373] ipt_ECN: cannot use operation on non-tcp rule
[  298.245072][T16364] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  298.248272][T16364] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  298.399784][T15697] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  298.403072][T15697] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  298.423834][T15697] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  298.432044][T15697] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  298.478198][T15697] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  298.483672][T15697] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  298.503296][T15697] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  298.507435][T15697] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  298.551520][T16395] netlink: 'syz.1.3050': attribute type 1 has an invalid length.
[  298.710707][T16399] netlink: 'syz.0.3054': attribute type 1 has an invalid length.
[  298.726702][T16399] bond69: entered promiscuous mode
[  298.730076][T16399] 8021q: adding VLAN 0 to HW filter on device bond69
[  298.748617][T16399] bond69: (slave bridge41): making interface the new active one
[  298.751755][T16399] bridge41: entered promiscuous mode
[  298.754368][T16399] bond69: (slave bridge41): Enslaving as an active interface with an up link
[  299.037124][T16409] netlink: 'syz.0.3057': attribute type 2 has an invalid length.
[  299.040108][T16409] netlink: 'syz.0.3057': attribute type 9 has an invalid length.
[  299.675494][T16460] tc_dump_action: action bad kind
[  300.029623][T16491] netlink: 'syz.1.3084': attribute type 1 has an invalid length.
[  300.061450][T16491] 8021q: adding VLAN 0 to HW filter on device bond53
[  300.093954][T16494] 8021q: adding VLAN 0 to HW filter on device bond70
[  300.158104][T16494] bond70: (slave veth25): Enslaving as an active interface with an up link
[  300.272915][T16503] bond71: invalid ARP target 0.0.0.0 specified for addition
[  300.275263][T16503] bond71: option arp_ip_target: invalid value (0)
[  300.278445][T16503] bond71 (unregistering): Released all slaves
[  300.463286][T16519] netlink: 'syz.0.3092': attribute type 1 has an invalid length.
[  300.501483][T16519] 8021q: adding VLAN 0 to HW filter on device bond71
[  300.554229][T16524] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  300.565823][T16526] x_tables: duplicate underflow at hook 1
[  300.579008][T16524] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  300.747660][T16541] netlink: 'syz.1.3101': attribute type 1 has an invalid length.
[  301.049262][T16560] bond27: (slave 26): Releasing backup interface
[  301.053168][T16560] bond27: (slave 26): last VLAN challenged slave left bond - VLAN blocking is removed
[  301.061089][T16560] bond67: (slave team_slave_1): Releasing backup interface
[  301.064824][T16560] team_slave_1: left promiscuous mode
[  301.067256][T16560] team_slave_1: left allmulticast mode
[  301.070301][T16560] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  301.244564][T16568] netlink: 'syz.0.3109': attribute type 1 has an invalid length.
[  301.245173][T16569] netlink: 'syz.0.3109': attribute type 1 has an invalid length.
[  301.262440][T16568] bond72: entered promiscuous mode
[  301.264324][T16568] 8021q: adding VLAN 0 to HW filter on device bond72
[  301.405468][T16573]  speed is unknown, defaulting to 1000
[  301.513700][T16573] lo speed is unknown, defaulting to 1000
[  301.524599][T16577] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  301.806549][T16600] openvswitch: netlink: Actions may not be safe on all matching packets
[  301.957739][T16609]  speed is unknown, defaulting to 1000
[  302.135419][T16616] __nla_validate_parse: 11 callbacks suppressed
[  302.135439][T16616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3122'.
[  302.154817][T16609] lo speed is unknown, defaulting to 1000
[  302.230935][T16620] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3123'.
[  302.466134][T16632] ip_vti0: Caught tx_queue_len zero misconfig
[  302.554637][T16633]  speed is unknown, defaulting to 1000
[  302.725806][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'.
[  302.787148][T16645] netlink: 'syz.2.3128': attribute type 11 has an invalid length.
[  302.838223][T16633] lo speed is unknown, defaulting to 1000
[  302.863448][T16656] netlink: 41 bytes leftover after parsing attributes in process `syz.1.3129'.
[  302.876320][T16656] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3129'.
[  302.926516][T16654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3129'.
[  302.929715][T16654] netlink: 261 bytes leftover after parsing attributes in process `syz.1.3129'.
[  303.045257][T16654] bridge30: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  303.147691][T16661] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3131'.
[  303.205284][T16663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3132'.
[  303.215811][T16663] xt_ecn: cannot match TCP bits for non-tcp packets
[  303.658592][T16680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3138'.
[  303.790434][T16685] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  304.018110][T16696] syzkaller0: entered promiscuous mode
[  304.026648][T16696] syzkaller0: entered allmulticast mode
[  306.926285][T16724] bridge0: port 1(erspan0) entered blocking state
[  306.935684][T16724] bridge0: port 1(erspan0) entered disabled state
[  306.941126][T16724] erspan0: entered allmulticast mode
[  306.944252][T16724] erspan0: left allmulticast mode
[  306.952224][T16727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.954995][T16726] syzkaller0: entered promiscuous mode
[  306.958053][T16726] syzkaller0: entered allmulticast mode
[  306.979786][T16726] tipc: Resetting bearer <eth:syzkaller0>
[  306.985988][T16725] tipc: Resetting bearer <eth:syzkaller0>
[  307.004547][T16725] tipc: Disabling bearer <eth:syzkaller0>
[  307.125148][T16735]  speed is unknown, defaulting to 1000
[  307.143115][T16739] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  307.280824][T16735] lo speed is unknown, defaulting to 1000
[  307.294505][T16743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.310179][T16743] syzkaller0: entered promiscuous mode
[  307.313553][T16743] syzkaller0: entered allmulticast mode
[  307.334984][T16743] tipc: Resetting bearer <eth:syzkaller0>
[  307.353068][T16743] tipc: Resetting bearer <eth:syzkaller0>
[  307.374558][T16743] tipc: Disabling bearer <eth:syzkaller0>
[  307.530942][T16747] __nla_validate_parse: 2 callbacks suppressed
[  307.530959][T16747] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3157'.
[  307.637296][T16753] netlink: 'syz.0.3159': attribute type 1 has an invalid length.
[  307.699536][T16753] 8021q: adding VLAN 0 to HW filter on device bond73
[  307.820478][T16757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  308.032831][  T461] block nbd7: Connection timed out, retrying (0/2 alive)
[  308.036877][  T461] block nbd7: Connection timed out, retrying (0/2 alive)
[  308.040321][  T461] block nbd7: Connection timed out, retrying (0/2 alive)
[  308.043306][  T461] block nbd7: Connection timed out, retrying (0/2 alive)
[  308.046435][  T461] block nbd7: Dead connection, failed to find a fallback
[  308.049367][  T461] block nbd7: shutting down sockets
[  308.051442][  T461] blk_print_req_error: 431 callbacks suppressed
[  308.051456][  T461] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  308.058289][  T461] buffer_io_error: 434 callbacks suppressed
[  308.058303][  T461] Buffer I/O error on dev nbd7, logical block 3, async page read
[  308.064240][  T461] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  308.069317][  T461] Buffer I/O error on dev nbd7, logical block 2, async page read
[  308.072515][  T461] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  308.076203][  T461] Buffer I/O error on dev nbd7, logical block 1, async page read
[  308.079758][  T461] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  308.083516][  T461] Buffer I/O error on dev nbd7, logical block 0, async page read
[  308.088642][T15042] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  308.093737][T15042] Buffer I/O error on dev nbd7, logical block 0, async page read
[  308.097025][T15042] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  308.102534][T15042] Buffer I/O error on dev nbd7, logical block 1, async page read
[  308.106261][T15042] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  308.110153][T15042] Buffer I/O error on dev nbd7, logical block 2, async page read
[  308.113603][T15042] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  308.118398][T15042] Buffer I/O error on dev nbd7, logical block 3, async page read
[  308.122175][T15042] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  308.127322][T15042] Buffer I/O error on dev nbd7, logical block 0, async page read
[  308.131232][T15042] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  308.134697][T15042] Buffer I/O error on dev nbd7, logical block 1, async page read
[  308.140242][T15042] ldm_validate_partition_table(): Disk read failed.
[  308.144841][T15042] Dev nbd7: unable to read RDB block 0
[  308.148987][T15042]  nbd7: unable to read partition table
[  308.155182][T15042] ldm_validate_partition_table(): Disk read failed.
[  308.158582][T15042] Dev nbd7: unable to read RDB block 0
[  308.162651][T15042]  nbd7: unable to read partition table
[  308.421307][T16774] netlink: 'syz.1.3166': attribute type 1 has an invalid length.
[  308.444727][T16774] 8021q: adding VLAN 0 to HW filter on device bond54
[  308.484728][T16772] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3165'.
[  308.550708][T16781] netlink: 'syz.0.3167': attribute type 1 has an invalid length.
[  308.554312][T16781] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3167'.
[  308.576799][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'.
[  308.628094][T16788] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3169'.
[  308.636144][T16788] ksmbd: Unknown IPC event: 1, ignore.
[  308.649907][T16788] netlink: 'syz.1.3169': attribute type 1 has an invalid length.
[  308.671253][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3170'.
[  308.789887][T16798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3172'.
[  308.874633][T16807] netlink: 'syz.2.3174': attribute type 1 has an invalid length.
[  308.901609][T16807] bond49: entered promiscuous mode
[  308.907503][T16807] 8021q: adding VLAN 0 to HW filter on device bond49
[  308.942260][T16807] bond49: (slave bridge92): making interface the new active one
[  308.945563][T16807] bridge92: entered promiscuous mode
[  308.950394][T16807] bond49: (slave bridge92): Enslaving as an active interface with an up link
[  308.954036][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'.
[  308.961529][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'.
[  308.964657][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'.
[  309.225502][T16830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.233637][T16829] tipc: Disabling bearer <eth:syzkaller0>
[  309.287000][T16826] bond50: entered promiscuous mode
[  309.288897][T16826] bond50: entered allmulticast mode
[  309.292983][T16826] 8021q: adding VLAN 0 to HW filter on device bond50
[  309.374319][T16833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  309.413058][T16831] can: request_module (can-proto-0) failed.
[  309.474638][T16843] pim6reg: entered allmulticast mode
[  309.478666][T16843] pim6reg: left allmulticast mode
[  310.041542][T16850] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  310.067057][T16857] veth0_macvtap: Caught tx_queue_len zero misconfig
[  310.448164][T16893] netlink: 'syz.1.3197': attribute type 1 has an invalid length.
[  310.483144][T16893] 8021q: adding VLAN 0 to HW filter on device bond56
[  310.561632][T16908] netlink: 'syz.2.3199': attribute type 13 has an invalid length.
[  310.600515][T16908] netlink: 'syz.2.3199': attribute type 13 has an invalid length.
[  310.794781][T16928] netlink: 'syz.2.3203': attribute type 1 has an invalid length.
[  311.183504][T16955] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  311.457348][T16974] pim6reg1: entered promiscuous mode
[  311.459836][T16974] pim6reg1: entered allmulticast mode
[  311.580870][T16974] tipc: Trying to set illegal importance in message
[  311.743872][T16983] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.784717][T16988] netlink: 'syz.2.3213': attribute type 13 has an invalid length.
[  311.791777][T16988] gretap0: refused to change device tx_queue_len
[  311.794620][T16988] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  311.805016][T16990] netlink: 'syz.1.3214': attribute type 11 has an invalid length.
[  311.847514][T16993] sit0: Caught tx_queue_len zero misconfig
[  312.163668][T17012]  speed is unknown, defaulting to 1000
[  312.300313][T17020] block nbd1: server does not support multiple connections per device.
[  312.304072][T17020] block nbd1: shutting down sockets
[  312.305347][T17012] lo speed is unknown, defaulting to 1000
[  312.886894][T17049] __nla_validate_parse: 22 callbacks suppressed
[  312.886912][T17049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3235'.
[  312.913231][T17049] 8021q: adding VLAN 0 to HW filter on device bond52
[  312.920652][T17049] bond52: entered promiscuous mode
[  312.922758][T17049] bond52: entered allmulticast mode
[  312.926900][T17049] 8021q: adding VLAN 0 to HW filter on device bond52
[  312.931529][T17049] team0: Port device bond52 added
[  312.937377][T17049] validate_nla: 1 callbacks suppressed
[  312.937390][T17049] netlink: 'syz.2.3235': attribute type 1 has an invalid length.
[  312.943416][T17049] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3235'.
[  312.953988][T17049] bond46: (slave team_slave_1): Releasing backup interface
[  312.967148][T17049] team_slave_1: entered allmulticast mode
[  312.973132][T17049] bond52: (slave team_slave_1): Enslaving as an active interface with an up link
[  313.010221][T17052] netlink: 'syz.2.3236': attribute type 1 has an invalid length.
[  313.073253][T17057] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3237'.
[  313.113146][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'.
[  313.283153][T17067] netlink: 'syz.2.3241': attribute type 1 has an invalid length.
[  313.311812][T17067] 8021q: adding VLAN 0 to HW filter on device bond54
[  313.324573][T17067] vlan0: entered allmulticast mode
[  313.327408][T17067] bond54: (slave vlan0): Error -34 calling dev_set_mtu
[  313.498093][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'.
[  313.593454][T17079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3244'.
[  313.795506][T17092]  speed is unknown, defaulting to 1000
[  313.910811][T17092] lo speed is unknown, defaulting to 1000
[  313.981899][T17100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3251'.
[  313.998408][T17100] ip6gre3: entered promiscuous mode
[  314.006774][T17100] ip6gre3: entered allmulticast mode
[  314.068173][T17100] netlink: 'syz.0.3251': attribute type 6 has an invalid length.
[  314.072177][T17100] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3251'.
[  314.127091][T17111] netlink: 996 bytes leftover after parsing attributes in process `syz.2.3252'.
[  314.154281][T17112] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  314.165722][T17112] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  314.321779][T17116] netlink: 'syz.2.3253': attribute type 1 has an invalid length.
[  314.435935][T17116] bond55: entered promiscuous mode
[  314.438675][T17116] 8021q: adding VLAN 0 to HW filter on device bond55
[  314.475199][T17126] bond55: (slave bridge93): making interface the new active one
[  314.478351][T17126] bridge93: entered promiscuous mode
[  314.482783][T17126] bond55: (slave bridge93): Enslaving as an active interface with an up link
[  314.612617][T17133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3256'.
[  314.771754][T17145] ipvlan0: entered promiscuous mode
[  314.817431][T17148] netlink: 'syz.0.3261': attribute type 1 has an invalid length.
[  314.885373][T17151] netlink: 'syz.1.3262': attribute type 1 has an invalid length.
[  314.914603][T17151] 8021q: adding VLAN 0 to HW filter on device bond58
[  314.920544][T17155] SET target dimension over the limit!
[  315.001899][T17165] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  315.041708][T17170] netlink: 'syz.0.3268': attribute type 1 has an invalid length.
[  315.093352][T17177] netlink: 'syz.0.3269': attribute type 1 has an invalid length.
[  315.132367][T17177] bond74: entered promiscuous mode
[  315.134813][T17177] 8021q: adding VLAN 0 to HW filter on device bond74
[  315.182377][T17177] bond74: (slave bridge42): making interface the new active one
[  315.186130][T17177] bridge42: entered promiscuous mode
[  315.193814][T17177] bond74: (slave bridge42): Enslaving as an active interface with an up link
[  315.201611][T17181] netlink: 'syz.1.3270': attribute type 10 has an invalid length.
[  315.430457][T17192] 8021q: adding VLAN 0 to HW filter on device bond59
[  315.684819][T17204]  speed is unknown, defaulting to 1000
[  315.947038][T17225] bond75: entered allmulticast mode
[  315.960275][T17225] macvlan6: entered promiscuous mode
[  315.962443][T17225] macvlan6: entered allmulticast mode
[  315.965305][T17225] bond75: entered promiscuous mode
[  315.970519][T17225] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  315.976055][T17225] bond75: left promiscuous mode
[  316.182151][T17204] lo speed is unknown, defaulting to 1000
[  316.186139][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.198543][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  316.203988][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.207163][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  316.223296][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.228284][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  316.232955][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  316.236133][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  316.572252][T17243] block nbd0: reconnected socket
[  316.579533][T17243] block nbd0: reconnected socket
[  316.585625][ T6738] block nbd0: Receive control failed (result -32)
[  316.597568][T14122] block nbd0: Receive control failed (result -32)
[  316.724764][T17253] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  316.791811][T17257] bond76: entered promiscuous mode
[  316.802184][T17257] bond76: entered allmulticast mode
[  316.809513][T17257] bond76: left promiscuous mode
[  316.811200][T17257] bond76: left allmulticast mode
[  316.813510][T17257] 8021q: adding VLAN 0 to HW filter on device bond76
[  317.925575][T17289] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  317.928386][T17289] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  317.976331][T17289]  speed is unknown, defaulting to 1000
[  318.061694][T17294] x_tables: duplicate underflow at hook 1
[  318.106994][T17289] lo speed is unknown, defaulting to 1000
[  318.172623][T17297]  speed is unknown, defaulting to 1000
[  318.228454][T17303] __nla_validate_parse: 66 callbacks suppressed
[  318.228468][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'.
[  318.281379][T17305] block nbd2: reconnected socket
[  318.288914][T14122] block nbd2: Receive control failed (result -32)
[  318.350979][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'.
[  318.360319][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'.
[  318.370667][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'.
[  318.376618][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'.
[  318.382303][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'.
[  318.385464][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'.
[  318.388814][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'.
[  318.392288][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'.
[  318.494066][T17311] ip6tnl9: entered allmulticast mode
[  318.503137][ T5669] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  318.508148][ T5669] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  318.530153][ T7341] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  318.588202][T17302] validate_nla: 3 callbacks suppressed
[  318.588219][T17302] netlink: 'syz.1.3302': attribute type 4 has an invalid length.
[  318.612841][T17302] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3302'.
[  318.666042][T17297] lo speed is unknown, defaulting to 1000
[  318.732038][ T7341] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  318.840286][T17302] pim6reg1: entered promiscuous mode
[  318.843814][T17302] pim6reg1: entered allmulticast mode
[  319.039710][ T7341] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  319.166447][T17341] netlink: 'syz.1.3314': attribute type 11 has an invalid length.
[  319.207617][T17340] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  319.505677][T17351] block nbd1: not configured, cannot reconfigure
[  319.617637][T17353] vlan4: entered allmulticast mode
[  319.620314][T17353] veth0_macvtap: entered allmulticast mode
[  319.899612][T17359] bond77 (unregistering): Released all slaves
[  319.933432][T17365] netlink: 'syz.1.3322': attribute type 1 has an invalid length.
[  320.206631][T17391] wlan0: mtu less than device minimum
[  320.393434][T17408] netlink: 'syz.2.3336': attribute type 18 has an invalid length.
[  320.448080][T17408] netlink: 'syz.2.3336': attribute type 1 has an invalid length.
[  320.451764][T17408] netlink: 'syz.2.3336': attribute type 1 has an invalid length.
[  320.803631][T17418] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  320.806023][T17418] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  320.994583][T17427] bond56: entered promiscuous mode
[  320.996347][T17427] bond56: entered allmulticast mode
[  321.145418][T17432] netlink: 'syz.1.3343': attribute type 3 has an invalid length.
[  321.148990][T17432] netlink: 'syz.1.3343': attribute type 3 has an invalid length.
[  321.242686][T17441] dvmrp8: entered allmulticast mode
[  321.245221][T17443] netlink: 'syz.0.3346': attribute type 32 has an invalid length.
[  321.511540][T17467] netlink: 'syz.0.3355': attribute type 1 has an invalid length.
[  321.528372][T17467] bond77: entered promiscuous mode
[  321.531646][T17467] 8021q: adding VLAN 0 to HW filter on device bond77
[  321.554371][T17467] bond77: (slave bridge44): making interface the new active one
[  321.557683][T17467] bridge44: entered promiscuous mode
[  321.562536][T17467] bond77: (slave bridge44): Enslaving as an active interface with an up link
[  322.031658][T17498] openvswitch: netlink: IP tunnel dst address not specified
[  322.193363][    C1] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
[  322.318739][T17516] netem: change failed
[  322.355453][T17517]  speed is unknown, defaulting to 1000
[  322.539505][T17517] lo speed is unknown, defaulting to 1000
[  322.563412][T17539] 
[  322.564248][T17539] ======================================================
[  322.566381][T17539] WARNING: possible circular locking dependency detected
[  322.568633][T17539] syzkaller #0 Not tainted
[  322.570495][T17539] ------------------------------------------------------
[  322.572767][T17539] syz.1.3377/17539 is trying to acquire lock:
[  322.574567][T17539] ffff88816070db98 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300
[  322.577153][T17539] 
[  322.577153][T17539] but task is already holding lock:
[  322.579333][T17539] ffff888169d82ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  322.582394][T17539] 
[  322.582394][T17539] which lock already depends on the new lock.
[  322.582394][T17539] 
[  322.586393][T17539] 
[  322.586393][T17539] the existing dependency chain (in reverse order) is:
[  322.588968][T17539] 
[  322.588968][T17539] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  322.591294][T17539]        __mutex_lock+0x1a3/0x1550
[  322.592840][T17539]        elevator_change+0x1b3/0x450
[  322.594402][T17539]        elevator_set_none+0xb5/0x140
[  322.596156][T17539]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  322.597960][T17539]        nbd_start_device+0x17f/0xb10
[  322.599618][T17539]        nbd_genl_connect+0x165b/0x1cf0
[  322.601523][T17539]        genl_family_rcv_msg_doit+0x22a/0x330
[  322.603449][T17539]        genl_rcv_msg+0x61c/0x7a0
[  322.604954][T17539]        netlink_rcv_skb+0x232/0x4b0
[  322.606688][T17539]        genl_rcv+0x28/0x40
[  322.608254][T17539]        netlink_unicast+0x75c/0x8e0
[  322.609926][T17539]        netlink_sendmsg+0x813/0xb40
[  322.611508][T17539]        ____sys_sendmsg+0x972/0x9f0
[  322.613048][T17539]        ___sys_sendmsg+0x2a5/0x360
[  322.614594][T17539]        __x64_sys_sendmsg+0x1bd/0x2a0
[  322.616199][T17539]        do_syscall_64+0x15f/0xf80
[  322.617710][T17539]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.619562][T17539] 
[  322.619562][T17539] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  322.622059][T17539]        blk_alloc_queue+0x546/0x680
[  322.623589][T17539]        __blk_mq_alloc_disk+0x197/0x390
[  322.625232][T17539]        nbd_dev_add+0x499/0xb50
[  322.626765][T17539]        nbd_init+0x168/0x1f0
[  322.628150][T17539]        do_one_initcall+0x250/0x870
[  322.629684][T17539]        do_initcall_level+0x104/0x190
[  322.631512][T17539]        do_initcalls+0x59/0xa0
[  322.632938][T17539]        kernel_init_freeable+0x2a6/0x3e0
[  322.634559][T17539]        kernel_init+0x1d/0x1d0
[  322.636013][T17539]        ret_from_fork+0x514/0xb70
[  322.637610][T17539]        ret_from_fork_asm+0x1a/0x30
[  322.639202][T17539] 
[  322.639202][T17539] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  322.641455][T17539]        fs_reclaim_acquire+0x71/0x100
[  322.643104][T17539]        __kmalloc_cache_node_noprof+0x46/0x6b0
[  322.645118][T17539]        create_worker+0x113/0x7e0
[  322.646667][T17539]        workqueue_prepare_cpu+0xe4/0x170
[  322.648387][T17539]        cpuhp_invoke_callback+0x445/0x860
[  322.650277][T17539]        _cpu_up+0x2ce/0x5b0
[  322.651673][T17539]        cpu_up+0x1d2/0x220
[  322.653002][T17539]        cpuhp_bringup_mask+0xb2/0x1a0
[  322.654598][T17539]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  322.656527][T17539]        bringup_nonboot_cpus+0x17/0x30
[  322.658332][T17539]        smp_init+0x32/0x110
[  322.659794][T17539]        kernel_init_freeable+0x288/0x3e0
[  322.661617][T17539]        kernel_init+0x1d/0x1d0
[  322.663211][T17539]        ret_from_fork+0x514/0xb70
[  322.664815][T17539]        ret_from_fork_asm+0x1a/0x30
[  322.666310][T17539] 
[  322.666310][T17539] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[  322.668677][T17539]        cpus_read_lock+0x42/0x160
[  322.670104][T17539]        static_key_slow_inc+0x12/0x30
[  322.671734][T17539]        nbd_genl_reconfigure+0x132f/0x1ea0
[  322.673452][T17539]        genl_family_rcv_msg_doit+0x22a/0x330
[  322.675222][T17539]        genl_rcv_msg+0x61c/0x7a0
[  322.676780][T17539]        netlink_rcv_skb+0x232/0x4b0
[  322.678375][T17539]        genl_rcv+0x28/0x40
[  322.679707][T17539]        netlink_unicast+0x75c/0x8e0
[  322.681276][T17539]        netlink_sendmsg+0x813/0xb40
[  322.682867][T17539]        ____sys_sendmsg+0x972/0x9f0
[  322.684442][T17539]        ___sys_sendmsg+0x2a5/0x360
[  322.686050][T17539]        __x64_sys_sendmsg+0x1bd/0x2a0
[  322.687783][T17539]        do_syscall_64+0x15f/0xf80
[  322.689310][T17539]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.691270][T17539] 
[  322.691270][T17539] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  322.693626][T17539]        __mutex_lock+0x1a3/0x1550
[  322.695124][T17539]        nbd_queue_rq+0x37b/0x1100
[  322.696586][T17539]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  322.698946][T17539]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  322.701145][T17539]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  322.703222][T17539]        blk_mq_run_hw_queue+0x348/0x4f0
[  322.705032][T17539]        blk_mq_dispatch_list+0xd16/0xe10
[  322.707110][T17539]        blk_mq_flush_plug_list+0x48d/0x570
[  322.709037][T17539]        __blk_flush_plug+0x3ed/0x4d0
[  322.710683][T17539]        __submit_bio+0x28d/0x580
[  322.712254][T17539]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  322.714328][T17539]        block_read_full_folio+0x599/0x830
[  322.716321][T17539]        filemap_read_folio+0x137/0x3b0
[  322.718174][T17539]        do_read_cache_folio+0x358/0x590
[  322.720163][T17539]        read_part_sector+0xb6/0x2b0
[  322.722015][T17539]        adfspart_check_ICS+0xb1/0x960
[  322.723947][T17539]        bdev_disk_changed+0x817/0x1770
[  322.725812][T17539]        blkdev_get_whole+0x380/0x510
[  322.727581][T17539]        bdev_open+0x31e/0xd30
[  322.729129][T17539]        blkdev_open+0x470/0x610
[  322.730869][T17539]        do_dentry_open+0x785/0x14e0
[  322.733124][T17539]        vfs_open+0x3b/0x340
[  322.734684][T17539]        path_openat+0x2e08/0x3860
[  322.736465][T17539]        do_file_open+0x23e/0x4a0
[  322.738487][T17539]        do_sys_openat2+0x113/0x200
[  322.740116][T17539]        __x64_sys_openat+0x138/0x170
[  322.741767][T17539]        do_syscall_64+0x15f/0xf80
[  322.743386][T17539]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.745343][T17539] 
[  322.745343][T17539] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  322.747586][T17539]        __mutex_lock+0x1a3/0x1550
[  322.749105][T17539]        nbd_queue_rq+0xc6/0x1100
[  322.750597][T17539]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  322.752507][T17539]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  322.754633][T17539]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  322.757331][T17539]        blk_mq_run_hw_queue+0x348/0x4f0
[  322.759071][T17539]        blk_mq_dispatch_list+0xd16/0xe10
[  322.760810][T17539]        blk_mq_flush_plug_list+0x48d/0x570
[  322.762770][T17539]        __blk_flush_plug+0x3ed/0x4d0
[  322.764453][T17539]        __submit_bio+0x28d/0x580
[  322.766018][T17539]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  322.768033][T17539]        block_read_full_folio+0x599/0x830
[  322.770190][T17539]        filemap_read_folio+0x137/0x3b0
[  322.772070][T17539]        do_read_cache_folio+0x358/0x590
[  322.773794][T17539]        read_part_sector+0xb6/0x2b0
[  322.775445][T17539]        adfspart_check_ICS+0xb1/0x960
[  322.777154][T17539]        bdev_disk_changed+0x817/0x1770
[  322.778959][T17539]        blkdev_get_whole+0x380/0x510
[  322.780693][T17539]        bdev_open+0x31e/0xd30
[  322.782301][T17539]        blkdev_open+0x470/0x610
[  322.783918][T17539]        do_dentry_open+0x785/0x14e0
[  322.785640][T17539]        vfs_open+0x3b/0x340
[  322.787073][T17539]        path_openat+0x2e08/0x3860
[  322.788615][T17539]        do_file_open+0x23e/0x4a0
[  322.790202][T17539]        do_sys_openat2+0x113/0x200
[  322.791792][T17539]        __x64_sys_openat+0x138/0x170
[  322.793405][T17539]        do_syscall_64+0x15f/0xf80
[  322.795136][T17539]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.797765][T17539] 
[  322.797765][T17539] -> #0 (set->srcu){.+.+}-{0:0}:
[  322.799931][T17539]        __lock_acquire+0x15a5/0x2cf0
[  322.801548][T17539]        lock_sync+0x9d/0x120
[  322.802997][T17539]        __synchronize_srcu+0xca/0x300
[  322.804728][T17539]        elevator_switch+0x1e8/0x7a0
[  322.806332][T17539]        elevator_change+0x2cc/0x450
[  322.808012][T17539]        elevator_set_default+0x36c/0x430
[  322.810165][T17539]        blk_register_queue+0x3e9/0x4e0
[  322.812176][T17539]        __add_disk+0x677/0xd50
[  322.814071][T17539]        add_disk_fwnode+0xfb/0x480
[  322.815641][T17539]        nbd_dev_add+0x72c/0xb50
[  322.817226][T17539]        nbd_genl_connect+0x962/0x1cf0
[  322.818988][T17539]        genl_family_rcv_msg_doit+0x22a/0x330
[  322.820945][T17539]        genl_rcv_msg+0x61c/0x7a0
[  322.822513][T17539]        netlink_rcv_skb+0x232/0x4b0
[  322.824077][T17539]        genl_rcv+0x28/0x40
[  322.825409][T17539]        netlink_unicast+0x75c/0x8e0
[  322.826967][T17539]        netlink_sendmsg+0x813/0xb40
[  322.828482][T17539]        ____sys_sendmsg+0x972/0x9f0
[  322.830470][T17539]        ___sys_sendmsg+0x2a5/0x360
[  322.831987][T17539]        __x64_sys_sendmsg+0x1bd/0x2a0
[  322.833471][T17539]        do_syscall_64+0x15f/0xf80
[  322.834915][T17539]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.836773][T17539] 
[  322.836773][T17539] other info that might help us debug this:
[  322.836773][T17539] 
[  322.839687][T17539] Chain exists of:
[  322.839687][T17539]   set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock
[  322.839687][T17539] 
[  322.843601][T17539]  Possible unsafe locking scenario:
[  322.843601][T17539] 
[  322.845743][T17539]        CPU0                    CPU1
[  322.847292][T17539]        ----                    ----
[  322.848789][T17539]   lock(&q->elevator_lock);
[  322.850053][T17539]                                lock(&q->q_usage_counter(io)#49);
[  322.852279][T17539]                                lock(&q->elevator_lock);
[  322.854301][T17539]   sync(set->srcu);
[  322.855447][T17539] 
[  322.855447][T17539]  *** DEADLOCK ***
[  322.855447][T17539] 
[  322.857892][T17539] 6 locks held by syz.1.3377/17539:
[  322.859390][T17539]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  322.861919][T17539]  #1: ffffffff8fe3f900 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  322.864795][T17539]  #2: ffff8881a65db9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480
[  322.868244][T17539]  #3: ffff888169d82b50 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0
[  322.871352][T17539]  #4: ffff888169d825d8 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  322.875081][T17539]  #5: ffff888169d82ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  322.877970][T17539] 
[  322.877970][T17539] stack backtrace:
[  322.879725][T17539] CPU: 1 UID: 0 PID: 17539 Comm: syz.1.3377 Not tainted syzkaller #0 PREEMPT(full) 
[  322.879736][T17539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  322.879744][T17539] Call Trace:
[  322.879749][T17539]  <TASK>
[  322.879756][T17539]  dump_stack_lvl+0xe8/0x150
[  322.879769][T17539]  print_circular_bug+0x2e1/0x300
[  322.879782][T17539]  check_noncircular+0x12e/0x150
[  322.879795][T17539]  __lock_acquire+0x15a5/0x2cf0
[  322.879807][T17539]  ? lockdep_unlock+0x5d/0xd0
[  322.879814][T17539]  ? __lock_acquire+0x146e/0x2cf0
[  322.879825][T17539]  ? __lock_acquire+0x146e/0x2cf0
[  322.879834][T17539]  ? __synchronize_srcu+0xb6/0x300
[  322.879842][T17539]  lock_sync+0x9d/0x120
[  322.879849][T17539]  ? __synchronize_srcu+0xb6/0x300
[  322.879858][T17539]  __synchronize_srcu+0xca/0x300
[  322.879866][T17539]  ? do_raw_spin_lock+0x12b/0x2f0
[  322.879876][T17539]  ? __pfx___synchronize_srcu+0x10/0x10
[  322.879886][T17539]  ? kvm_clock_get_cycles+0x47/0x60
[  322.879897][T17539]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  322.879909][T17539]  ? synchronize_srcu+0x20d/0x270
[  322.879918][T17539]  elevator_switch+0x1e8/0x7a0
[  322.879929][T17539]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  322.879938][T17539]  elevator_change+0x2cc/0x450
[  322.879948][T17539]  ? do_raw_spin_unlock+0x4d/0x210
[  322.879960][T17539]  elevator_set_default+0x36c/0x430
[  322.879972][T17539]  ? __pfx_elevator_set_default+0x10/0x10
[  322.879985][T17539]  ? disk_register_independent_access_ranges+0x2db/0x380
[  322.879996][T17539]  ? blk_crypto_sysfs_register+0x11c/0x170
[  322.880007][T17539]  blk_register_queue+0x3e9/0x4e0
[  322.880016][T17539]  __add_disk+0x677/0xd50
[  322.880025][T17539]  ? down_read+0x270/0x2e0
[  322.880035][T17539]  add_disk_fwnode+0xfb/0x480
[  322.880045][T17539]  nbd_dev_add+0x72c/0xb50
[  322.880055][T17539]  ? __pfx_nbd_dev_add+0x10/0x10
[  322.880068][T17539]  ? bpf_lsm_capable+0x9/0x20
[  322.880077][T17539]  ? security_capable+0x7e/0x2c0
[  322.880087][T17539]  ? radix_tree_lookup+0x25c/0x290
[  322.880098][T17539]  nbd_genl_connect+0x962/0x1cf0
[  322.880107][T17539]  ? __pfx___nla_validate_parse+0x10/0x10
[  322.880121][T17539]  ? __pfx_nbd_genl_connect+0x10/0x10
[  322.880130][T17539]  ? rcu_is_watching+0x15/0xb0
[  322.880139][T17539]  ? trace_kmalloc+0x2a/0xf0
[  322.880151][T17539]  ? __nla_parse+0x40/0x60
[  322.880162][T17539]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  322.880173][T17539]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  322.880191][T17539]  genl_family_rcv_msg_doit+0x22a/0x330
[  322.880204][T17539]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  322.880216][T17539]  ? __lock_acquire+0x6b5/0x2cf0
[  322.880227][T17539]  genl_rcv_msg+0x61c/0x7a0
[  322.880237][T17539]  ? __pfx_genl_rcv_msg+0x10/0x10
[  322.880246][T17539]  ? __pfx_nbd_genl_connect+0x10/0x10
[  322.880257][T17539]  netlink_rcv_skb+0x232/0x4b0
[  322.880270][T17539]  ? __pfx_genl_rcv_msg+0x10/0x10
[  322.880279][T17539]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  322.880294][T17539]  ? down_read+0x270/0x2e0
[  322.880302][T17539]  ? genl_rcv+0xd/0x40
[  322.880311][T17539]  genl_rcv+0x28/0x40
[  322.880319][T17539]  netlink_unicast+0x75c/0x8e0
[  322.880332][T17539]  netlink_sendmsg+0x813/0xb40
[  322.880345][T17539]  ? __pfx_netlink_sendmsg+0x10/0x10
[  322.880356][T17539]  ? aa_sock_msg_perm+0xf1/0x1b0
[  322.880366][T17539]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  322.880378][T17539]  ____sys_sendmsg+0x972/0x9f0
[  322.880390][T17539]  ? __might_fault+0xaf/0x130
[  322.880401][T17539]  ? __pfx_____sys_sendmsg+0x10/0x10
[  322.880414][T17539]  ? import_iovec+0x73/0xa0
[  322.880425][T17539]  ___sys_sendmsg+0x2a5/0x360
[  322.880436][T17539]  ? __lock_acquire+0x6b5/0x2cf0
[  322.880444][T17539]  ? __pfx____sys_sendmsg+0x10/0x10
[  322.880457][T17539]  ? futex_wake+0x4ac/0x580
[  322.880473][T17539]  ? __fget_files+0x2a/0x420
[  322.880482][T17539]  ? __fget_files+0x3a0/0x420
[  322.880494][T17539]  __x64_sys_sendmsg+0x1bd/0x2a0
[  322.880506][T17539]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  322.880519][T17539]  ? rcu_is_watching+0x15/0xb0
[  322.880529][T17539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.880538][T17539]  do_syscall_64+0x15f/0xf80
[  322.880545][T17539]  ? trace_irq_disable+0x3b/0x140
[  322.880558][T17539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.880566][T17539] RIP: 0033:0x7f6a8799cdd9
[  322.880577][T17539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.880585][T17539] RSP: 002b:00007f6a8884c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  322.880595][T17539] RAX: ffffffffffffffda RBX: 00007f6a87c15fa0 RCX: 00007f6a8799cdd9
[  322.880601][T17539] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006
[  322.880607][T17539] RBP: 00007f6a87a32d69 R08: 0000000000000000 R09: 0000000000000000
[  322.880612][T17539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.880618][T17539] R13: 00007f6a87c16038 R14: 00007f6a87c15fa0 R15: 00007ffe25d7dd18
[  322.880629][T17539]  </TASK>
[  329.789288][    C1] ip6_tunnel: ip6tnl9 xmit: Local address not yet configured!
